Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File:                     Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier:          mONJpyJ04DcGtct/MIgS97N52X8aPRAqibL+o+3IILQ=
Subject key identifier:   E1:89:7D:2E:7B:5A:BB:99:AE:FB:9A:BF:C2:E0:72:D3:6F:EA:B1:72
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       0198D6989C9C1BD7329AB65201EDA7B47271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number:          06C5
Signing time:             Sat 23 Aug 2025 11:03:02 +0000
Manifest this update:     Sat 23 Aug 2025 11:03:02 +0000
Manifest next update:     Sun 24 Aug 2025 11:03:02 +0000
Files and hashes:         1: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: R18ghSvbrLmhh2BoQ8ctixQ/mGzPF8TQLclw8HKRGWo=)
                          2: ys86q5jXiENW-WW7AK-nkVinoug.roa (hash: PK1sfbQN38TktvS2UC6cxV1eHaxPEymB6l0sa2UeYfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:9c:9c:1b:d7:32:9a:b6:52:01:ed:a7:b4:72:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Aug 23 11:03:02 2025 GMT
            Not After : Aug 24 11:03:02 2025 GMT
        Subject: CN=e1897d2e7b5abb99aefb9abfc2e072d36feab172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:e6:01:26:3b:52:21:8a:c1:d5:30:db:92:
                    e6:8a:71:38:16:2d:90:b6:04:da:36:b7:57:0e:74:
                    c6:70:73:f1:f0:3d:cf:f5:82:80:88:b4:75:8c:e9:
                    6e:5c:03:64:02:f5:42:db:fe:52:22:08:ae:7e:5e:
                    7c:58:6c:a5:f8:8b:3f:63:14:9c:6a:b4:91:c7:3c:
                    4d:f6:75:ae:74:4d:e4:62:a4:c6:58:2e:e5:08:44:
                    ca:49:49:82:0b:c9:af:77:3b:a6:b6:0e:13:57:55:
                    eb:6e:af:3d:47:85:d5:4d:8e:0a:1d:6f:ba:d5:6e:
                    c3:34:b3:1b:31:a9:90:0f:d8:c1:13:59:10:7c:03:
                    73:66:6d:3c:01:84:f3:2c:c7:ba:3f:c9:b8:03:5e:
                    63:c0:5e:41:c9:bc:4b:64:b3:a2:8a:7a:b3:7a:a3:
                    a1:aa:99:53:3e:4c:8e:1c:f3:cd:d9:2f:a6:e2:98:
                    bb:d9:21:3e:33:e9:c9:09:75:23:c8:5c:d1:44:62:
                    84:d2:a9:01:e9:94:bb:71:5a:9f:0a:33:dd:6a:46:
                    60:dc:7a:6c:46:4a:8a:89:12:b9:ac:7f:95:a4:3f:
                    79:b8:bd:4f:c7:5b:c3:27:8e:11:3e:fa:ef:d1:37:
                    ac:53:bd:b5:0d:28:b9:33:fd:1d:87:9b:d2:b3:54:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:89:7D:2E:7B:5A:BB:99:AE:FB:9A:BF:C2:E0:72:D3:6F:EA:B1:72
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:89:5d:5e:f7:b3:69:76:f9:58:63:60:9e:86:01:b9:5a:
         b7:04:0f:c1:5c:88:2d:c9:63:19:9a:3f:a5:41:a2:fb:cc:20:
         38:f8:20:c7:3b:47:77:56:64:78:f8:f1:f3:d1:75:35:cd:01:
         69:9d:69:13:dc:15:a5:5d:ab:2d:8b:f8:76:32:42:75:14:e6:
         72:25:b7:09:af:73:a1:2c:a6:77:ce:0d:ec:14:01:e4:57:8a:
         ad:55:73:9c:2f:72:db:3d:4b:37:6d:c9:6c:be:a1:2a:67:18:
         6c:b1:9b:23:66:69:68:cd:01:8b:a9:39:3d:9f:0e:78:95:5e:
         22:b3:79:5f:7d:82:32:d6:71:c1:7b:80:a6:f7:26:26:d0:6b:
         a1:28:7d:1b:73:71:57:42:44:3e:fd:0b:5a:bc:7c:48:8e:5e:
         65:a7:ee:14:15:77:fd:06:11:1f:3b:05:e2:84:1c:c9:2b:ee:
         0b:86:8d:f9:bf:a1:50:7c:d1:4a:7d:b4:23:f5:cc:2e:45:3e:
         2e:23:bc:53:9f:4d:51:c9:07:17:96:be:82:83:62:72:e6:b8:
         4d:57:21:fa:dc:6b:f5:38:62:18:fd:86:91:c0:01:a9:93:ef:
         a8:74:1f:46:1a:9d:62:c6:00:f8:d5:79:8d:0e:81:d8:e5:d7:
         93:d4:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:01 2025 by rpki-client