Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
File:                     a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json)
Hash identifier:          yAFMBRuReHYl+8tXQb8r2u4xt4i0RyF5QW1JEM5ty/U=
Subject key identifier:   A3:A0:A9:02:16:7D:85:A1:68:4A:44:8C:C1:40:74:6F:4C:B8:72:9C
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Certificate issuer:       /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial:       0198D4E0897C0197ED25793234E217E44F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
Manifest number:          0C99
Signing time:             Sat 23 Aug 2025 03:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:21 +0000
Files and hashes:         1: WCDr0C7BpS_ig7DZMYGJWIavE9c.roa (hash: ZsfN2PWj+HvImmXbTTvAz0j0hR2wbZeR5zuw9m+NkaI=)
                          2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: 0b0y2cd/Bqr3O+EvhOYhk9ACw1IhxQ7wXt/mjRZhDOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:89:7c:01:97:ed:25:79:32:34:e2:17:e4:4f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
        Validity
            Not Before: Aug 23 03:02:21 2025 GMT
            Not After : Aug 24 03:02:21 2025 GMT
        Subject: CN=a3a0a902167d85a1684a448cc140746f4cb8729c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:17:30:9a:2c:b2:cb:32:4b:6b:bc:5b:74:
                    ed:eb:04:95:ae:b1:86:7a:7f:7d:df:c5:6c:62:d7:
                    b2:73:82:6d:c4:a3:95:50:2f:75:a6:f5:c8:11:35:
                    10:75:13:39:f6:c8:63:06:6f:dd:10:7d:97:a5:88:
                    97:3a:c0:23:3a:75:6c:05:89:1a:db:fb:e9:69:cd:
                    bf:da:a7:9a:1b:a1:68:d3:d9:37:77:50:f6:c5:5e:
                    a0:1c:11:a6:b6:75:1e:6c:78:12:10:5e:7c:f8:93:
                    c2:4c:57:92:cc:c1:f9:84:bd:3a:f2:3d:52:72:13:
                    c4:2c:e6:ac:cc:d8:09:47:62:3f:96:bd:f0:aa:e9:
                    60:f1:89:0d:0d:4e:33:3a:c6:33:13:a9:04:9c:c7:
                    dc:70:57:a8:72:5e:da:cd:38:f5:e6:40:03:72:90:
                    a0:12:01:36:6a:b1:3b:8a:a8:10:06:76:0a:ec:41:
                    12:15:d3:c9:d5:d3:cd:ad:19:21:72:7d:10:06:b7:
                    bd:a9:ec:1f:d0:17:b0:f0:f1:6e:f0:d7:11:fc:b1:
                    30:8f:35:6a:c7:42:c1:9b:77:0b:75:2b:55:ee:3b:
                    3d:79:91:da:cb:98:19:61:58:bc:d8:db:32:68:07:
                    94:b9:9c:4f:b4:43:81:56:e9:2c:ee:62:1c:f3:67:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:A9:02:16:7D:85:A1:68:4A:44:8C:C1:40:74:6F:4C:B8:72:9C
            X509v3 Authority Key Identifier:
                keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:a0:22:34:e3:bb:71:e7:89:fb:e7:3e:b2:49:2f:9f:52:
         8c:02:bb:2a:93:3d:e1:55:3a:75:b0:b5:71:bc:4b:6b:d8:fa:
         83:23:cb:be:c5:aa:be:4f:fa:05:ca:f8:c6:7e:96:3f:cc:9a:
         c9:9b:8c:9e:41:8e:00:ee:2c:2f:8e:c6:83:96:45:a8:0c:5a:
         86:d2:53:8e:00:5a:9d:5c:a1:02:55:57:9e:bc:1c:29:e6:e0:
         2e:c9:f2:45:1f:79:52:a3:c9:0b:f4:f2:65:2d:27:55:b7:54:
         fa:af:be:8f:46:22:a4:dc:c7:76:44:16:77:16:20:0f:c5:ac:
         dc:57:ef:2e:ce:ab:fe:e9:cc:fd:db:a2:32:76:3c:47:e0:9a:
         92:68:d8:fd:a3:7b:08:06:3e:ee:36:b0:81:9a:6f:5f:c5:6f:
         28:af:c1:05:f2:c9:0c:d6:42:eb:1f:9f:f7:e8:f0:94:34:81:
         2a:07:17:3a:b2:fb:10:01:49:80:41:7c:65:c0:b9:bc:59:8d:
         8d:99:f3:1a:51:c7:9f:c4:d0:42:0d:61:d2:8d:6e:e0:7d:b7:
         29:4a:53:25:e8:fb:88:2b:2d:7f:80:ad:c1:27:25:c0:13:1f:
         8e:67:c8:dd:cf:18:3d:a3:14:34:90:56:56:96:89:68:0c:7e:
         3d:93:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:07 2025 by rpki-client