Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File:                     81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier:          Jd+1kkSnGi6fqmd27O3mdJ20tT5tCZBLeIYOeY83VIs=
Subject key identifier:   BB:04:20:66:68:85:2B:79:58:AD:6D:B5:2D:48:01:8D:72:74:A0:E6
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer:       /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial:       0198D7734D1242A163E5CF4029E59C146567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number:          06CE
Signing time:             Sat 23 Aug 2025 15:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:54 +0000
Files and hashes:         1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: p/4mXBHKH15cCaIMVqx2uTrVu28sAgKrYfx9stu3Zxg=)
                          2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:4d:12:42:a1:63:e5:cf:40:29:e5:9c:14:65:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
        Validity
            Not Before: Aug 23 15:01:54 2025 GMT
            Not After : Aug 24 15:01:54 2025 GMT
        Subject: CN=bb04206668852b7958ad6db52d48018d7274a0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:ff:ca:0a:43:22:22:bd:63:8d:c6:1c:9a:
                    53:7f:33:48:79:60:4b:0d:c1:03:c2:8f:f0:4c:23:
                    5f:79:c2:d9:5f:70:5c:6c:e5:e0:6c:a1:37:9b:8b:
                    b3:c5:a7:c5:4b:15:09:63:5f:87:94:26:e1:2b:52:
                    83:2c:2a:9a:da:11:ae:3e:aa:98:ce:bd:b2:3a:8d:
                    c7:e6:0d:c5:d3:91:79:d3:98:b6:24:e7:cb:c8:95:
                    5f:05:e4:2d:33:3c:af:45:23:db:76:35:f0:db:dd:
                    75:c5:50:31:fb:57:6e:df:92:5b:b7:c2:72:39:c6:
                    54:78:34:a1:ea:ce:6c:b1:cf:6c:8d:06:43:80:0d:
                    1d:f9:09:49:4d:36:93:6a:35:f1:7d:d8:ce:fd:97:
                    d4:99:11:d2:21:a4:8e:4c:43:b4:58:6a:49:9c:d9:
                    bb:70:02:46:2e:b9:19:05:26:77:a3:81:bf:bf:78:
                    04:47:3a:95:1a:a6:e4:fd:1b:09:7e:ad:f1:4b:ff:
                    9c:0c:b8:16:ed:b1:a9:60:78:47:74:4d:21:cc:e9:
                    60:ce:7a:4c:25:de:c6:57:6e:6b:78:f2:e8:5f:91:
                    62:35:fc:24:27:7e:3a:66:09:7d:7b:46:72:23:e4:
                    0f:97:3b:66:28:11:3f:63:91:4b:cc:1a:32:3b:54:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:20:66:68:85:2B:79:58:AD:6D:B5:2D:48:01:8D:72:74:A0:E6
            X509v3 Authority Key Identifier:
                keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:97:b5:2a:33:18:cf:d7:81:8a:0d:42:42:67:14:6a:63:33:
         2d:3f:65:fd:8b:c9:f4:3d:dc:55:fe:76:ab:14:19:ed:5e:81:
         31:eb:81:51:0a:1d:37:3c:2d:59:45:6d:f9:df:68:08:b5:7b:
         6f:05:0c:e8:42:ea:3d:dc:fa:de:bb:4d:81:33:21:d4:a7:71:
         bd:3c:e5:2b:35:fb:f6:e6:90:56:45:71:77:06:d6:5a:06:cb:
         cf:9a:9b:ec:f5:11:bf:ce:7d:40:08:7c:5a:80:be:0a:ea:12:
         09:1d:f3:41:22:86:c7:a8:24:20:85:e2:94:aa:4e:7b:8c:3f:
         67:ed:6d:b8:56:b0:a3:16:f2:4b:88:16:8c:d3:f7:98:2e:ba:
         bb:43:22:b1:5a:8b:9a:fd:e3:52:7a:23:42:78:f1:a3:ba:13:
         17:15:a5:b0:ed:70:fe:0a:4a:fd:7d:e0:bc:9c:d9:ee:58:57:
         f4:71:33:da:22:f2:d7:cf:53:28:20:95:0b:62:6c:ec:31:e5:
         8a:2b:b5:17:8c:d7:29:9d:c8:6d:dd:b0:74:8c:6a:6f:ca:61:
         ea:d6:a5:17:6b:da:cb:11:96:e4:ea:cd:b0:62:e4:8c:62:7a:
         63:72:46:12:d1:3a:2b:89:70:6c:1d:1c:fa:77:bc:89:f7:10:
         35:7f:62:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:17 2025 by rpki-client