Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File:                     aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier:          D6z6XbFKuRh9bHjVmgSXZblStHZIknpiL5Drm73/Ia4=
Subject key identifier:   67:94:10:18:30:C2:49:C0:2E:C3:58:4B:E1:CB:34:53:77:FA:8D:5E
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer:       /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial:       0198D472E641816FE31DC3218AC69558D959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:36 +0000
Files and hashes:         1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: knVsvkK4uumtl+Rvuu4m9aBngqO1pckmjU7Thf0o9CM=)
                          2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:e6:41:81:6f:e3:1d:c3:21:8a:c6:95:58:d9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
        Validity
            Not Before: Aug 23 01:02:36 2025 GMT
            Not After : Aug 24 01:02:36 2025 GMT
        Subject: CN=6794101830c249c02ec3584be1cb345377fa8d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:34:88:83:f7:61:df:da:77:94:e2:fc:5c:1b:
                    65:ec:a3:54:72:25:53:55:ae:46:ef:e4:1a:6f:b8:
                    90:a0:e0:8c:e8:8e:cb:06:aa:c9:49:34:15:05:75:
                    3d:a1:79:59:8b:81:ef:4c:7f:13:ff:7f:47:12:48:
                    5b:e4:06:d9:a9:e4:8d:9b:2c:0e:ae:23:00:9e:ef:
                    62:80:7c:9a:0f:03:ac:c9:51:50:5c:f7:d8:25:a0:
                    11:fc:5e:ea:a8:27:89:c7:01:45:0d:5b:c6:80:7b:
                    81:9d:d6:de:7e:8f:92:ae:f0:03:aa:15:ff:08:05:
                    ab:b6:a6:bd:c2:eb:b8:fe:1b:ca:08:26:08:cd:0b:
                    d7:ce:59:df:6e:41:d0:83:17:0d:71:cc:d1:d8:c9:
                    97:d5:44:03:f8:31:38:23:5d:fe:39:e8:14:50:62:
                    e8:0a:04:aa:50:03:7e:06:52:51:ab:b4:20:d2:72:
                    24:6a:7d:19:4a:1d:0f:83:6c:0d:d2:4c:8a:c2:8e:
                    6a:c7:e4:25:90:68:35:ac:cd:37:12:8c:e8:f3:cd:
                    c8:4f:cd:23:4d:19:02:62:0c:31:c7:2c:3d:1e:0e:
                    38:b4:ea:f0:16:2d:20:b0:32:97:e0:41:12:65:42:
                    8c:b5:d3:c4:10:9c:11:bc:e5:f4:1a:67:fa:2b:42:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:94:10:18:30:C2:49:C0:2E:C3:58:4B:E1:CB:34:53:77:FA:8D:5E
            X509v3 Authority Key Identifier:
                keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:37:62:8f:38:e4:67:78:cf:ba:e6:cd:30:a8:74:9b:c4:bb:
         3b:db:7d:78:7c:da:40:31:74:5a:2f:1c:76:63:ae:27:dd:e4:
         4f:54:99:af:15:87:c4:a5:d7:65:3c:e7:ce:62:49:85:c4:99:
         48:83:48:66:7d:54:b8:fb:d6:d8:26:83:25:8f:e1:48:bd:fc:
         fa:84:b3:85:f6:a8:1c:2c:d4:2d:e9:c8:35:09:40:ed:6a:7d:
         30:b3:1d:3d:be:aa:3c:ff:fe:2f:dc:fc:12:fc:08:9b:da:38:
         c1:5a:54:a0:01:9a:48:a1:e7:43:c1:f5:ca:d5:d5:8c:a8:1a:
         a0:12:bd:18:73:a7:c4:0b:8a:6c:d7:19:9e:bb:e0:a1:ec:1e:
         f4:19:77:b2:14:8d:6f:43:bd:07:b4:b7:92:19:96:b0:b2:25:
         aa:23:96:e9:70:f1:cd:3f:68:56:e7:30:61:00:c9:de:9b:93:
         1d:48:14:f8:d4:83:be:71:6a:32:f9:74:01:1c:e5:8a:07:15:
         af:e0:16:1d:2c:0c:20:b4:35:6e:3d:a6:da:d6:6c:f2:d4:75:
         56:a5:c3:f6:07:a3:1e:a7:e0:57:bb:64:77:c3:f7:89:71:d0:
         4d:3f:f7:6c:11:fb:b8:42:3c:01:ed:15:ef:06:06:cf:fe:6d:
         5e:4b:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:03 2025 by rpki-client