Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File:                     9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier:          PWxLSwrk0lkp41UBYzcJElMAnhEpJ8Vyc0dLzurhiOE=
Subject key identifier:   3C:A0:58:E6:97:37:AD:74:22:07:DB:D9:86:B8:D5:62:D6:0F:C2:D5
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer:       /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial:       0198D5BB950AE0743B83B8FB0FE67E0495B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number:          036B
Signing time:             Sat 23 Aug 2025 07:01:37 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:37 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:37 +0000
Files and hashes:         1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: PmqaQ3D2SlZ1+qhKVolFwpVQwXhisIloXu9i2VHSKpI=)
                          2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:95:0a:e0:74:3b:83:b8:fb:0f:e6:7e:04:95:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
        Validity
            Not Before: Aug 23 07:01:37 2025 GMT
            Not After : Aug 24 07:01:37 2025 GMT
        Subject: CN=3ca058e69737ad742207dbd986b8d562d60fc2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:b6:53:16:b6:23:53:d8:c5:07:5c:8a:98:
                    c8:6b:f8:95:ca:d3:0e:05:bf:71:c9:cf:18:54:c5:
                    5c:59:6e:ab:73:d4:2b:e5:84:c3:94:76:9b:4d:0a:
                    c6:5e:76:5d:59:a8:27:76:2b:45:91:d1:95:ea:56:
                    1b:a0:8e:c7:05:30:c9:d1:5f:56:53:92:84:c5:99:
                    28:36:b1:ec:10:83:b8:97:dc:9d:c8:e3:a3:d6:4b:
                    1c:fb:99:44:5e:24:18:01:9b:cf:ef:74:d2:0c:1e:
                    76:96:71:ea:64:27:4e:2e:15:34:d1:49:9f:8b:00:
                    93:1b:3b:5e:e8:ee:63:b4:ec:18:b3:46:af:ca:06:
                    22:2a:c3:04:c6:16:b2:a4:90:77:50:3f:1e:4c:83:
                    65:c0:ec:39:df:40:80:d1:06:9f:2f:5d:7d:46:8a:
                    f4:16:c9:e5:2b:27:a7:84:50:ae:99:45:b8:67:1f:
                    33:03:40:99:14:21:ed:09:59:0b:d8:87:9f:47:3e:
                    88:d7:17:88:01:18:6e:50:c0:ee:af:c4:33:e2:2b:
                    43:1e:01:f1:bb:c2:8d:a6:85:20:c5:9b:47:ad:3e:
                    3a:4e:5a:16:0c:7d:51:ec:25:17:e2:6f:ed:76:3a:
                    70:b7:78:19:83:fc:77:58:9e:89:b4:43:2e:01:f4:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A0:58:E6:97:37:AD:74:22:07:DB:D9:86:B8:D5:62:D6:0F:C2:D5
            X509v3 Authority Key Identifier:
                keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:25:d4:c5:66:88:a8:d3:7c:a9:1e:d1:25:57:0f:2e:68:
         fa:a4:97:4a:4c:9d:d1:d5:f0:fe:e1:42:e2:d5:d4:e6:ce:74:
         37:7d:89:d0:37:e6:78:e5:23:86:87:0c:b2:a2:1a:da:5b:be:
         60:33:cd:8a:34:20:7c:c2:96:9a:a4:7e:1f:90:8f:79:d8:d7:
         25:4a:20:60:16:a6:bd:d2:25:e3:15:8f:64:bb:f3:8c:fb:2e:
         f1:b3:35:21:e8:cd:1c:b3:28:67:4d:84:ee:fe:79:21:ac:af:
         99:b8:77:63:43:5d:fa:06:eb:ae:b4:5a:5a:76:f8:a1:d5:0e:
         aa:6b:10:de:8a:10:4b:44:af:e8:a3:b2:70:ae:09:2c:7d:1d:
         e0:40:32:e9:c7:8b:5f:cf:69:5f:aa:25:3c:4d:da:7e:90:f8:
         8d:1f:2b:be:a3:80:ee:b1:fb:d5:fd:1e:b5:4f:e8:9d:fe:d7:
         18:d8:44:b5:d8:d0:77:fb:7e:14:3e:20:9f:d4:bc:f5:81:4d:
         a8:2e:b4:d7:da:c3:fc:26:6a:79:6f:9b:4f:48:a7:3a:74:fd:
         6e:16:9a:bf:77:e3:19:69:d2:17:d4:16:9a:8a:29:79:c9:e0:
         d7:35:d0:d0:3a:fb:28:9f:3d:ce:ad:4b:ff:4e:78:62:11:76:
         a6:61:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:26 2025 by rpki-client