Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File:                     BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier:          vBVXGGYVoKZxt07aEnmd/p5lmpdYd78cxzhwIOMKX1c=
Subject key identifier:   EB:A5:1E:1F:BC:7B:99:BB:71:7C:71:11:48:82:A3:C3:D8:36:38:DF
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer:       /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial:       0198D404701ACE97E8373E50D788802D62C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number:          1646
Signing time:             Fri 22 Aug 2025 23:01:57 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:57 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:57 +0000
Files and hashes:         1: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: ncmp+msoCIUi5GzgqmREpfy1DKLuaO2AbFyMwB22Q6U=)
                          2: zSdg1TL_rZPblgoER4Ka7YZIz5Y.roa (hash: 5MM1ssf5XEcNEojmTdbrlA8dg78ZH7/NCDsRblaf7f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:70:1a:ce:97:e8:37:3e:50:d7:88:80:2d:62:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
        Validity
            Not Before: Aug 22 23:01:57 2025 GMT
            Not After : Aug 23 23:01:57 2025 GMT
        Subject: CN=eba51e1fbc7b99bb717c71114882a3c3d83638df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:a6:4f:52:30:1c:86:20:5b:03:02:49:69:
                    20:5d:17:85:95:3a:57:7a:f1:f1:e1:c5:b0:e4:aa:
                    03:a2:57:cb:11:4c:a2:a3:8b:dc:bb:a5:7d:bc:6d:
                    3a:57:9b:31:46:e0:ab:dc:4a:b9:95:3d:27:03:09:
                    c2:9c:29:42:58:06:12:bc:cd:7c:bf:61:a0:a7:5b:
                    2f:f9:c9:57:69:f6:e8:cb:31:b7:89:18:fe:50:5b:
                    c3:ff:8c:a8:cf:47:82:8f:a5:0a:c6:16:70:a4:ae:
                    a4:f2:30:a9:a3:3f:d7:8d:fd:af:2d:29:49:54:cd:
                    b5:0a:4d:81:2b:55:ef:18:7e:d3:01:a7:c6:e6:67:
                    a8:af:16:0e:89:ae:70:86:92:3f:16:39:8d:96:c9:
                    14:a4:c1:88:86:26:ea:dd:d2:0d:6e:ed:bc:70:9d:
                    a7:82:eb:8e:5b:0f:82:98:87:63:e4:7e:63:27:fc:
                    3f:30:8b:55:32:8a:ec:96:10:e7:0f:e3:bf:6f:04:
                    bb:e8:07:89:9a:f6:57:bd:a2:92:8a:70:5c:5e:af:
                    22:9a:a2:96:93:06:13:7c:7f:33:03:0f:0b:45:39:
                    27:3d:bc:8d:a9:94:e2:d7:5a:bb:f7:1b:1c:0c:28:
                    c1:28:f7:6b:be:c3:d3:23:02:f4:18:1c:86:1d:ce:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A5:1E:1F:BC:7B:99:BB:71:7C:71:11:48:82:A3:C3:D8:36:38:DF
            X509v3 Authority Key Identifier:
                keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:19:a2:4c:f6:44:8c:68:e0:b4:76:fe:09:44:45:21:6b:
         30:32:46:c6:29:11:3f:34:65:a9:0b:5c:bf:7c:aa:01:5d:28:
         e6:3f:8c:b4:21:56:7a:cd:d8:31:f5:6c:7b:9a:f2:71:d8:f8:
         1b:af:df:ed:4a:c2:74:ef:7b:9e:6b:c1:33:2f:a0:a3:4a:8b:
         71:ef:44:37:87:7f:06:61:f3:55:be:bb:66:4d:46:ca:55:f7:
         59:08:74:d1:3d:7e:e4:74:d6:f4:01:cf:da:77:17:33:47:2c:
         ec:52:c1:0a:58:cd:aa:a8:43:5b:1b:dc:a2:04:e8:37:d0:6f:
         38:5e:b2:72:57:39:3f:f6:32:e7:f7:ff:46:f6:70:9c:a6:be:
         35:33:cd:01:08:85:59:e9:cb:e2:e7:c9:ea:5e:de:ab:57:21:
         f6:12:c9:d0:7b:bf:8d:22:4e:67:70:80:85:e9:53:55:e0:27:
         ea:c4:26:0d:dd:a5:f6:20:6f:cf:8d:33:87:65:7f:8f:42:ad:
         db:64:cc:c1:9a:b5:fd:03:01:a3:25:bb:62:4c:13:28:ab:a8:
         3b:c8:d7:e5:74:01:4b:c7:41:23:41:4f:9f:b6:c2:19:9c:0b:
         6b:17:6b:5b:91:c3:04:33:e5:3c:76:d5:41:12:83:fe:d8:0c:
         e5:0c:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:14 2025 by rpki-client