Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
File:                     cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json)
Hash identifier:          NpKTDRhgcNBo1801hy8aA2LrRZVdMQIv8yRwWUIKoZs=
Subject key identifier:   03:47:B5:D7:E4:E8:77:4E:52:DD:E9:13:CB:CF:39:1F:02:EF:4A:42
Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD
Certificate issuer:       /CN=716f6d11f0ce63230181a73f85a666170f7389bd
Certificate serial:       0198D4E0D6DBE1032D9BB038BECAAEAAACE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
Manifest number:          0B6B
Signing time:             Sat 23 Aug 2025 03:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:41 +0000
Files and hashes:         1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: F2+ZGuWiJ4AcNX3mqLrze2r8/wh5QR93B0TdhzzkGg0=)
                          2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:d6:db:e1:03:2d:9b:b0:38:be:ca:ae:aa:ac:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd
        Validity
            Not Before: Aug 23 03:02:41 2025 GMT
            Not After : Aug 24 03:02:41 2025 GMT
        Subject: CN=0347b5d7e4e8774e52dde913cbcf391f02ef4a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:8a:c1:97:ae:95:38:f0:04:9c:29:45:d2:
                    fd:84:fa:28:74:f6:9b:a1:8d:d0:21:0c:19:70:ca:
                    f1:98:0d:e2:66:8f:48:d6:f9:61:d9:78:eb:c1:47:
                    40:6e:14:de:69:e2:7f:55:bc:93:40:96:3c:62:9d:
                    7e:3a:41:f9:06:6a:28:a0:ee:d6:0d:af:8a:29:a8:
                    c7:b3:42:f1:20:5b:f5:ab:48:44:cf:87:20:04:5e:
                    94:25:c7:98:40:b9:f3:9c:18:54:ee:e0:44:a9:24:
                    cd:7d:9f:23:72:4a:82:50:a0:03:aa:c5:26:f8:7c:
                    40:b3:e6:a9:dc:aa:3a:32:48:86:71:90:83:a4:09:
                    3d:61:b6:64:17:32:7f:7c:ac:62:d1:b5:8c:ee:b3:
                    d9:06:17:17:cf:77:94:01:68:d0:b3:b7:2b:7f:f4:
                    7b:38:cb:e8:b0:14:a3:1d:d2:68:23:85:a5:84:9f:
                    29:80:3b:bc:69:b8:51:e6:ea:fb:fd:90:bb:53:84:
                    1f:d4:f3:3a:c5:cc:6c:35:29:1f:e0:bd:79:89:86:
                    1f:4d:79:90:c6:a9:10:d5:25:d7:48:f4:9d:a4:05:
                    22:38:64:2b:c8:3e:11:1a:3c:c1:b2:76:0f:a4:c2:
                    9d:19:5a:fb:78:f9:ee:26:8b:71:57:94:c6:82:0e:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:B5:D7:E4:E8:77:4E:52:DD:E9:13:CB:CF:39:1F:02:EF:4A:42
            X509v3 Authority Key Identifier:
                keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:77:55:9b:61:f2:8e:d6:03:60:85:a3:6c:84:c1:a9:c3:a4:
         a3:fb:d1:3b:ce:78:d3:8c:45:0c:3e:30:70:53:7d:60:32:83:
         f6:63:51:f9:84:2d:1d:e4:ba:ab:b9:25:9f:e2:47:14:a7:09:
         7f:5a:7d:29:0b:20:10:d4:3b:86:e6:e2:4c:b5:03:c9:53:1f:
         2e:bf:b1:9c:23:61:03:7e:41:ff:a7:ca:df:4c:1c:91:35:db:
         73:fd:79:fc:3f:22:af:64:91:cb:f7:db:24:cc:04:fd:6c:49:
         bb:c1:32:99:8a:e3:d1:9b:26:e3:fe:b3:b6:19:96:83:7e:9b:
         06:d7:82:8c:4b:b1:b7:7a:5f:9c:f5:fb:d4:0a:fc:28:b6:38:
         62:ec:d6:28:40:f1:31:96:67:e5:94:27:c3:4a:38:1a:63:06:
         48:c0:20:57:85:b2:c1:91:67:b5:a1:1b:51:f2:e6:07:87:dd:
         07:38:dd:eb:8c:13:7d:4b:ea:b2:44:68:37:df:d2:12:05:ee:
         85:57:93:0c:d9:dc:4f:75:ae:da:06:5e:28:f2:3a:e8:7d:62:
         54:ae:3e:d3:3c:1d:f6:18:0c:a5:62:8e:17:a2:4d:52:b0:6d:
         77:dc:8d:fb:f1:d1:48:9c:8d:4a:79:c9:98:db:aa:5f:93:a5:
         44:25:72:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:50 2025 by rpki-client