Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
File:                     30gYvQqzvf87E_-goLSWmf4NZdg.mft (raw, json)
Hash identifier:          Z88RxnIn6+L5p4keR2yUBrRZk9yHzTmtOfkH6qz+3Fc=
Subject key identifier:   B1:70:15:50:79:57:93:56:2B:AF:B4:25:6E:50:61:10:A6:98:9A:36
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Certificate issuer:       /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial:       0198D5BBAABF981026CED07F65BD19E3CD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
Manifest number:          12DD
Signing time:             Sat 23 Aug 2025 07:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:42 +0000
Files and hashes:         1: 30gYvQqzvf87E_-goLSWmf4NZdg.crl (hash: nG2HQZ84zpR7bvbVHPCwHnPTcxolaY41FzM9W8IYqgA=)
                          2: sWuySCoAeegdfWnkMuqNoxyi1Bw.roa (hash: 0K3bxqojGl6MNEviSU5eh2+DL5CKnr6TGRVYgLgGugg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:aa:bf:98:10:26:ce:d0:7f:65:bd:19:e3:cd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
        Validity
            Not Before: Aug 23 07:01:42 2025 GMT
            Not After : Aug 24 07:01:42 2025 GMT
        Subject: CN=b1701550795793562bafb4256e506110a6989a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:46:83:75:c5:70:d1:24:af:58:cc:4c:9f:
                    b6:bf:7b:b3:02:22:31:b3:f6:4e:14:a0:29:46:7c:
                    45:ab:4c:48:5c:e7:42:70:d5:5d:08:bf:86:4a:60:
                    dc:44:b7:25:e0:1e:7d:97:86:00:59:00:4d:e0:75:
                    e3:29:a5:10:eb:d2:4a:c8:87:03:b4:b2:06:ac:16:
                    0a:6a:a3:ba:72:56:c8:df:e8:cc:e2:a7:a3:0a:35:
                    19:b5:1a:0b:5b:d3:aa:1c:94:de:ce:d0:a6:0b:84:
                    c5:35:d9:d3:f7:97:49:73:6f:c9:fe:db:b7:48:fe:
                    7e:bd:ad:58:83:af:d7:cc:4a:3e:7d:be:06:96:88:
                    ae:86:37:0d:84:f9:72:bf:9b:ed:18:40:a2:fb:6d:
                    d0:82:95:4c:8d:52:8f:61:84:8c:29:01:c9:ae:c4:
                    63:d6:24:45:a4:2c:43:47:b0:2f:76:c6:05:e6:62:
                    57:23:e0:dd:1c:06:70:01:c5:fc:57:76:4e:29:a0:
                    1b:cd:94:9b:1d:f5:2b:d7:a9:74:3f:08:6b:c7:6c:
                    b3:35:67:9f:42:ad:7c:a1:ee:4f:a8:6d:75:63:4e:
                    6a:a8:03:8d:e2:e1:c1:f8:1c:c2:0a:79:d4:85:8c:
                    63:b5:41:77:e0:d3:f1:4d:a9:67:f1:2a:74:0d:fb:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:15:50:79:57:93:56:2B:AF:B4:25:6E:50:61:10:A6:98:9A:36
            X509v3 Authority Key Identifier:
                keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:17:01:10:16:d0:b4:5f:29:9d:c1:4d:12:83:fd:10:99:
         24:c0:fa:58:78:a9:33:21:48:5c:e4:4c:4d:0c:15:88:da:79:
         cd:16:2e:77:a6:9f:cf:31:28:76:81:6e:26:09:82:bb:28:7e:
         b0:b0:a9:9c:20:fa:90:87:c8:f6:28:fe:56:c8:05:26:da:e6:
         b9:a4:bd:1a:e1:3e:98:34:54:08:b7:93:29:6f:cd:d3:47:9d:
         01:48:42:46:23:32:21:6d:b0:02:f2:08:8d:28:33:a4:12:1b:
         91:7e:ba:8f:b1:cf:cf:db:7c:71:2a:3a:0d:4d:99:be:58:63:
         55:2a:05:21:66:17:39:c5:6d:99:47:5e:be:8d:82:11:6f:1c:
         49:2c:94:45:0a:94:4c:6f:e7:67:8d:e6:de:f0:9e:03:4e:f0:
         b9:04:07:d3:a8:4b:7f:c8:10:66:3e:27:83:79:63:29:47:b4:
         23:1d:d6:a8:34:e6:dd:30:b2:3e:26:6e:ce:4f:b9:85:63:b3:
         3a:8e:aa:ec:9e:51:cf:ec:99:99:4a:c0:94:fc:5d:d9:f9:fa:
         78:bb:c5:ee:9d:22:94:9a:d5:54:4c:dc:fb:47:19:a2:dc:3b:
         b1:ec:03:bc:59:ff:0b:65:5b:ab:b0:66:94:43:14:52:f9:83:
         1c:f6:14:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:28 2025 by rpki-client