Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
File:                     IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json)
Hash identifier:          kkNY25ooxIHgeeVgoBK6cagEr2J8GAz/Lm66eRcRQAM=
Subject key identifier:   9A:01:1A:39:34:5C:A0:10:02:E6:A7:13:82:7E:2B:64:18:30:F0:6B
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Certificate issuer:       /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial:       0198D9609A0C5B42B24159DEE0C42BE6613D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
Manifest number:          01EE
Signing time:             Sun 24 Aug 2025 00:00:43 +0000
Manifest this update:     Sun 24 Aug 2025 00:00:43 +0000
Manifest next update:     Mon 25 Aug 2025 00:00:43 +0000
Files and hashes:         1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: Tu2tzpXRM/ccvHKoHAQ0ZD+HPHh3vmO3VAXxA2dukco=)
                          2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:60:9a:0c:5b:42:b2:41:59:de:e0:c4:2b:e6:61:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20105484f187f2087d120cad971d682db3159965
        Validity
            Not Before: Aug 24 00:00:43 2025 GMT
            Not After : Aug 25 00:00:43 2025 GMT
        Subject: CN=9a011a39345ca01002e6a713827e2b641830f06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:ad:e7:65:91:c3:7d:46:a5:ff:d6:19:07:
                    83:28:32:40:e0:53:d6:19:38:5d:91:52:e1:9e:82:
                    5b:3a:31:00:1c:92:35:b8:02:44:8e:18:5b:37:f0:
                    f8:c5:e4:90:f1:af:ed:4d:f5:ee:cb:c5:23:e4:33:
                    65:16:c6:2c:89:c1:29:9c:da:a7:3d:74:f7:3a:51:
                    30:34:ea:fa:a4:8c:e3:48:c9:52:20:d7:88:2a:16:
                    67:6d:85:50:de:27:2c:8e:f6:a7:cf:ca:f7:7e:24:
                    e6:53:ca:67:6b:ba:30:55:a2:6b:73:36:56:16:a6:
                    55:87:ea:28:22:a0:2a:a4:c5:60:14:61:c8:9c:06:
                    85:54:00:28:f3:56:9b:73:6d:6a:f1:39:d7:db:a5:
                    29:99:66:b3:f0:21:75:cd:b8:86:c4:21:c6:f5:aa:
                    9b:68:8b:c7:01:17:9d:94:77:fa:58:94:c9:cb:51:
                    2c:7c:59:a9:92:f8:a2:79:a6:93:26:05:6b:c0:3c:
                    1c:d1:82:4b:ac:26:89:88:85:13:2c:99:89:8d:09:
                    64:f2:0e:fb:44:21:ac:ab:45:0a:1b:c7:93:d2:b7:
                    e8:ab:01:0c:60:b0:e8:6a:49:75:88:aa:21:78:09:
                    f3:45:d0:f0:e2:fa:02:bb:e2:c6:79:2b:c4:c6:80:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:01:1A:39:34:5C:A0:10:02:E6:A7:13:82:7E:2B:64:18:30:F0:6B
            X509v3 Authority Key Identifier:
                keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:78:2e:89:b9:f5:a7:19:01:ac:37:0f:15:16:ae:ad:af:b3:
         dc:81:84:ec:dd:7d:8f:14:80:a3:14:56:4b:57:78:be:02:7e:
         07:a4:99:b5:37:43:a3:83:6a:4c:4b:24:68:6e:44:3b:0d:5d:
         a1:23:ad:a8:eb:11:52:30:65:3c:ed:9e:71:61:4e:c3:ad:42:
         dd:23:8f:1b:0d:f1:ab:63:7b:65:35:53:03:c9:d5:51:14:75:
         bd:ed:b0:a1:24:3d:14:2c:7c:50:06:bb:f8:1b:81:33:94:7a:
         51:e9:b1:67:ea:41:92:0d:5f:5c:f2:b2:1b:d3:4e:2b:38:9d:
         5a:3e:f2:0c:27:38:1a:c5:53:45:8c:1b:ee:d9:e0:da:75:78:
         62:19:62:14:86:ed:78:d6:fe:f5:b2:f8:b2:82:4b:59:53:95:
         41:02:48:4c:1b:9c:bb:aa:c7:44:a8:6d:fe:c6:fe:17:94:f4:
         cd:77:61:04:a8:69:da:78:6e:1d:ad:5e:da:9d:d5:7a:cd:6c:
         dd:3d:74:02:6a:d2:a9:28:87:4d:34:ea:40:7e:ad:2e:da:ce:
         1f:db:8f:42:89:ae:84:d1:fe:84:10:5d:a9:0d:e9:2c:ba:16:
         11:5d:71:68:55:60:ca:23:30:46:f9:8b:25:3b:36:f3:57:38:
         1c:3c:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:18:03 2025 by rpki-client