Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
File:                     Akbop20wx8BJW8XOjuURD-qyhuY.mft (raw, json)
Hash identifier:          rLFwam0CF83FORGU/j3S7+zveQlZIGrs3buPCK5Pnoc=
Subject key identifier:   B2:BE:68:A4:6A:56:71:26:3C:B7:54:08:A1:B4:B1:80:2B:E2:1E:F1
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Certificate issuer:       /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial:       0199FBEA775506A55ECC93D2551976AF033D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
Manifest number:          1594
Signing time:             Sun 19 Oct 2025 10:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:11 +0000
Files and hashes:         1: 3uIWyZ2-NdDfWkBz-Cz4ehXcDXw.roa (hash: MQ45FFneVJjtvuTav7T4FKF/BiqudQZo8fk5fSUR0xU=)
                          2: Akbop20wx8BJW8XOjuURD-qyhuY.crl (hash: JGcsM/KCnnE2rOcOZjh2XgNibjCruPhIlGwRoq4yJIE=)
                          3: IUTkEFrjb7lN-w5zeY4pqlLKUu8.roa (hash: LCLWWsRmvZEBLl89l4Ybwp5FtpaUoZnoRp/7DEAb5RU=)
                          4: XFa9l_0cz21XUFqVHAhuFVoXl64.roa (hash: O42Bcxzs4yOQXX2kULBWDWVCdsdJQDwpjOWp8Rqh6bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:77:55:06:a5:5e:cc:93:d2:55:19:76:af:03:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
        Validity
            Not Before: Oct 19 10:01:11 2025 GMT
            Not After : Oct 20 10:01:11 2025 GMT
        Subject: CN=b2be68a46a5671263cb75408a1b4b1802be21ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:1b:9e:af:64:ce:0e:d1:fb:7f:34:06:52:
                    1f:b6:d0:5f:46:a4:64:95:44:11:a6:c2:97:da:26:
                    d3:1c:1a:d3:22:61:fd:9a:3c:7d:ca:2f:97:a2:7f:
                    be:78:4c:37:a2:ac:9b:f2:ba:23:49:02:57:91:ee:
                    fc:b2:3d:02:20:51:95:76:3f:38:2c:0b:51:b6:87:
                    7c:82:d1:6d:98:56:f7:7e:f2:2c:2a:57:ea:3e:c6:
                    b0:2b:e0:45:6e:d0:07:77:ec:71:43:a5:07:c0:73:
                    de:cc:da:cb:a0:18:d9:44:43:14:e2:81:1e:ef:70:
                    3d:f1:21:c5:26:e8:45:dc:d3:dd:ab:4a:c8:a0:a2:
                    3d:1d:9f:d5:76:0e:e7:6d:88:ec:79:8e:b6:cd:de:
                    b4:00:2d:f0:34:f1:f1:e0:ec:04:4a:20:be:cf:8a:
                    2a:06:bf:df:23:1c:30:90:32:b2:b8:55:c0:b5:a2:
                    b6:8f:c1:0a:4f:34:59:9e:b8:b6:04:1c:5a:2e:42:
                    2d:a1:1d:4d:a0:2e:ba:ce:fb:9f:5f:01:5b:55:a5:
                    97:4a:1f:e6:aa:b3:ad:6e:5a:e5:04:9d:4b:5b:a0:
                    2a:3d:c5:69:ce:bd:69:cc:67:57:c5:9b:ec:b8:7d:
                    9d:69:71:13:66:e3:d5:8f:04:66:53:07:12:26:2a:
                    02:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BE:68:A4:6A:56:71:26:3C:B7:54:08:A1:B4:B1:80:2B:E2:1E:F1
            X509v3 Authority Key Identifier:
                keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:49:44:03:24:cb:5a:04:3a:1f:37:03:b9:9d:c9:7a:14:0d:
         7b:3e:1f:12:bc:94:75:83:95:83:b1:8a:15:7e:e1:a3:81:95:
         43:b8:86:0b:a7:29:b2:98:99:3e:e8:7f:5f:ec:19:57:60:6c:
         33:f9:37:69:01:71:b3:9c:06:d5:87:54:9b:b1:da:5d:df:ac:
         20:8b:80:8d:40:91:11:60:91:c0:3a:73:eb:eb:39:80:da:f2:
         10:8c:b8:08:0f:22:09:f6:70:57:c2:14:63:b7:55:56:c5:8e:
         8e:38:a3:9e:11:de:b2:b3:b5:7e:d7:b5:62:96:48:7b:3c:0e:
         77:07:28:53:0c:46:7d:ff:f5:d6:31:07:d8:30:9a:26:de:11:
         47:1e:bc:8d:0e:21:51:a1:c8:3d:50:95:aa:e5:79:86:29:a3:
         ef:70:f6:3f:d9:dd:d0:64:7a:df:0c:4f:43:3f:dc:5c:72:ef:
         b1:57:d5:a5:5a:f4:1a:05:04:74:2d:b5:d6:7f:bd:a5:c2:91:
         8b:b5:12:93:aa:f9:44:48:70:16:a1:50:ca:ca:f6:80:95:e6:
         c9:2c:85:71:a4:40:e9:78:5e:e4:42:fb:e2:1f:d5:2f:20:57:
         28:ce:13:2d:48:bb:71:70:b6:1e:07:35:73:53:5f:2c:aa:a3:
         cd:56:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:44 2025 by rpki-client