Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File:                     sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier:          p3uW2BDaLUZun2HH06e6Xv1LpfClscGI3pquoBRpgXE=
Subject key identifier:   64:E6:F1:65:19:CE:61:0E:5E:DE:CB:FE:23:25:E7:A8:72:20:C6:AE
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer:       /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial:       0198D5BB773DB2D4D1D3CDA24D3104E75FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number:          15DD
Signing time:             Sat 23 Aug 2025 07:01:29 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:29 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:29 +0000
Files and hashes:         1: _vqUTJBaKVA__-YzImtaOgUdlPc.roa (hash: WjwzW+i6IqptZA1G2R9oYtf2Xiry6o+GVW/+RmHCnfA=)
                          2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: Ph29PoN3oSDzL5Tqk3fX+Kg/tYrCsaSjMjDl38mm/to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:77:3d:b2:d4:d1:d3:cd:a2:4d:31:04:e7:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
        Validity
            Not Before: Aug 23 07:01:29 2025 GMT
            Not After : Aug 24 07:01:29 2025 GMT
        Subject: CN=64e6f16519ce610e5edecbfe2325e7a87220c6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0e:c7:e8:5e:64:2b:8b:52:88:43:c9:68:be:
                    8f:30:9d:15:0d:3c:5d:58:69:54:89:af:0d:fe:e4:
                    83:ff:e8:23:f2:51:4c:66:74:21:4c:e1:f4:1a:64:
                    87:14:f6:26:0e:51:98:69:7a:7d:18:89:8f:36:ee:
                    ca:c8:bc:62:37:98:5b:9b:a4:b3:73:5c:4a:f7:61:
                    8f:7a:c3:a4:6f:25:33:b3:20:a1:6c:45:b9:5b:d4:
                    6f:b1:cd:6f:5d:86:1c:8c:01:e4:93:d2:f2:d6:77:
                    55:61:e9:7e:52:e5:bf:d2:35:d0:37:5b:43:79:e2:
                    6f:94:7a:dd:dc:cb:7b:15:36:22:2d:db:25:da:6b:
                    08:ae:48:b8:21:ee:5d:a2:58:03:02:c9:81:4a:08:
                    05:72:06:61:38:11:3c:ce:95:58:79:62:9f:bf:fc:
                    52:b3:99:45:c7:4a:fe:38:68:5a:e1:8b:fc:45:35:
                    64:df:80:78:57:51:c9:fd:88:0a:77:92:47:24:d0:
                    41:c3:9b:cc:4b:41:39:62:ce:5e:79:4b:b2:55:26:
                    20:61:ef:4c:4e:1f:05:96:d3:3f:5c:81:1f:11:8b:
                    ce:cf:a4:76:bb:6f:e0:2d:c7:08:6a:03:0a:86:4b:
                    89:2a:54:f0:0e:ca:88:49:22:48:39:b4:9c:14:f6:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E6:F1:65:19:CE:61:0E:5E:DE:CB:FE:23:25:E7:A8:72:20:C6:AE
            X509v3 Authority Key Identifier:
                keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:fb:66:0a:88:96:c8:c1:98:5a:64:a3:93:22:9b:87:be:
         7b:ce:0d:91:fe:9c:9b:2b:f2:81:4f:92:e0:58:88:3d:6b:07:
         79:50:ec:67:12:b8:ed:fa:8b:f6:24:67:f3:73:72:65:7b:01:
         3e:58:24:54:9a:13:c1:04:a3:dd:07:72:b2:4f:9e:f1:d4:eb:
         64:b8:07:7b:db:c7:05:0f:f3:cd:34:23:d0:59:a9:71:0a:22:
         e5:25:df:9c:6b:6e:45:83:5f:23:75:f8:18:81:7a:42:0a:7e:
         56:87:65:3a:8a:32:38:5e:42:d2:ac:80:77:78:40:21:64:f9:
         e1:73:02:43:e7:bc:3e:65:95:8a:a3:16:80:29:a8:27:07:c4:
         75:66:0e:0e:f1:06:0f:af:dd:9f:16:00:81:eb:35:87:3b:d3:
         ec:6f:36:3f:c9:fa:fb:de:e5:75:10:c0:43:cc:bb:40:d5:c1:
         72:34:31:07:65:35:16:ba:4c:a6:84:0d:80:7f:95:76:cf:2e:
         fe:d0:2c:eb:60:4b:ab:76:a6:6c:79:ee:20:12:bb:92:e0:a6:
         78:1d:7d:8c:2f:e9:99:20:3b:33:5b:fc:8d:b6:6a:a0:71:bc:
         a3:e7:92:94:df:c4:a1:fd:67:6e:98:a7:ae:9c:56:54:23:67:
         02:28:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:20 2025 by rpki-client