Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File:                     Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier:          d9alNlV8msqEeoxlxg+l0/MWjXGVKIZpo0cysqLGIHU=
Subject key identifier:   C6:C8:96:91:77:BC:0D:09:76:E1:80:14:3E:24:DE:20:D4:CE:8B:CD
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer:       /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial:       0198D404DC8B452A2043D3967574CB390A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number:          1647
Signing time:             Fri 22 Aug 2025 23:02:25 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:25 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:25 +0000
Files and hashes:         1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: DBn5xa9jPed5zCTojXjhBaNPpeMFJ2a0XJH9vTPxbAI=)
                          2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:dc:8b:45:2a:20:43:d3:96:75:74:cb:39:0a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
        Validity
            Not Before: Aug 22 23:02:25 2025 GMT
            Not After : Aug 23 23:02:25 2025 GMT
        Subject: CN=c6c8969177bc0d0976e180143e24de20d4ce8bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:ec:8b:67:9f:bc:61:7c:1e:46:6f:1f:0e:
                    d3:22:44:95:63:76:43:9a:2a:d2:ec:2d:d4:96:e1:
                    f4:c4:34:3d:f9:da:53:81:82:ca:63:7e:7c:99:e6:
                    64:b0:30:58:42:2d:b4:46:38:01:9c:5f:c3:e6:fe:
                    71:d2:6e:9a:76:57:3a:bb:2f:7a:57:fe:16:7a:83:
                    1f:7d:1c:74:f8:29:d1:17:b9:83:d8:71:1a:0f:e5:
                    c1:16:e5:da:02:52:9c:91:5a:97:12:f6:4c:69:4c:
                    66:27:66:84:e9:3e:ba:db:5f:31:e6:3b:59:32:8d:
                    58:b5:4c:ca:45:3e:d0:22:2f:32:0f:78:a9:6e:e2:
                    9d:0a:5b:21:68:3c:bf:8e:67:49:91:97:50:19:e0:
                    de:48:91:8b:0b:0c:ba:d1:29:2e:b7:ea:fd:98:f8:
                    99:5c:65:b8:5a:25:03:93:d3:52:b4:d6:74:00:fa:
                    fb:4b:c6:03:9e:ac:d3:17:6f:bc:07:c5:cd:5f:8c:
                    6a:88:d5:cd:30:5f:5a:4d:61:33:7b:55:66:ca:67:
                    33:95:8c:97:fd:7e:71:8c:19:7d:a7:eb:20:fd:39:
                    47:ce:07:83:93:4b:26:18:cc:fe:6a:b1:08:96:18:
                    07:47:47:0f:9d:98:3b:6c:9f:11:ab:0b:83:89:ae:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C8:96:91:77:BC:0D:09:76:E1:80:14:3E:24:DE:20:D4:CE:8B:CD
            X509v3 Authority Key Identifier:
                keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:41:d7:ef:23:fa:a7:5c:9b:92:aa:86:56:83:eb:16:a5:2d:
         dd:b0:2a:21:f1:03:c9:13:cc:d0:21:6a:63:b4:cf:68:de:46:
         a5:07:c4:39:2a:51:d1:98:16:ea:4e:2b:e5:2b:e8:e1:ef:6a:
         53:29:0a:80:55:fc:e2:95:c0:56:61:ba:21:e3:5a:f1:41:b6:
         2d:0f:a1:da:23:d0:0d:1b:65:97:78:07:bc:b3:20:b0:22:43:
         6e:e2:86:db:dd:46:5b:61:79:a1:ca:7c:2e:98:a8:6b:8f:20:
         61:f4:09:c2:22:fb:f4:04:f7:f7:72:48:da:8c:d0:70:97:24:
         60:03:85:63:d1:96:74:b7:c2:53:6e:1f:6a:fd:cf:2a:44:09:
         47:d3:fc:94:44:3d:f1:f5:19:05:16:76:d6:8b:4e:3b:f6:ce:
         ea:24:f8:bf:33:5f:30:ab:ed:6c:49:04:be:0f:92:c4:b8:38:
         6b:8c:62:1d:7c:43:c6:0f:dc:cb:cd:4c:7f:5a:8c:6c:3c:51:
         d2:42:1b:05:62:8e:83:71:fa:31:92:10:28:61:f9:d2:1d:45:
         15:ef:98:92:bd:df:1c:42:be:32:2c:d1:4c:03:1c:8b:1a:65:
         f6:78:8e:77:b4:bb:73:0b:0e:f6:4f:ff:fd:7e:31:f0:81:28:
         51:30:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:47 2025 by rpki-client