Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File:                     u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier:          QlmdLUAJ7EcoPywqNnQOPLY5fLp3OYyBVmJPBqngFhA=
Subject key identifier:   46:6A:BB:8E:67:9F:7D:86:07:C2:14:61:06:64:3A:E0:D5:2C:FF:A2
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer:       /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial:       0198D515E3E4D2051D3C99BCBE9B27A7F7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number:          097B
Signing time:             Sat 23 Aug 2025 04:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:38 +0000
Files and hashes:         1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
                          2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: ZfQpZQ0faUjmhR/OI0ZF1RvEpblQ8YND44qwEt/D8QM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:e3:e4:d2:05:1d:3c:99:bc:be:9b:27:a7:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
        Validity
            Not Before: Aug 23 04:00:38 2025 GMT
            Not After : Aug 24 04:00:38 2025 GMT
        Subject: CN=466abb8e679f7d8607c2146106643ae0d52cffa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:b9:55:b6:45:51:7c:4d:bd:db:0b:a6:99:
                    3b:e6:1e:9f:69:65:a5:82:9a:8f:d7:ac:fe:ea:4c:
                    20:9c:d8:a2:9d:bc:ae:4d:cf:8e:02:7b:6b:54:e9:
                    f8:0d:39:99:ca:94:b2:2b:46:14:c2:d3:68:5e:be:
                    95:a8:5f:4c:e9:70:0c:d8:b6:fa:8f:91:c6:f7:49:
                    5f:50:83:70:2a:c1:70:cf:51:04:54:36:14:3b:43:
                    8a:70:db:05:86:00:99:ee:81:1d:17:15:81:3c:a7:
                    2c:f7:9e:93:33:1d:19:d9:f8:85:0d:de:c5:a5:fd:
                    15:a9:20:a7:54:80:18:fc:18:dd:d3:96:c5:fa:c2:
                    a3:be:f7:77:d8:bc:ef:0e:eb:7c:5b:ae:2d:3a:a8:
                    4c:27:58:c4:9c:73:15:2a:ea:5b:4f:96:ca:e2:d3:
                    26:cb:87:95:bd:cd:c5:66:6c:90:b1:85:7d:19:d1:
                    90:2f:2f:0e:f8:00:52:ec:0f:41:cb:97:85:ca:09:
                    58:a8:96:21:e1:7e:af:bb:b4:3f:66:54:56:fa:9e:
                    e2:2e:e4:92:44:31:38:46:e2:c9:85:18:0d:71:ca:
                    e8:7f:1e:62:1b:56:81:ba:ae:a7:21:61:d3:97:e7:
                    16:50:70:31:ed:3f:7b:fb:9f:1a:61:7e:b4:53:a9:
                    b3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:BB:8E:67:9F:7D:86:07:C2:14:61:06:64:3A:E0:D5:2C:FF:A2
            X509v3 Authority Key Identifier:
                keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:8f:f0:f0:74:90:10:59:a0:ce:7a:dd:37:0a:57:2a:d7:f9:
         c5:de:f8:08:fe:65:c3:d2:7f:0e:67:a1:bc:80:dc:e0:f5:08:
         aa:47:b9:78:65:e3:b5:67:54:7b:fb:52:74:bd:1e:35:f8:68:
         24:d1:0c:c0:0d:99:70:7e:95:4f:ad:dc:10:15:ba:82:62:2b:
         68:8f:81:2a:53:fc:97:31:ec:8a:0f:ec:5d:77:5b:dd:13:6c:
         23:89:44:7f:9e:98:a5:78:41:f4:2d:64:da:ee:de:12:62:1b:
         1b:e3:e4:57:c0:ea:d4:fd:fa:49:4b:e0:a9:89:84:79:a9:61:
         35:65:8d:b1:2b:40:fb:97:e5:81:8b:49:67:18:31:1f:73:42:
         27:db:60:f7:87:66:25:47:a7:c8:82:7b:08:23:2d:12:f5:e7:
         a1:7c:30:1d:a0:5e:2e:86:4b:ea:e7:fd:72:6f:2b:57:1d:69:
         a4:4d:53:ab:eb:74:aa:cc:4f:4f:c6:46:6b:51:6c:11:d3:35:
         36:38:7b:d7:c9:a4:bd:c8:81:32:1e:55:36:ff:d9:7c:c9:b9:
         23:c4:0d:4f:ae:19:c3:e1:0b:06:85:ee:f9:8f:92:12:b5:2d:
         3c:3d:67:af:31:75:ca:4b:11:2e:f6:8c:39:a8:55:b0:1a:e3:
         54:4e:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client