Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File:                     ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier:          xCZbQYHfmWCQVgEdvt6MbSxz8sb3CwkbR4WTBPCelaQ=
Subject key identifier:   97:E5:EA:D5:14:F6:67:C7:C2:E1:B2:EC:FB:6D:05:26:7C:DB:6A:8C
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       0198D473E47888EBC18C10E216277E6023FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number:          06BB
Signing time:             Sat 23 Aug 2025 01:03:41 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:41 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:41 +0000
Files and hashes:         1: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: Xg1HhzBSBrR5dsz8yAZOwu8drmsOxmPq/UXKbcXC4Mc=)
                          2: yGEgCYl8bZ9Zznwa_NCt-fjvfH0.roa (hash: tqsjDiQKQV8NCrndn0YK64CRZXV/LsyL/cUUrtUlQAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:e4:78:88:eb:c1:8c:10:e2:16:27:7e:60:23:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Aug 23 01:03:41 2025 GMT
            Not After : Aug 24 01:03:41 2025 GMT
        Subject: CN=97e5ead514f667c7c2e1b2ecfb6d05267cdb6a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:71:4b:a6:d7:79:e8:f3:17:f3:83:3e:17:
                    a2:e1:2c:b2:c4:30:f0:cf:11:1f:43:1a:43:e4:5f:
                    fa:41:d2:b7:79:c6:57:59:fe:8b:e4:a6:ae:6d:f1:
                    d2:76:1e:da:ed:78:2c:2a:17:d7:78:b8:e0:e5:f4:
                    11:68:d5:b0:fb:1a:60:4f:ff:f8:2a:76:6c:80:f8:
                    a7:69:76:2f:18:f7:cb:cc:70:05:75:1a:f8:b8:d7:
                    59:b8:d0:5f:43:42:bb:24:4c:b3:3d:a1:a9:9c:06:
                    de:28:29:37:90:8f:f0:e8:ed:a9:39:ca:68:23:43:
                    c5:e6:44:6d:ba:9f:54:9f:81:17:84:92:e7:47:87:
                    4d:b3:50:03:c3:18:b5:b8:4b:76:73:2e:6d:a2:13:
                    e6:72:0e:d8:d4:db:c5:b5:6d:9d:e4:70:8f:0a:f6:
                    51:ef:ea:35:bc:bf:1d:6a:f3:bb:45:1f:b4:8b:89:
                    55:a5:2c:86:17:b1:c3:35:18:fb:9a:89:aa:2d:1d:
                    8b:fa:08:be:09:3d:81:f8:2c:64:ca:1d:19:4b:1e:
                    ab:5f:56:7d:dd:a2:d6:29:1e:d2:73:a7:4e:08:f9:
                    7e:85:4b:01:25:4f:d1:31:12:b3:86:9a:a8:c3:de:
                    11:11:44:ab:fb:d9:36:c0:aa:18:94:03:7e:af:91:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E5:EA:D5:14:F6:67:C7:C2:E1:B2:EC:FB:6D:05:26:7C:DB:6A:8C
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f5:c1:fc:b1:2c:b6:e0:7e:f3:f1:62:af:0f:05:54:67:0b:
         77:fa:7b:a4:a2:d2:1c:b2:24:b8:ac:c8:bd:59:d6:a7:c6:5c:
         d9:32:4d:7f:b3:20:c3:7e:37:15:f2:45:39:1e:97:0d:f7:a4:
         3b:cc:77:69:21:a9:91:48:7f:75:47:73:2a:35:cf:7e:b0:18:
         38:97:53:c5:3c:ee:c2:73:ab:47:86:9f:c6:b9:f0:a3:b5:f0:
         84:98:fc:c4:8a:1f:20:4b:67:d1:8c:0f:c4:31:d4:6c:0b:eb:
         ff:30:7a:92:5b:78:1c:59:fc:5d:ba:d3:ce:b6:9b:cf:cc:e4:
         7a:35:c0:48:cb:85:40:c1:bb:fd:9e:fd:bb:d3:ce:21:fe:ff:
         e0:fa:8d:03:d6:f1:6d:60:f0:05:73:77:4a:7c:d2:05:6a:96:
         ca:c8:37:b7:20:42:fd:d4:eb:31:99:3d:d5:db:8b:20:33:f8:
         d5:db:77:47:26:b1:a1:34:48:56:8b:d5:4e:bb:08:06:72:a5:
         c1:c5:5f:03:b8:55:04:14:0e:01:24:fd:9f:15:90:bf:f4:52:
         55:4b:65:94:6c:36:ac:15:56:7a:52:5f:47:c3:44:e6:1e:66:
         6c:5b:fc:9c:54:f2:b6:03:1c:61:b3:12:c9:f2:f6:41:ca:fb:
         97:72:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:17 2025 by rpki-client