Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File:                     sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier:          xcK+4O1oKJnOfHG4DSujBqAGsrBgaZ/TuumKu2WP0OM=
Subject key identifier:   9F:4C:25:81:E2:D3:5D:43:B6:77:38:53:70:8B:D8:4E:D1:F0:44:48
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer:       /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial:       0198D515BC7700D717004A616AB05DBBC316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number:          0E48
Signing time:             Sat 23 Aug 2025 04:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:28 +0000
Files and hashes:         1: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: maONg0kojS855B5CNQYMA+WD4duT3MICluiqcH0sqwU=)
                          2: xNgMrW-QUWWY2eV_ScgSVrNm_7s.roa (hash: 5O/vB7qrsjL5gK9LO002w1dwYAOuKeR0/RqP64nnVao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:bc:77:00:d7:17:00:4a:61:6a:b0:5d:bb:c3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
        Validity
            Not Before: Aug 23 04:00:28 2025 GMT
            Not After : Aug 24 04:00:28 2025 GMT
        Subject: CN=9f4c2581e2d35d43b6773853708bd84ed1f04448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:8b:5c:14:c0:e3:cd:cb:8c:77:12:78:88:
                    cb:29:e3:05:8b:d8:92:ae:f9:67:fd:28:7e:d7:f6:
                    dc:45:95:4f:d3:56:bc:6b:72:24:5d:96:b2:b9:5b:
                    db:c2:5c:9f:6d:65:32:16:a1:9f:2a:1a:53:03:30:
                    63:8f:f0:8e:b5:91:e5:fd:a0:2b:8c:ef:fc:62:6c:
                    51:e9:15:ef:f7:3c:ed:8a:2c:84:db:61:8c:f0:5c:
                    0d:2a:b4:4d:b0:78:c6:1e:10:33:fa:cc:1b:d2:53:
                    da:03:12:61:83:50:e1:c2:a7:07:4c:c5:01:59:35:
                    e6:18:2a:20:37:ea:08:41:d1:19:55:20:1f:ce:05:
                    d1:e0:a6:ae:de:95:45:da:55:00:25:bc:fc:d2:fe:
                    f9:ed:cf:cb:39:b8:42:25:e4:d0:57:9c:ea:42:39:
                    37:23:7f:65:b8:15:86:7c:98:68:1f:e8:8c:56:f7:
                    bd:51:f3:30:ef:93:a7:12:d1:cc:21:5c:05:15:30:
                    fd:83:c5:91:a7:36:3a:f7:ae:79:3e:47:3a:7b:0a:
                    ae:b6:39:4d:1e:d3:97:e1:78:d2:83:f3:7d:75:27:
                    d2:8a:b2:23:dd:89:70:bc:ae:fb:68:ae:3c:be:e0:
                    b2:9b:41:1f:fe:ca:e4:47:c5:4b:dd:19:9a:cb:1d:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4C:25:81:E2:D3:5D:43:B6:77:38:53:70:8B:D8:4E:D1:F0:44:48
            X509v3 Authority Key Identifier:
                keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:66:dc:43:34:f7:ce:c8:af:19:bf:7d:ed:d4:b7:59:cd:f5:
         04:cd:53:36:3a:e8:dc:4e:ac:4c:e1:ed:4e:f8:fa:8c:bc:85:
         93:2b:c6:8e:d9:72:17:18:2c:91:1a:bd:25:30:94:cd:19:66:
         2f:6f:43:92:95:c0:bd:ed:e9:8f:55:03:07:9d:20:81:7f:0a:
         5e:4b:0d:4c:42:af:96:6b:a4:32:c2:39:69:24:ae:31:0f:45:
         15:a5:97:61:9b:4a:5c:e1:fb:32:16:c3:81:6a:73:b6:ca:91:
         47:14:b4:77:42:1d:47:cb:75:49:55:0c:4f:02:fa:e6:42:23:
         34:b5:b6:b0:f2:9a:58:fd:0f:ee:c9:d2:de:ea:93:5f:84:6d:
         02:01:35:e4:bc:48:4c:6b:66:6e:73:ee:e5:3f:d0:dc:73:f5:
         a2:70:8c:b4:34:b3:68:3c:d5:97:ab:bd:61:15:e9:7e:9b:0c:
         43:21:c7:4f:99:c5:10:30:36:d9:83:1a:c8:3e:04:39:d2:51:
         73:40:fb:e1:22:f0:dd:a4:8e:f6:2f:c9:c8:7d:6d:d2:bf:f5:
         be:8e:52:56:d0:8a:59:51:43:b0:0a:f7:8e:31:7c:f8:c2:f3:
         37:5e:83:24:d8:5a:ce:1f:0a:0a:2c:95:62:73:64:be:37:3a:
         7d:e4:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:23 2025 by rpki-client