Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File:                     V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier:          Aci7rmLvluD9xZk1aSfyLQ4npyWojWvsQamQsYViHhc=
Subject key identifier:   93:9A:4A:EA:BB:9D:01:83:C4:0C:F7:B5:6C:EA:73:1A:F7:DC:B1:67
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer:       /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial:       0198D6CD528B23B5D268D65CA355B3B1FCF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number:          0608
Signing time:             Sat 23 Aug 2025 12:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:36 +0000
Files and hashes:         1: IN75Wo0DtghUohhXp1U5nsAv_wI.roa (hash: nJLnAhkfX/7UpoKrRsvnQaA4L9D5o2XedZEPGYHEFLA=)
                          2: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: EME6o1mXWoUXTA+bYEJHU3ep+6eF2hed4koRZmzVLos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:52:8b:23:b5:d2:68:d6:5c:a3:55:b3:b1:fc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
        Validity
            Not Before: Aug 23 12:00:36 2025 GMT
            Not After : Aug 24 12:00:36 2025 GMT
        Subject: CN=939a4aeabb9d0183c40cf7b56cea731af7dcb167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:f1:22:1e:c0:ed:3b:a3:1e:51:1d:ef:35:
                    11:88:6b:46:2b:ee:29:60:3b:f2:f9:fb:4d:2f:77:
                    33:9d:29:bc:00:b9:6c:c8:82:2f:f0:ce:4e:da:96:
                    bb:98:90:a1:0b:c9:f8:30:6f:08:a8:84:54:81:5e:
                    40:11:a2:f7:40:e4:81:a8:94:72:06:24:df:d9:fd:
                    6e:5a:64:d7:3f:7c:df:ae:de:c9:96:50:93:b7:b9:
                    3d:7e:bf:a9:a5:ea:71:65:bc:76:e6:51:26:a6:8f:
                    57:e1:92:fa:0d:4c:0d:30:9e:ec:84:1e:e0:ec:ff:
                    a9:f9:e6:9c:69:98:70:64:19:44:30:c1:b7:44:79:
                    a3:09:29:e7:f9:d5:ab:6e:18:6b:a1:0b:27:c8:a8:
                    73:b3:65:bb:ec:5a:b2:8b:01:fe:4f:5f:c3:6d:e7:
                    7f:d6:cb:2e:52:2b:1d:fd:fa:17:99:7b:b6:6c:9e:
                    3f:01:ae:d7:70:f9:13:93:c7:d3:78:4b:a9:18:da:
                    e3:49:1e:65:8d:7e:ea:52:0d:6e:37:9c:0f:ca:6a:
                    a2:11:f6:62:36:c9:82:72:d4:78:80:39:2d:5b:29:
                    b0:6c:10:89:13:84:5f:d1:65:5d:64:36:f1:ac:db:
                    bc:29:fb:91:08:97:54:7e:f9:ce:02:70:5d:06:31:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9A:4A:EA:BB:9D:01:83:C4:0C:F7:B5:6C:EA:73:1A:F7:DC:B1:67
            X509v3 Authority Key Identifier:
                keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:bb:8d:ad:a1:f2:ab:61:2b:e1:ee:9e:ff:94:a3:44:d4:fe:
         d7:eb:9e:33:39:4f:8b:f2:89:52:41:b4:66:ce:a6:91:19:04:
         25:a9:46:51:ac:22:5e:d7:cd:a0:4e:d1:5d:41:fc:e5:ce:9b:
         61:53:b0:b9:86:05:fa:12:ed:57:68:cf:94:37:b4:95:92:51:
         28:9e:6b:b6:a3:8c:d6:c6:c8:1f:0c:52:f8:b5:dd:79:78:72:
         31:b1:95:e8:ce:e9:e8:a6:33:a7:ff:c0:22:d2:de:35:d0:0b:
         7e:cf:4a:67:3f:87:66:b0:6c:fb:ad:82:f2:16:5c:d8:02:ca:
         d9:c5:43:fa:44:8c:ae:e2:84:30:82:c7:5e:76:25:40:5b:4b:
         b4:4e:7f:f9:d3:9e:00:59:ca:0b:b1:e4:9e:6f:0f:9d:0c:e8:
         2b:68:5d:da:36:23:eb:01:89:47:50:b5:4e:f3:6b:ff:8b:05:
         65:62:9a:57:f6:6d:49:9f:11:90:0a:d2:bc:cf:7f:5e:c9:70:
         0c:57:77:10:5f:34:97:b9:d1:0c:1d:c1:8f:fc:26:6e:43:f5:
         cf:b7:cb:3f:f4:99:2a:28:31:b5:15:a0:d9:a3:fb:fb:29:9b:
         5f:6c:e2:bf:95:b9:e0:00:18:2a:37:21:37:7a:b3:55:b3:7c:
         8b:9e:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:37 2025 by rpki-client