Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File:                     B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier:          +or1KzvQe/FgVg/hTXePERPXXRx69wgGkDvxwaei1Gw=
Subject key identifier:   C2:15:E9:6B:C9:A2:98:FF:7E:80:F0:FB:C0:20:D5:E7:37:91:94:3E
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer:       /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial:       0198D73AE7DD6A2577E6B283CD05BDB8551F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number:          0CCA
Signing time:             Sat 23 Aug 2025 14:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:18 +0000
Files and hashes:         1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: QN87FIoOxvS7u9QpjT2IJdv/2Sekxw8L63Y05jmXaUQ=)
                          2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:e7:dd:6a:25:77:e6:b2:83:cd:05:bd:b8:55:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
        Validity
            Not Before: Aug 23 14:00:18 2025 GMT
            Not After : Aug 24 14:00:18 2025 GMT
        Subject: CN=c215e96bc9a298ff7e80f0fbc020d5e73791943e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:f6:8d:88:3b:80:d8:10:28:90:12:fa:a1:
                    3a:b2:e3:ab:1d:cb:33:a4:2c:7f:fa:91:f8:9e:5a:
                    40:84:9a:41:08:e5:12:6f:a8:5e:20:a2:5b:0e:f3:
                    e7:58:ca:c2:77:34:4b:bc:86:29:0f:c4:59:61:32:
                    e4:ed:44:7d:04:3c:a8:77:52:63:f2:e6:c3:81:62:
                    dc:4a:f7:05:99:ba:71:0f:21:77:0d:7e:12:6e:69:
                    cb:21:f7:da:91:89:d1:24:7d:3d:e9:10:c7:2b:1f:
                    d6:66:b5:a1:c4:cc:b8:07:11:b9:27:85:2b:83:d1:
                    4b:fa:c8:23:3f:cf:5d:bc:e6:68:ec:4e:58:66:d1:
                    26:b3:35:aa:cb:cd:d6:38:a0:0b:74:fc:69:ae:11:
                    ed:48:91:e1:a5:ae:ff:32:62:a3:34:1f:f9:da:44:
                    9f:8b:5f:48:c3:f9:8e:c4:39:f7:05:d0:7c:7c:46:
                    4d:2a:14:cb:19:b7:0d:5b:c1:49:4d:c0:bd:d6:e5:
                    bd:36:66:05:90:95:9b:5f:d2:b7:18:61:71:41:1e:
                    7b:12:9b:b5:d3:1d:22:da:02:ee:12:79:5a:ca:72:
                    89:56:f3:73:44:de:75:d2:28:35:24:c5:80:65:3d:
                    1c:11:ad:af:63:f0:77:00:16:f6:3f:0c:ec:cd:47:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:15:E9:6B:C9:A2:98:FF:7E:80:F0:FB:C0:20:D5:E7:37:91:94:3E
            X509v3 Authority Key Identifier:
                keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:fc:4b:64:f4:fa:f3:8b:c3:19:97:84:c1:4a:57:ac:1e:
         fb:6e:1c:38:2e:e5:d2:f8:08:b0:2b:04:3b:56:f5:6b:7f:ae:
         f8:ff:8e:20:24:f5:8b:b8:3d:34:b4:3b:8f:ad:a4:9e:d8:ab:
         62:66:c9:33:a0:1c:a3:f8:a4:9f:b4:f4:2a:16:c5:aa:ca:2f:
         b1:4c:db:b3:54:2c:c2:81:13:f7:dd:08:45:cc:8d:fb:23:f4:
         f7:83:03:0e:b7:47:a7:04:65:5a:20:0b:09:4a:91:a0:56:dd:
         2b:58:e6:27:f6:4c:69:32:b8:92:b1:38:b8:d3:88:43:7c:20:
         8f:2e:f1:70:dc:ad:84:f8:dc:d6:20:b6:90:9b:51:60:bf:1e:
         ed:9f:82:bd:d0:5b:b6:f9:bb:e6:d4:a6:85:bb:62:90:10:33:
         be:6c:eb:8e:56:c3:f5:24:a2:1e:ce:fb:61:91:a9:e9:1f:88:
         14:33:df:51:de:8f:b7:4d:3d:65:88:e5:ab:f1:78:7b:a7:e5:
         11:74:87:db:e7:4b:99:e3:c2:86:12:7a:4f:7d:2d:38:e0:c5:
         47:a0:7e:d6:0e:c6:f9:2e:e2:30:69:75:d6:35:80:f0:20:e5:
         71:6f:16:6c:e6:0b:4f:fa:0e:66:09:91:7c:bd:a0:07:e7:d5:
         27:da:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:30 2025 by rpki-client