Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File:                     b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier:          qFLs9VLzW7DKGp9P5BhwtEshEvOecBh4G7bDmd9m1sM=
Subject key identifier:   3E:42:A0:53:C1:16:58:0D:E0:7D:6F:54:1A:B3:4E:E2:CE:95:4A:50
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer:       /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial:       0198D4E0F6990A662CBE366FD32D5075C4C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number:          0B28
Signing time:             Sat 23 Aug 2025 03:02:49 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:49 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:49 +0000
Files and hashes:         1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=)
                          2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: 7S6vWkKh7QbfnXgebFzUfGyuzu9bG7BEIAk3S6eqRxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:f6:99:0a:66:2c:be:36:6f:d3:2d:50:75:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
        Validity
            Not Before: Aug 23 03:02:49 2025 GMT
            Not After : Aug 24 03:02:49 2025 GMT
        Subject: CN=3e42a053c116580de07d6f541ab34ee2ce954a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:2c:8d:63:ea:9c:66:76:0e:5f:19:aa:1b:
                    17:22:8e:09:93:2f:25:0b:98:8f:8a:80:47:9b:63:
                    fb:fe:59:b6:dd:06:57:9c:6d:37:9f:dc:7b:40:f5:
                    84:57:12:f4:2d:24:b7:00:d1:65:02:50:2a:29:41:
                    d5:60:4b:4d:62:e4:23:8c:8f:5f:31:e7:68:50:73:
                    7f:5f:c7:75:64:f8:fb:af:98:75:6f:cd:cd:a2:66:
                    6d:29:d1:92:96:91:eb:a7:25:1e:c9:05:e7:7b:2e:
                    e2:f1:b0:2b:da:26:1c:6c:1d:9e:7b:60:c6:dc:d6:
                    c8:35:4c:db:83:ed:11:8b:95:e4:c5:d8:64:0b:42:
                    d9:17:ea:3f:16:33:29:8a:64:08:3e:b9:89:b4:5e:
                    36:64:bf:42:db:df:00:1c:f4:41:bf:a5:31:70:79:
                    ff:c2:68:4f:a5:2b:ce:e6:7d:c3:21:b2:85:a3:e7:
                    4d:a5:8e:b2:fe:22:a4:40:f7:98:55:82:c9:cb:c1:
                    a8:79:c6:b3:72:ce:16:bd:2c:6b:4e:92:51:3e:db:
                    9f:ec:7c:02:81:36:03:7f:9c:09:25:ed:aa:42:09:
                    09:e8:4d:ae:b1:ab:63:2e:47:26:f5:bc:9b:7b:e1:
                    32:c3:76:16:41:56:09:46:1e:e9:40:63:78:21:c1:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:42:A0:53:C1:16:58:0D:E0:7D:6F:54:1A:B3:4E:E2:CE:95:4A:50
            X509v3 Authority Key Identifier:
                keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:89:31:68:42:ab:c5:a1:2c:79:a5:1b:5e:58:30:35:c0:66:
         b6:60:21:cf:e8:f5:7c:0a:e8:ea:54:8f:8f:e2:fb:75:e0:29:
         38:2c:c3:3e:ef:1d:13:c9:b9:30:e9:a5:c9:2b:9a:10:ba:79:
         d8:0c:99:0f:6f:46:fb:1b:1d:61:d3:52:5f:f0:d8:39:1f:1d:
         0d:54:92:c2:e6:9d:10:5c:c7:2d:ec:e4:d0:8b:50:e9:ec:8c:
         82:07:96:ca:d1:91:8d:7d:4f:3d:61:cd:2c:1f:76:6a:ef:cc:
         eb:36:4c:8f:a9:06:d4:c6:e6:e9:61:ac:10:90:81:18:dc:1f:
         a7:0a:7a:fc:d8:6d:3e:a5:53:09:be:f5:3d:6f:1e:99:67:d1:
         3e:81:37:93:37:4c:21:76:c7:f1:b6:e9:62:a4:61:cb:78:52:
         0b:5e:54:75:03:3c:ce:26:1a:77:20:29:3a:ba:7e:e9:11:3c:
         d8:4d:fc:b0:f0:1d:5a:7a:bc:5f:f0:04:51:0a:16:6d:ed:69:
         96:f9:99:e8:1c:9e:0b:46:07:c3:04:91:62:3b:c8:eb:ee:71:
         86:f5:88:db:d8:5a:d5:b0:10:23:1b:ca:f6:e8:f7:af:08:67:
         49:bb:12:dd:70:dd:f5:15:95:b8:fa:ff:4f:5b:1a:76:77:38:
         ad:ff:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:52 2025 by rpki-client