Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          uOzsoZnVMYroqYuQgTQ/jmzheipBi8W3RyNMvA3TmAU=
Subject key identifier:   74:33:AD:80:AC:8A:A5:8C:4D:9F:D2:33:B2:03:8C:A6:9D:21:BB:56
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       0198D5835E00FD0DAF4CAABAF62F7AE3C1F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          0197
Signing time:             Sat 23 Aug 2025 06:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:12 +0000
Files and hashes:         1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=)
                          2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: yMpLACAZDb5A7XlBzTFSa0WtLeoL7enIHhD61RsOMSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:5e:00:fd:0d:af:4c:aa:ba:f6:2f:7a:e3:c1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Aug 23 06:00:12 2025 GMT
            Not After : Aug 24 06:00:12 2025 GMT
        Subject: CN=7433ad80ac8aa58c4d9fd233b2038ca69d21bb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:68:11:46:f4:6d:b1:81:18:0e:bb:92:94:
                    1a:f5:be:71:ec:c0:d4:09:52:20:24:3c:a3:9d:d7:
                    69:99:5c:b0:3b:a7:6c:a7:6b:91:e3:4c:d3:ea:22:
                    95:a2:fa:3c:dc:0f:6a:08:d1:2c:91:6e:f2:17:19:
                    1e:e1:cd:6f:1f:c2:ba:14:8b:93:a7:a9:73:0b:ae:
                    a5:13:36:bd:ce:52:a9:86:5d:36:72:52:da:fe:b9:
                    ae:d0:bd:79:17:8a:7e:a3:61:6b:5c:ec:44:dc:64:
                    4a:0e:22:19:00:bf:f3:72:78:27:cd:07:71:bc:56:
                    0f:0c:dd:80:48:3b:c9:f9:61:40:ce:5d:cc:08:f5:
                    7f:85:af:2c:d9:f9:90:c5:ea:71:9f:f5:a3:a0:53:
                    38:94:a6:c8:09:eb:e6:98:37:df:dd:f4:38:a3:b6:
                    d0:62:a1:45:dd:69:7a:65:12:04:c9:98:a6:43:5c:
                    ad:3c:76:fa:70:d6:9a:22:59:84:eb:bf:f8:7a:9f:
                    80:e5:b8:4c:db:ec:46:2d:d3:83:c5:bf:9b:93:66:
                    3b:42:f5:de:94:a8:f2:30:a6:af:72:f4:b4:bc:e0:
                    44:f9:07:d6:f7:76:7e:58:31:49:8f:88:23:1e:70:
                    89:68:35:70:53:39:be:e8:b6:c2:68:34:66:c5:81:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:AD:80:AC:8A:A5:8C:4D:9F:D2:33:B2:03:8C:A6:9D:21:BB:56
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:40:fd:1b:39:f2:80:40:da:0c:6a:d5:1b:b9:21:55:6f:43:
         24:a1:03:31:4f:3e:c8:4f:ca:3d:56:27:20:d4:0e:c6:5c:a6:
         7f:29:4f:0c:35:51:6e:9a:55:a6:1f:95:fc:db:ba:f2:84:2b:
         07:8c:f0:8f:03:05:de:b0:f4:00:38:f7:6b:f7:69:93:12:83:
         ad:da:a1:24:13:54:1d:a7:00:80:90:60:6b:6d:3c:76:dc:96:
         11:62:5a:fb:7c:9f:64:f0:be:cd:4e:2c:c4:f5:c3:16:51:8d:
         aa:b1:0c:e5:b7:44:63:8b:7e:85:58:9b:11:0f:86:fb:3f:9b:
         eb:9c:9d:db:72:b6:d5:9b:21:ea:cf:a1:ac:3e:27:20:b4:b0:
         29:c3:76:8f:e8:f3:da:c8:bf:6a:49:fa:3f:6d:56:80:9f:6f:
         d1:d4:8c:f2:24:39:5e:cd:5c:e7:15:9a:91:34:70:1a:35:5c:
         3b:e8:91:c6:23:06:b6:fa:93:cd:27:55:38:6e:88:95:db:fe:
         cc:58:a9:22:dd:e1:62:be:1a:73:9c:de:8d:6b:3a:23:00:f5:
         cf:1d:44:4f:6e:22:ec:65:60:1a:eb:59:3f:c1:3e:4a:14:31:
         c3:77:1c:65:86:0b:0d:e0:28:b2:3d:94:26:79:6c:90:dd:00:
         a0:8c:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:33 2025 by rpki-client