Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File:                     2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier:          YlbnkBcUdQFZ0pAIZ8aO9CkIyJniF3gWYTxLiE9xJxA=
Subject key identifier:   B1:49:26:9D:7D:A6:F1:0B:01:AB:CB:33:03:9C:10:15:1A:A4:DA:04
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer:       /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial:       0198D6608FD9D886F2BEC2B26C072EAECE1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number:          0750
Signing time:             Sat 23 Aug 2025 10:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:49 +0000
Files and hashes:         1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: 4775osqQPqpI3uFjUhfn4bJiHF5TvbZixQyPL8fRLQU=)
                          2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:8f:d9:d8:86:f2:be:c2:b2:6c:07:2e:ae:ce:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
        Validity
            Not Before: Aug 23 10:01:49 2025 GMT
            Not After : Aug 24 10:01:49 2025 GMT
        Subject: CN=b149269d7da6f10b01abcb33039c10151aa4da04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:ae:d6:6c:73:a1:26:a7:f5:d5:32:02:2f:
                    b9:7d:d6:cf:6b:64:76:97:81:4d:67:46:8d:b9:dd:
                    2e:a1:c8:b4:c7:be:e2:de:d3:18:14:90:68:58:ac:
                    66:2f:1e:6c:72:12:16:83:12:5c:62:fc:8d:4b:fd:
                    52:c6:0b:0a:dd:a8:82:e1:bf:b2:42:ab:1b:b0:4a:
                    d0:63:f8:8f:0f:18:ad:30:69:13:ac:c3:dc:e6:8e:
                    39:e6:bd:14:7c:60:03:64:82:33:1b:44:00:27:82:
                    71:83:2a:61:eb:a3:b3:5b:23:95:77:f3:72:f8:bd:
                    2d:2f:2f:a7:ed:e6:62:c0:41:12:5f:3b:9a:38:55:
                    84:b5:31:32:ad:e8:91:34:ee:ed:13:df:c7:ea:06:
                    3d:43:f0:35:9f:ea:68:f9:ea:bd:92:58:d1:48:16:
                    12:76:65:93:6b:a9:8e:36:ce:7b:df:30:e2:53:6c:
                    6c:e5:3e:79:f8:47:14:96:1e:3c:0f:8f:f2:f1:42:
                    80:f5:d3:eb:ab:4b:a1:67:92:01:30:5a:2c:9b:18:
                    88:6e:b2:86:7b:ec:cf:e8:1a:01:03:45:0a:95:d9:
                    cc:b1:3a:4d:62:ed:c5:13:d2:f5:66:84:70:5e:18:
                    2f:08:99:91:19:3b:7b:74:89:16:37:cc:1d:e8:7a:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:26:9D:7D:A6:F1:0B:01:AB:CB:33:03:9C:10:15:1A:A4:DA:04
            X509v3 Authority Key Identifier:
                keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cc:08:2d:47:71:d7:e0:b5:e3:e8:07:04:5a:02:20:a9:7d:
         00:c8:5a:d1:45:cc:a1:aa:4b:d6:6b:b1:fa:be:bd:38:f2:ba:
         6c:c9:b9:42:38:d6:23:15:55:12:0f:6f:a9:0e:e6:70:fe:2f:
         13:9a:a7:da:8d:77:d0:b1:06:eb:6c:cf:54:70:86:4a:8f:19:
         c8:aa:77:f7:d2:6a:46:37:8f:d5:15:b6:aa:74:bd:ea:7e:c6:
         d8:22:18:57:2f:49:85:1d:39:64:3d:8d:84:c9:cc:0d:8a:7d:
         a4:ad:57:95:e9:cb:34:70:c2:a6:27:b3:38:24:42:4d:c9:18:
         c8:5a:d5:a8:4a:05:71:59:d8:a0:c0:b6:97:ff:cf:29:24:a7:
         26:46:99:06:12:36:8f:07:eb:bb:77:ee:ee:dc:f2:69:28:93:
         bb:a6:56:b8:3f:82:56:15:ba:26:9c:c6:f5:4f:44:c1:87:72:
         4c:54:58:07:b4:be:96:53:16:de:e9:c6:09:ad:c8:cd:2a:f9:
         26:c1:f6:90:32:99:e6:b9:63:bf:8d:53:3b:5f:f6:27:a5:9f:
         61:87:a5:4a:68:34:99:a6:ca:ed:2c:b0:98:b7:ac:49:a1:1f:
         0b:46:b8:40:49:4a:a7:24:36:df:bb:e7:eb:0f:ad:7c:05:70:
         b1:cb:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:50 2025 by rpki-client