Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File:                     BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier:          L3MgTZk3/TZyymgA4B31oDmQrdy6CCwvMKAZR/C3u3c=
Subject key identifier:   81:25:EE:80:81:EC:4E:D7:37:51:1D:12:F1:30:33:0F:42:C8:04:7E
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer:       /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial:       0198D84F857963FE00CCC3E5397F190BEC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number:          0AAF
Signing time:             Sat 23 Aug 2025 19:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:26 +0000
Files and hashes:         1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: r2c3TPfGB1BVRDatJZqCSW8N0b0FE7o5Lp1judSQCCU=)
                          2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:85:79:63:fe:00:cc:c3:e5:39:7f:19:0b:ec:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
        Validity
            Not Before: Aug 23 19:02:26 2025 GMT
            Not After : Aug 24 19:02:26 2025 GMT
        Subject: CN=8125ee8081ec4ed737511d12f130330f42c8047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:9a:19:b9:85:cc:0b:a9:01:38:60:a5:6e:
                    8e:1a:7d:fc:07:32:bf:c7:3f:c7:2c:4d:23:bb:17:
                    82:09:f7:07:35:3d:95:68:57:a1:51:2d:4e:a7:c6:
                    4e:4a:da:71:f0:4d:a6:44:ed:22:ed:12:68:81:ed:
                    59:6d:e3:b9:8d:bb:2e:81:a0:0f:fc:0a:2f:ff:b7:
                    5d:5c:7e:d7:9f:4e:6c:77:1c:1b:38:45:88:70:77:
                    54:c2:f3:c7:9e:3d:aa:b8:27:42:10:b3:d1:d6:3b:
                    1f:06:93:cb:76:9d:6b:e7:6b:f7:a9:b6:f8:c7:30:
                    6e:fc:f4:fb:30:36:e7:63:aa:e6:f2:96:d2:4e:eb:
                    3b:87:0f:aa:47:ca:8f:7a:0d:df:a8:ca:c7:f7:0d:
                    bf:83:f4:61:57:59:a0:26:23:5d:43:55:2d:e3:f4:
                    d7:93:4a:f8:60:de:dc:8a:49:91:89:48:fb:7a:d6:
                    b2:5a:83:44:35:e6:71:12:85:56:db:d3:3c:a8:a2:
                    60:e0:d6:e8:59:fa:f2:e1:ed:ce:87:5b:76:66:8c:
                    9c:6c:8a:06:8d:b4:ba:85:72:09:df:a8:f4:46:5c:
                    30:ca:67:34:ba:2c:fe:e5:0c:f4:b1:8b:01:a0:04:
                    45:bf:f8:d9:bc:a6:f2:bb:eb:d3:d3:dc:f9:8e:16:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:EE:80:81:EC:4E:D7:37:51:1D:12:F1:30:33:0F:42:C8:04:7E
            X509v3 Authority Key Identifier:
                keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:c2:58:21:24:e1:de:70:9f:be:4f:b1:26:53:03:78:df:
         7b:e5:a5:d5:07:06:50:eb:89:9b:89:25:dd:3e:90:a5:d8:3c:
         bd:bb:4f:a6:e6:90:9e:27:9e:16:88:ef:23:ea:d1:79:e6:c8:
         d1:0c:7a:db:fa:97:0e:94:4f:26:87:c9:90:cc:19:f4:18:38:
         bf:53:fb:9a:d8:b6:65:68:88:77:fc:42:7c:10:fd:a2:dc:b7:
         91:8a:96:17:8b:fe:1d:6c:5a:5c:e6:0e:69:e2:e6:42:10:e2:
         68:6f:33:9a:f7:31:00:a3:38:a9:84:45:12:3a:c9:a0:d3:8d:
         af:2a:bb:79:3c:9f:7d:3e:c6:6b:bd:45:7b:ea:3b:8c:bb:f6:
         45:8a:e7:5b:7e:d2:bc:70:1c:1d:14:77:4f:f9:d0:6c:2a:59:
         9d:36:7c:93:ef:52:c3:db:b8:35:6b:70:20:ed:f2:72:b5:47:
         91:97:13:88:69:ea:45:a1:d0:fe:e1:c3:12:b3:6b:e4:e4:e6:
         c7:70:2c:36:77:42:e7:19:38:f4:c4:91:0b:5f:7c:a5:c8:a4:
         cd:ed:a3:ef:db:32:8a:5c:55:64:db:b3:af:ec:df:a4:e4:cc:
         50:23:89:d5:22:6e:b0:ba:4e:65:8f:6b:d2:f4:20:48:38:40:
         ef:8f:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:10:29 2025 by rpki-client