Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          y4lWZdmMDe3yOG7ZlHfGlzWR1OQ0+ufXmN4JaPripSU=
Subject key identifier:   53:E6:6A:A4:80:F0:67:38:CC:61:12:70:32:A5:28:13:1D:E7:DF:B4
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       0198D6CDB981CF564402BE9F0C1147E80B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0D46
Signing time:             Sat 23 Aug 2025 12:01:03 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:03 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:03 +0000
Files and hashes:         1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: g/ljjcShEAbxY8/JGbGrOAGDS0sDs7QwN2w4Ikiqbg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:b9:81:cf:56:44:02:be:9f:0c:11:47:e8:0b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Aug 23 12:01:03 2025 GMT
            Not After : Aug 24 12:01:03 2025 GMT
        Subject: CN=53e66aa480f06738cc61127032a528131de7dfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:e7:3a:6f:2e:ad:3d:67:9c:95:43:52:fb:
                    a6:be:db:97:43:64:66:57:90:dc:e8:d6:15:60:de:
                    ca:eb:b2:42:47:ca:2d:1f:ac:f5:c2:48:3b:ab:dc:
                    95:e8:b9:71:06:f3:06:52:b6:22:75:ae:52:a6:77:
                    bb:1f:4c:26:5d:79:9d:33:68:c4:b2:b6:39:b5:67:
                    bf:ba:55:78:3b:27:8a:6a:c6:32:00:65:8e:90:2a:
                    d5:30:72:2e:e2:80:59:be:40:d8:b8:36:4b:c4:ea:
                    58:e3:a3:4e:ce:24:27:9c:7a:29:00:b6:7a:21:da:
                    9f:25:71:f7:f1:f2:e5:da:94:93:4a:cc:c2:f1:dd:
                    92:6d:b4:a3:41:3c:b4:fb:1f:a6:64:73:3c:a2:c7:
                    b3:45:1d:a0:37:35:06:2c:53:1d:8e:11:8a:92:cd:
                    cf:12:a8:8b:4f:8c:f4:df:2b:b0:26:f4:83:7e:38:
                    ab:ed:ea:78:6c:2d:c9:4f:69:77:96:28:af:bc:a3:
                    79:ac:bc:40:f5:f2:b0:8b:db:90:70:5a:58:ba:30:
                    56:83:ad:73:3e:01:4f:e9:9e:dd:dc:cc:4f:f8:6e:
                    45:80:9a:62:65:9f:3b:76:79:f5:3c:ec:c2:44:8b:
                    78:85:1a:e5:f2:fa:5a:a9:34:81:ef:44:c0:bc:37:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E6:6A:A4:80:F0:67:38:CC:61:12:70:32:A5:28:13:1D:E7:DF:B4
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:bb:35:3a:05:6f:41:f9:b8:5c:a7:f7:f6:d8:d4:e6:82:9b:
         ba:7c:21:5f:0c:98:9f:14:34:8a:38:bc:5c:97:61:a6:a3:aa:
         ca:79:b3:ec:4e:f0:8d:55:de:13:f3:2d:c3:da:e2:07:53:22:
         cc:5d:4c:a3:80:a8:23:c4:cb:d9:c4:0c:37:4f:a4:94:58:f8:
         3a:8c:7f:05:97:0a:a0:09:75:77:e7:93:c2:82:ab:52:75:e4:
         78:0f:24:9c:08:db:d0:fe:51:dd:4d:27:eb:06:e0:d3:27:e6:
         13:4a:af:63:88:96:18:a9:8b:62:c7:31:78:86:56:cf:15:91:
         2b:58:7c:b7:16:db:b8:50:45:1f:66:80:34:0c:ad:38:ff:ec:
         9d:c8:f3:f7:53:9d:52:50:84:62:ed:02:ae:27:b0:24:92:ea:
         1f:ec:73:91:72:cf:74:1e:ba:7f:2d:23:30:f2:9e:40:65:d8:
         16:bb:8e:45:08:56:e3:85:d2:9c:e7:4a:5d:0c:93:a5:31:76:
         a8:99:f7:fe:21:e9:f0:c1:48:b0:39:f2:bb:5d:76:50:d0:6e:
         37:2c:e2:db:59:7e:91:fa:fe:e4:44:f5:6c:40:bb:6c:b4:cd:
         ac:d6:0a:b4:fc:92:93:f8:2f:c6:b7:18:e8:37:fb:9f:ab:b1:
         57:97:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:19 2025 by rpki-client