Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
File:                     AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft (raw, json)
Hash identifier:          RSJO+E5wZICFWTCCKNqPce0OPqGgH/xg0BW6bfucPZ4=
Subject key identifier:   B6:FE:9A:8F:50:11:78:24:4E:41:5C:3B:FD:76:5F:FD:01:2F:FD:1C
Authority key identifier: 02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07
Certificate issuer:       /CN=02807e0863103f0912e7e0247811d167797d8107
Certificate serial:       0199FDD9FDA57A49A181F2B8A88E640CD8D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
Manifest number:          0AA2
Signing time:             Sun 19 Oct 2025 19:02:25 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:25 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:25 +0000
Files and hashes:         1: 1-Oc-5i1yyq11robM4onOto0qtew.roa (hash: k/9TNuFsVCQ/WuYJYH9Qe3QLWgW1naRjiSPb+eOEI+0=)
                          2: AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl (hash: cjg+0XgKkbaf7YEdacyvfTTfiq5qA4XQHFLTtvFLy+g=)
                          3: C1SZKKCkY7SbLFevNwXtaHd2whI.roa (hash: qLK2DqN3/ycXpzvuQLbdz4SdUDAqvfLR7qE4BXoJD04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:fd:a5:7a:49:a1:81:f2:b8:a8:8e:64:0c:d8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02807e0863103f0912e7e0247811d167797d8107
        Validity
            Not Before: Oct 19 19:02:25 2025 GMT
            Not After : Oct 20 19:02:25 2025 GMT
        Subject: CN=b6fe9a8f501178244e415c3bfd765ffd012ffd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:68:38:e9:84:58:ab:12:95:c5:3d:c6:f0:
                    b7:c2:e2:19:82:22:00:81:22:73:8d:0e:a4:ac:c5:
                    a5:5b:9d:5c:0c:02:79:17:86:d2:99:84:35:6d:d5:
                    ba:7c:ea:ed:c3:6b:26:a1:18:cb:41:ea:76:36:85:
                    c3:53:0f:6f:22:2f:64:b3:7d:3e:9b:51:8a:39:fd:
                    b8:e6:2c:b3:e3:47:93:04:69:70:04:e4:2b:7d:23:
                    be:77:2c:8e:5e:f0:1d:d9:ae:58:a8:70:a9:b9:cf:
                    69:1a:eb:e9:4c:87:0d:7f:90:37:cc:67:e3:9d:54:
                    2c:b0:53:1c:6a:75:b1:b9:72:5a:40:8e:90:ec:f7:
                    d4:b9:ae:80:d8:59:f3:5d:42:d1:28:3b:e6:08:10:
                    fc:bd:15:d2:75:61:f2:58:f8:18:e6:17:10:1a:19:
                    e9:ff:62:07:f4:19:b2:47:71:12:46:0d:3c:1e:d5:
                    d0:78:c3:6e:c5:7a:cd:3c:93:19:57:19:ea:6b:bb:
                    dc:75:7f:2a:5a:6e:7b:f6:63:3b:a9:2b:d0:ed:c1:
                    da:75:30:3e:19:54:3f:12:35:a6:7d:c6:3e:59:ff:
                    d9:1c:29:73:d3:7d:ce:a7:c9:22:9e:54:9f:2f:e9:
                    de:77:c8:c4:9f:47:b9:59:98:2f:18:12:ec:be:9a:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:9A:8F:50:11:78:24:4E:41:5C:3B:FD:76:5F:FD:01:2F:FD:1C
            X509v3 Authority Key Identifier:
                keyid:02:80:7E:08:63:10:3F:09:12:E7:E0:24:78:11:D1:67:79:7D:81:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf6049-8d1d-4be8-9f57-8bab78de32c9/1/AoB-CGMQPwkS5-AkeBHRZ3l9gQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bb:55:1e:c9:2b:dd:76:39:5e:bb:c1:52:a4:56:50:bc:ac:
         72:a1:38:95:34:fa:b9:58:88:a1:cb:3a:ab:23:cc:c5:14:b2:
         b3:1d:9f:5b:38:77:33:81:86:23:ee:bd:b1:4b:fe:0d:bd:25:
         ce:1a:82:1f:f6:b1:35:27:12:63:30:80:1e:a8:bd:09:86:22:
         a7:c3:5c:f0:f8:78:a5:ea:b7:67:c9:a8:22:44:cd:33:e5:85:
         0d:5c:ee:01:c2:63:e4:f0:27:aa:d9:db:35:96:f1:96:61:9d:
         1e:1d:40:e0:16:43:ca:4d:38:ef:a4:b2:ff:17:d0:26:42:c0:
         be:e8:9e:dc:bf:fe:af:7d:6b:83:60:6e:40:30:0c:91:cf:45:
         f0:be:4e:e3:a1:de:64:8d:05:7f:1b:c4:34:4a:f1:19:a2:0e:
         43:e9:00:a2:a1:3a:5b:82:49:1c:1e:12:a6:3c:9a:46:b6:91:
         ef:1d:50:ef:9d:29:73:b5:6a:2f:0e:c9:68:80:ef:cb:76:3d:
         bd:6f:4e:fd:2a:46:55:cd:dc:7e:2d:07:0f:0c:fc:cd:70:f2:
         4d:31:3e:37:27:ae:30:37:59:ab:15:5c:cf:85:f9:14:3c:ba:
         a2:7d:13:fc:f3:82:e9:91:cc:34:1e:81:e4:e2:d5:40:c4:4e:
         e1:4a:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:25 2025 by rpki-client