Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File:                     bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier:          DIkSKHFI4m5jPHIN9AZ6hd0x3MB4S5wbcyTTlRIAJR0=
Subject key identifier:   E9:DF:20:07:E3:30:A2:CE:F8:47:29:B7:35:BF:63:E6:33:F8:9E:5C
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer:       /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial:       0198D47498643D2A5A05B1BE0F343AFFAAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 01:04:27 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:27 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:27 +0000
Files and hashes:         1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: HmiwNYomRMaQ2eZYtz3BIoSUglNpkSkCZ914iBkf/b4=)
                          2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:98:64:3d:2a:5a:05:b1:be:0f:34:3a:ff:aa:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
        Validity
            Not Before: Aug 23 01:04:27 2025 GMT
            Not After : Aug 24 01:04:27 2025 GMT
        Subject: CN=e9df2007e330a2cef84729b735bf63e633f89e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:ee:12:75:eb:08:86:74:0a:fc:10:d5:62:
                    a4:21:82:a3:a0:0d:8c:ed:ec:ac:fe:9e:15:ad:e5:
                    7d:eb:f0:d2:96:dc:c9:3e:39:ea:2b:bd:3c:7f:53:
                    f5:11:da:7b:31:a6:b9:39:9f:1e:08:7f:da:14:c8:
                    39:9b:87:b7:59:50:ff:73:b5:24:d1:e5:bf:0b:7f:
                    fd:2f:03:83:cc:50:80:db:53:e2:cb:b1:45:22:25:
                    7d:ef:fe:49:f5:a8:6b:3e:05:7e:cf:ed:11:df:b7:
                    4d:11:ed:fa:46:97:38:13:d2:b3:06:56:56:f7:c5:
                    e5:29:2d:4e:2c:60:ae:de:7f:7f:4b:36:bd:e5:ec:
                    1e:5d:7e:67:9c:a1:bf:bf:5a:38:79:a3:b4:d9:8e:
                    85:83:b0:62:45:b5:06:22:e6:70:58:95:b8:5c:31:
                    99:7f:2e:48:7a:e4:ec:3d:47:ee:2d:3b:d4:6f:93:
                    8f:6a:0e:9b:02:65:26:f5:a3:95:8d:54:61:88:87:
                    c4:8a:6e:c6:96:88:4c:82:1e:22:ba:02:02:41:18:
                    7a:5a:93:7a:ed:1a:12:75:04:cd:9d:05:1f:4d:55:
                    39:c9:7a:9a:3e:77:cb:ce:38:73:dc:bb:9c:75:72:
                    80:8f:1d:6d:74:59:87:c6:f5:9a:8b:e6:67:f9:38:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:20:07:E3:30:A2:CE:F8:47:29:B7:35:BF:63:E6:33:F8:9E:5C
            X509v3 Authority Key Identifier:
                keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8d:c1:c8:2b:49:9f:71:b6:c8:87:4f:a1:05:56:66:73:64:
         57:a4:b1:08:d4:46:fe:35:6f:9f:12:f3:0d:e6:2e:99:1e:1d:
         52:ee:ff:c2:ee:7e:82:49:cb:98:5f:84:d2:64:48:ff:0b:1d:
         09:ec:bb:b4:00:3c:93:9c:54:72:a4:e0:be:f3:8b:b6:6f:f2:
         51:d6:07:a8:10:eb:79:de:cc:e2:2a:9c:83:f2:9d:48:32:26:
         22:6d:81:06:95:3d:36:94:75:c3:5c:74:7c:f0:b4:e7:51:71:
         f3:7d:21:1c:b3:9f:2e:e5:6f:5a:fd:ab:e0:6a:de:d2:13:4b:
         ad:ee:ba:61:09:59:b2:94:65:c8:1b:b0:73:c8:60:9c:c8:54:
         a0:0d:02:8c:8a:14:3d:6e:1f:2f:96:0f:d5:0d:0a:25:c5:ff:
         7e:e2:a3:22:00:17:8d:11:82:f2:41:cc:4e:26:f3:b5:91:88:
         77:29:b8:00:13:07:a5:58:b0:4c:9d:d2:f2:6f:d1:c0:b1:55:
         c2:7c:c9:56:15:a4:1a:be:2e:93:4f:ce:e9:ce:2f:e4:4e:76:
         c4:99:95:60:80:03:8f:1a:70:4c:a2:7f:e4:4e:37:55:3f:bf:
         b4:d6:21:62:ff:36:74:84:16:0f:48:a8:08:6c:0f:9a:5e:fe:
         e7:73:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:07 2025 by rpki-client