Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File:                     mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier:          lpdCsHOZ3OXTcYTlHCECSGyKGC5OBBt6zTPVozHMX64=
Subject key identifier:   B3:0C:B6:CB:70:CB:46:99:C3:1A:53:4A:A6:05:D8:67:83:88:35:91
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer:       /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial:       0198D4E0EADBC2F486564637513DB8B5B405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number:          1384
Signing time:             Sat 23 Aug 2025 03:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:46 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:46 +0000
Files and hashes:         1: FbTSJ7mjm5cq99L1AIerA5b7n7U.roa (hash: wyC2uEbA5IXzXYZMj5wku9Zxs7BB1RHGpysgY+TRxt4=)
                          2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: vBPCM7Q3UoJ7KBkVGSgSezqnM54IEoyCYRJlKeHPAFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:ea:db:c2:f4:86:56:46:37:51:3d:b8:b5:b4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
        Validity
            Not Before: Aug 23 03:02:46 2025 GMT
            Not After : Aug 24 03:02:46 2025 GMT
        Subject: CN=b30cb6cb70cb4699c31a534aa605d86783883591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:d1:e3:6b:b7:1a:9f:7c:05:f1:a2:f6:f5:
                    b4:08:87:74:8e:b8:10:cc:82:fa:1f:8b:07:a3:69:
                    1e:d5:d0:c6:75:6e:da:c5:9d:e6:e5:a8:49:2c:63:
                    71:cb:9e:50:27:07:42:8e:35:66:c9:d7:56:67:2f:
                    22:92:df:32:e3:9a:9f:c2:51:c6:7c:f3:a6:1b:7c:
                    04:7e:d7:2a:91:a1:d5:58:da:ce:55:80:58:ff:fd:
                    0e:12:ec:0d:57:bb:a5:23:c7:db:e9:be:a5:e7:c9:
                    e5:4b:fc:59:70:3d:33:e4:d3:be:a5:77:3c:d8:40:
                    13:7b:0a:1d:9d:58:07:5c:7b:ea:e8:dd:aa:f5:11:
                    01:86:e0:00:d3:34:46:df:66:2e:8c:a0:2e:0b:f8:
                    d4:81:a2:bd:0a:71:88:65:ea:5c:29:91:61:46:c4:
                    e0:08:e1:3a:03:33:7c:21:10:e4:5b:5b:df:7e:c0:
                    bf:27:b7:df:37:0e:6e:a8:32:c8:1f:97:7f:91:14:
                    96:1c:82:18:3a:c2:13:d1:67:77:80:59:9b:d1:79:
                    3b:9c:fb:8e:5a:02:44:cb:0c:28:ca:ef:e9:f7:44:
                    26:39:5a:15:2e:40:3d:48:4b:76:7c:d6:a7:42:45:
                    72:1d:42:56:93:87:63:18:c7:90:35:82:c3:11:f2:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0C:B6:CB:70:CB:46:99:C3:1A:53:4A:A6:05:D8:67:83:88:35:91
            X509v3 Authority Key Identifier:
                keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:f2:af:7e:9c:0a:bc:9b:02:5e:07:e6:4e:44:8d:c2:ad:
         fd:6e:70:db:3c:e5:a2:37:ca:0a:9b:73:ec:76:7c:7e:5f:ec:
         7f:f0:c9:c2:cd:31:23:d7:30:d0:42:77:c2:9a:8d:81:f5:49:
         c7:ab:b5:09:de:40:9a:e2:34:db:b4:55:67:84:a0:31:0b:e2:
         de:4e:79:00:27:9c:99:e8:31:ae:8a:e5:3d:2c:b0:42:0c:a6:
         ff:06:a7:0a:93:e6:0c:f6:6b:db:2a:c6:c8:0f:b2:41:aa:f7:
         39:76:02:d2:2e:56:aa:26:37:3b:bc:19:a1:39:5a:a3:a8:57:
         5d:ca:ca:21:ce:fe:d3:f6:dd:f4:97:50:91:80:01:e8:36:f5:
         7a:bf:9e:b2:d1:93:d1:dc:f2:52:bd:49:20:b2:e0:2f:de:64:
         4a:eb:c5:aa:cc:e3:14:3e:15:42:32:30:c6:4f:e3:1b:15:4e:
         ee:ad:82:2f:c1:65:49:7d:71:5b:37:fb:cb:cc:2c:2b:cd:26:
         56:a8:ef:64:23:2a:09:d8:15:28:0a:67:12:67:aa:f6:d3:49:
         94:94:7d:9f:16:7c:f7:a4:ba:ad:3e:33:8c:2f:61:f4:e8:87:
         65:fc:a9:17:a1:6b:da:bc:e4:1b:67:a8:82:2c:ac:3f:27:82:
         95:93:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:07 2025 by rpki-client