Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
File:                     mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft (raw, json)
Hash identifier:          i7h3Jaf2U4x7R1TweO5qETlJbGNXK/hrn9RVE9/42SY=
Subject key identifier:   13:2B:69:73:71:56:DF:64:C4:98:76:70:6E:79:84:C8:95:29:4E:CD
Authority key identifier: 99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82
Certificate issuer:       /CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
Certificate serial:       0198D65FA6A88372C3D35E00635782F0B1E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
Manifest number:          0C1F
Signing time:             Sat 23 Aug 2025 10:00:49 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:49 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:49 +0000
Files and hashes:         1: mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl (hash: wVxD17pCAXABfsnBjwgD9u8Sh4VY+i8sPJ9NLNR4EIw=)
                          2: nZK_WOZBkx5CjkyneO9yoAn9z7M.roa (hash: dpA6T/m8yk0xZEgRWH2rVz82pLkCcKV+oqNh5OTEUXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:a6:a8:83:72:c3:d3:5e:00:63:57:82:f0:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99b0425b71c2b51cd7ebe47d3efe7cb9861b4d82
        Validity
            Not Before: Aug 23 10:00:49 2025 GMT
            Not After : Aug 24 10:00:49 2025 GMT
        Subject: CN=132b69737156df64c49876706e7984c895294ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:a8:b2:2f:ac:87:5e:a9:7b:83:e3:44:17:
                    2c:49:3e:be:56:9e:48:0b:3c:7c:50:f6:ec:75:b0:
                    2d:a7:18:0a:0b:be:58:d8:42:15:10:5b:f0:9a:a5:
                    06:0c:1d:0c:42:db:ff:e2:73:03:cd:45:d6:19:f6:
                    1b:33:a0:a2:3a:d4:3d:a4:41:93:2b:6d:eb:d7:63:
                    3c:4d:b0:90:e0:c8:15:6c:8a:7e:13:ea:67:d1:81:
                    d0:e8:a2:b4:5f:39:0d:74:c2:97:f6:73:7d:18:79:
                    0e:48:7e:78:e6:d7:4c:0c:fa:05:1d:c7:12:89:f7:
                    5d:d0:1f:0d:77:cc:a2:e7:c4:d8:b5:37:24:80:e8:
                    f8:b3:ad:2b:e3:7e:45:c0:ce:e8:37:ed:12:1e:0d:
                    6b:ba:f7:d4:35:57:bd:c4:62:6b:e8:11:6b:c2:76:
                    7c:96:c5:9e:61:92:9e:50:9e:20:41:8f:fa:09:2b:
                    39:a7:6c:41:2c:c2:1e:11:a6:6a:f0:c1:ff:d8:bd:
                    ac:1b:8a:c0:1e:13:1e:77:5f:f0:95:ff:cc:4a:f9:
                    a2:83:65:d2:f5:09:28:5d:2c:f0:0b:21:7c:8c:ac:
                    54:6e:5c:e8:22:ab:3b:0b:a2:32:c4:86:69:03:67:
                    f4:6e:8c:21:05:c2:34:a7:2d:6b:e2:68:e8:00:35:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2B:69:73:71:56:DF:64:C4:98:76:70:6E:79:84:C8:95:29:4E:CD
            X509v3 Authority Key Identifier:
                keyid:99:B0:42:5B:71:C2:B5:1C:D7:EB:E4:7D:3E:FE:7C:B9:86:1B:4D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbBCW3HCtRzX6-R9Pv58uYYbTYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e982d-ad5b-4100-8d9d-d1efceec34c1/1/mbBCW3HCtRzX6-R9Pv58uYYbTYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:61:fe:c2:97:43:ae:4f:7b:5a:af:2a:5f:85:c2:38:be:b5:
         68:6f:70:b4:01:e7:ab:91:85:15:72:b3:4f:6e:01:b2:4e:24:
         73:a9:78:7e:7d:f9:89:45:8f:72:11:e7:2e:16:4d:0c:5a:9e:
         8a:80:9f:7f:92:5a:5e:18:64:fd:19:c2:ee:64:07:ff:c0:b1:
         9c:38:5b:b8:30:54:74:f1:09:e8:fa:d4:1e:a5:af:2a:2d:11:
         95:10:68:19:f8:78:22:06:98:3e:58:35:e3:ee:47:d9:31:f0:
         f9:2c:b2:fe:1f:78:c6:bb:0a:4d:ee:83:ee:0c:a0:b1:33:e3:
         36:94:1c:3a:de:e6:19:8c:af:d2:0a:44:6e:65:c5:be:e3:10:
         33:aa:38:96:3c:8b:81:67:c9:b1:d7:83:9c:91:dd:2a:b5:04:
         93:48:b0:d8:3d:2a:b8:b5:99:82:81:2f:ce:97:7e:b4:95:17:
         34:70:9b:74:57:38:d7:b7:df:9f:1f:28:37:71:bb:61:17:2f:
         5a:8f:1a:44:03:0b:5a:bf:ad:29:a2:cb:85:32:12:69:44:bc:
         3e:94:fd:07:f2:d1:e2:8a:48:df:1e:34:7b:ed:cb:f9:ae:15:
         fc:84:af:39:5f:80:1c:25:94:a4:7f:5c:68:22:12:d8:5c:58:
         96:55:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:30 2025 by rpki-client