Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File:                     B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier:          0abu97kPqUwGYpo0467NFW8JwSjUe0WadFyvXeQK8fE=
Subject key identifier:   DF:79:A1:D4:5C:3F:93:1B:50:60:EB:47:47:9C:8A:64:4F:34:B3:3C
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer:       /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial:       0198D5BC27928839442B99F6DCBE769D0061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 07:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:14 +0000
Files and hashes:         1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: Fc8pv7XPJsKDtfQIWt7RV2XYVCbh+mscbLOZHohGcEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:27:92:88:39:44:2b:99:f6:dc:be:76:9d:00:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
        Validity
            Not Before: Aug 23 07:02:14 2025 GMT
            Not After : Aug 24 07:02:14 2025 GMT
        Subject: CN=df79a1d45c3f931b5060eb47479c8a644f34b33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:3e:42:89:52:32:98:92:59:42:6f:1a:c5:
                    8a:d9:23:7b:2b:a5:20:63:f6:ea:77:30:ad:bf:35:
                    d0:74:11:63:d1:49:86:b5:23:a1:b7:6c:58:6a:79:
                    22:49:b1:c4:b5:06:89:c5:8b:53:61:85:03:73:6e:
                    50:83:e1:76:2c:00:d3:a9:a7:30:89:a9:fd:71:70:
                    19:25:ad:b3:c7:55:e9:00:df:f9:92:87:9e:b2:e6:
                    2f:48:3d:fe:ef:e6:f1:ad:b7:ef:24:75:70:74:ff:
                    a2:d2:fd:4b:ae:22:5d:6b:27:af:67:93:fc:53:78:
                    b7:42:08:91:2d:f3:af:64:05:6e:3b:f7:db:24:0c:
                    a1:1e:43:f9:31:98:8b:79:d7:42:a4:5c:88:6d:0c:
                    90:6e:59:b8:da:ce:51:b6:22:c8:c8:97:44:b6:47:
                    9d:a8:9f:c1:e7:ab:01:55:ad:8e:ab:03:61:0f:ee:
                    d4:20:a6:bb:ec:bd:12:b4:dd:2e:17:e7:21:da:1a:
                    b3:be:27:ec:27:75:df:d9:af:13:7c:32:f3:87:5b:
                    c8:23:78:d3:81:a5:61:09:9f:23:91:da:74:32:3d:
                    18:ca:6d:81:e9:c2:98:fc:67:e8:65:5f:65:c9:88:
                    dc:ab:26:29:8c:11:11:95:c3:35:67:4e:e8:bb:de:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:79:A1:D4:5C:3F:93:1B:50:60:EB:47:47:9C:8A:64:4F:34:B3:3C
            X509v3 Authority Key Identifier:
                keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4f:b5:d8:76:9a:51:24:89:21:3c:bf:1c:6b:cf:0f:26:0c:
         9f:e9:3e:d9:a6:da:51:d0:0d:bc:6f:0d:dd:6f:bf:c1:04:70:
         7a:52:6f:2e:84:7e:66:8c:ad:d3:12:81:6e:47:86:37:24:fd:
         e8:2e:3d:56:c8:5b:30:19:d7:09:04:df:51:1c:89:53:b6:6d:
         75:3b:3f:ae:49:7c:6e:16:e1:9e:1e:4b:8a:87:57:66:fb:a9:
         2c:23:12:49:07:f6:7c:4e:1d:5e:d3:77:70:f2:21:07:aa:17:
         c1:d1:ec:10:c3:5b:7e:45:46:dd:3c:2a:30:d4:28:3c:3d:d4:
         1a:8f:95:00:ce:7a:a9:ec:08:d3:1b:8f:a3:97:45:0f:f4:0d:
         a3:9d:6e:24:6c:90:a9:fe:f4:9a:48:12:21:ec:df:4c:67:32:
         d3:2c:b4:e5:42:c6:14:92:f9:67:3f:ae:f0:d7:72:34:4a:3c:
         bf:cb:ce:0d:5e:fd:fe:14:2f:5d:71:c2:cd:45:08:71:7b:20:
         02:5d:b4:7d:3a:07:af:de:48:01:8d:b3:6a:e0:3e:14:13:d8:
         2a:97:52:71:9c:2b:90:e3:b8:4b:9f:1c:85:37:b2:c6:15:03:
         b4:82:82:43:4c:76:e7:16:3f:28:a2:8c:42:fd:ac:55:f2:0d:
         31:33:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:11 2025 by rpki-client