Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File:                     B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier:          Ri1gXj8PTOQm3EJfj1Mya1JBFZr8z9N7Rmjuoybiyho=
Subject key identifier:   3E:B4:02:F6:2F:9F:61:C0:70:8D:7B:12:47:D7:0D:D6:4A:D8:28:E4
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer:       /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial:       0198D6606EB69A8D09D755EEAEC95B629FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:40 +0000
Files and hashes:         1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: zOQa566WfqHCw1GUSLnFmx5RHd97qBmAtmQNytZ6Mq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:6e:b6:9a:8d:09:d7:55:ee:ae:c9:5b:62:9f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
        Validity
            Not Before: Aug 23 10:01:40 2025 GMT
            Not After : Aug 24 10:01:40 2025 GMT
        Subject: CN=3eb402f62f9f61c0708d7b1247d70dd64ad828e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:78:2a:2e:0a:f6:c7:59:02:42:e0:fb:30:
                    a6:5f:9b:2b:83:e1:2c:a2:5b:b6:69:a8:a7:29:d6:
                    0b:5e:d6:90:7d:b0:97:c4:43:5d:c9:ac:de:8c:77:
                    52:59:da:6e:17:ee:0a:da:34:5b:04:61:58:62:de:
                    e4:fd:b3:92:4d:e1:65:5f:78:85:34:08:3b:9b:01:
                    03:ce:42:cf:08:17:06:61:c4:aa:8e:65:a8:2b:2a:
                    c2:50:8d:c3:8f:7d:91:b7:6f:27:a7:6a:cd:c4:e2:
                    3e:c2:8e:4a:db:01:67:84:1a:0f:21:38:b6:21:ae:
                    98:1b:a5:fa:ff:3d:60:cb:8f:21:8f:f0:03:59:9a:
                    18:c5:c1:00:e1:d1:cd:32:78:49:a2:02:2e:61:1e:
                    b0:d2:59:f2:fe:7a:35:42:fc:4e:44:f0:2c:40:a9:
                    5b:15:0a:18:01:f5:25:bf:ac:75:7c:a2:0a:c9:ca:
                    0b:56:a5:f6:be:5a:d3:fa:f1:9f:8c:a2:14:0f:10:
                    83:3e:4c:d5:f4:df:08:0f:07:78:4a:d9:94:9f:c3:
                    08:37:75:a6:c8:23:60:36:2a:de:63:57:8c:55:e6:
                    29:42:e2:01:e4:35:b5:25:04:1c:39:cf:41:24:47:
                    a6:85:06:33:aa:14:84:2e:ae:c6:88:4e:f5:76:02:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:02:F6:2F:9F:61:C0:70:8D:7B:12:47:D7:0D:D6:4A:D8:28:E4
            X509v3 Authority Key Identifier:
                keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:60:bd:c8:d4:af:9c:09:79:a4:39:f0:d6:4a:24:a7:dd:
         e6:4b:12:58:3d:5e:ad:59:02:82:6a:c4:52:ca:69:33:0d:48:
         a9:d0:c2:02:2c:1c:32:be:1d:1e:5f:64:d2:1a:a1:c2:21:18:
         b6:ee:34:b0:de:4e:1d:94:84:85:71:10:11:61:1a:fe:d6:6b:
         84:8c:c2:c2:54:7c:dc:5d:78:b9:cd:a5:86:9a:53:a4:e1:56:
         38:38:29:a4:bd:3a:35:e2:32:f7:a8:e1:77:6c:71:3a:09:cf:
         b4:52:e9:64:d5:c0:ac:37:d2:9a:05:f9:d1:69:33:9d:0d:57:
         1a:88:f8:77:63:9d:fe:0c:bc:7b:dc:9b:9c:d2:fa:79:5f:18:
         2d:a9:3b:5e:b9:81:66:57:af:47:c3:9b:a9:02:ff:b9:2b:c9:
         52:bc:a2:ac:fd:88:a6:ec:e9:b6:1e:52:8f:64:c9:5d:9f:15:
         8e:be:63:f3:10:66:6f:63:5b:bf:e2:87:84:c7:b5:89:fa:2d:
         fa:45:93:26:62:b5:16:12:d0:24:d9:51:59:96:78:6e:6b:13:
         b8:d0:6a:84:c0:dc:c0:8f:66:28:52:cc:1a:21:d5:20:8c:97:
         b4:ef:6b:fc:38:68:8c:d0:aa:0a:7b:25:d3:08:9f:f6:a6:e3:
         2b:af:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:47 2025 by rpki-client