Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          ZIyZRpdX7o+gapEcttJEhpmHITSCQ5TJmT7MjJnl98I=
Subject key identifier:   0C:89:61:F5:5A:8C:F3:3A:E2:D7:C1:A1:0A:C5:74:4A:49:9D:90:20
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       0198D583E66A1E01BD5EFE712305AC2E8FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          07A4
Signing time:             Sat 23 Aug 2025 06:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:47 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: yXfMjH1S+t+HrpnPo0U/XzKawhVwA8wf10VLx1iDNQ4=)
                          2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e6:6a:1e:01:bd:5e:fe:71:23:05:ac:2e:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Aug 23 06:00:47 2025 GMT
            Not After : Aug 24 06:00:47 2025 GMT
        Subject: CN=0c8961f55a8cf33ae2d7c1a10ac5744a499d9020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:db:e9:4a:59:33:56:7d:4a:ca:22:86:10:
                    54:c1:28:3a:c9:99:db:61:1c:4b:21:f7:f5:c2:88:
                    68:69:0b:7a:ae:3e:cc:19:d5:22:94:be:bb:b0:5b:
                    47:62:73:05:59:1a:15:33:67:3a:45:1f:0f:19:1b:
                    76:da:dd:d2:d4:8b:cc:82:6a:f8:9b:52:9c:96:35:
                    bd:65:e4:2d:1c:d7:90:d6:65:c7:99:41:c2:b6:e1:
                    ef:92:a1:86:a1:48:5e:24:ed:7e:21:07:d6:3f:4f:
                    4d:c1:56:e2:82:f3:ae:87:89:b9:3a:09:9d:b9:a6:
                    69:9d:f0:bf:b8:9d:26:57:19:c8:59:c3:f8:3e:7e:
                    d8:9a:1e:ef:c8:9d:57:60:28:cf:d6:3c:f8:3a:10:
                    fe:2c:0d:44:b1:98:4f:b8:f7:82:8a:da:fd:af:38:
                    73:00:19:af:81:aa:91:09:a1:64:c0:35:0f:21:8c:
                    7d:4d:7d:f0:4b:5e:4c:a2:21:c3:b5:15:f7:98:7e:
                    25:33:30:f4:ae:87:62:83:60:c2:ba:e8:cd:8b:92:
                    81:ee:cc:c3:d4:62:e5:0a:8d:50:e3:9a:de:fe:6c:
                    04:9f:42:91:33:bd:b3:37:02:dd:98:fb:51:5f:28:
                    3c:79:dc:87:d9:42:31:e0:6d:6f:1b:58:6c:90:f6:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:89:61:F5:5A:8C:F3:3A:E2:D7:C1:A1:0A:C5:74:4A:49:9D:90:20
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a9:68:ff:97:c7:58:75:7d:62:d5:11:3f:04:55:ca:98:ee:
         02:1a:d3:19:0d:43:ca:a8:85:2e:6e:d7:8d:2e:ef:63:6f:67:
         33:f1:df:c6:01:12:79:3e:fd:36:19:08:e2:a3:5f:96:48:92:
         86:ae:9d:ba:ce:e4:2e:c2:e3:fd:ee:ba:2d:67:0a:3b:b1:04:
         46:c1:6e:53:50:f3:cd:61:3f:6b:c7:83:bd:3d:74:37:e0:8e:
         e3:83:01:61:e2:0b:44:a2:53:5a:6a:03:07:cf:ce:75:56:59:
         82:f2:21:42:b0:c3:85:2c:3e:9f:f1:cc:5d:c0:05:bd:49:fd:
         59:35:29:7f:80:cc:14:f0:3c:34:7f:91:04:18:57:86:d5:77:
         7c:68:d1:f1:7c:8c:ef:f8:48:b0:ee:b0:d8:9c:76:7f:28:28:
         78:e6:32:64:aa:33:02:3b:fd:74:8c:51:00:5c:5c:b2:30:d3:
         ea:bb:13:70:bc:9b:b0:45:22:82:63:23:3d:1a:ba:3e:48:1e:
         04:e6:0e:39:d6:8b:1c:21:91:3a:bb:90:ec:92:a1:f6:ae:76:
         24:08:0e:4a:c6:fe:f8:76:30:5b:a8:37:9d:28:28:e3:a6:14:
         3e:8f:71:5d:a6:9c:5c:8e:13:26:75:bc:36:d6:cb:ca:a2:03:
         f3:e0:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:51 2025 by rpki-client