Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
File:                     _m27LD-YIyjgdJUUeRzrwuDqn4g.mft (raw, json)
Hash identifier:          q7AMxZp59FbFZETdB7lLRTd+CrFgngY1Gr44osi806k=
Subject key identifier:   71:44:5A:E7:7B:CA:86:BC:4F:4E:7E:9A:B7:7B:3F:46:76:9B:65:6E
Authority key identifier: FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88
Certificate issuer:       /CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
Certificate serial:       0198D54DD47C3853E6677F2A6C0D0A62531F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 05:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:44 +0000
Files and hashes:         1: _m27LD-YIyjgdJUUeRzrwuDqn4g.crl (hash: S55OQnU1givNc7yjaReKsyU5Bv6n024JEcQjmew+kXE=)
                          2: r3BNRU8ZFPvkT4gYLKmsnOzA0wU.roa (hash: usVLkCiOqF/SXLxD35rH8tk7OQPGu7iMv/2X+vigyVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d4:7c:38:53:e6:67:7f:2a:6c:0d:0a:62:53:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6dbb2c3f982328e0749514791cebc2e0ea9f88
        Validity
            Not Before: Aug 23 05:01:44 2025 GMT
            Not After : Aug 24 05:01:44 2025 GMT
        Subject: CN=71445ae77bca86bc4f4e7e9ab77b3f46769b656e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:7e:5c:c0:b4:f4:1f:3a:19:23:23:f1:f2:
                    a5:70:97:37:f6:14:6d:0a:07:76:2e:7d:65:c8:48:
                    6f:05:b2:24:42:f8:c8:27:b7:80:7c:aa:5f:02:cf:
                    a5:7d:62:a7:e3:73:ef:2f:c7:8b:46:a1:e6:ff:c2:
                    20:5b:5a:0f:11:7b:60:8c:1f:84:79:f7:3d:b5:43:
                    f6:fc:25:79:f8:03:70:29:4f:f9:02:ba:56:ce:9e:
                    f1:d7:93:58:06:01:d7:61:2c:86:7f:df:96:96:74:
                    39:85:40:1a:70:71:b8:87:e9:44:58:d6:bf:c0:53:
                    9b:d5:37:b3:5b:a1:28:d2:85:de:b6:c3:dc:8c:e2:
                    2f:68:6d:b0:eb:f4:de:51:30:02:49:6a:e8:9f:ae:
                    d0:5e:bd:b9:95:e1:fa:a5:03:d8:7c:30:81:f8:4a:
                    20:11:58:b9:cc:c4:d6:3f:34:0c:65:5a:0f:08:c2:
                    e2:36:1f:10:9a:0e:89:f6:2f:a1:98:84:63:cd:d8:
                    50:ec:1f:c9:0d:69:e0:32:5e:43:b4:1f:d2:7b:a4:
                    6b:f0:d0:b9:69:fd:ee:58:74:11:fc:a8:c2:59:5b:
                    1f:c0:1d:ed:07:7e:8a:7f:32:6a:07:52:a3:32:a2:
                    1c:50:37:21:77:62:02:1a:78:96:44:47:62:cd:20:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:44:5A:E7:7B:CA:86:BC:4F:4E:7E:9A:B7:7B:3F:46:76:9B:65:6E
            X509v3 Authority Key Identifier:
                keyid:FE:6D:BB:2C:3F:98:23:28:E0:74:95:14:79:1C:EB:C2:E0:EA:9F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m27LD-YIyjgdJUUeRzrwuDqn4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e08355-cbd0-4012-bcf0-531266df32c0/1/_m27LD-YIyjgdJUUeRzrwuDqn4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:37:5d:47:4a:f4:28:da:50:f1:3d:5f:18:e5:dd:94:bc:
         cd:d2:24:9c:a3:f5:0c:45:7f:40:28:df:70:4d:5d:14:f0:2b:
         5e:f2:a0:fa:f6:db:01:bc:7c:06:cc:41:e3:e2:e2:3f:9a:6e:
         c7:f7:de:eb:7d:7b:15:c8:25:6a:f6:8a:75:f9:fe:83:97:83:
         75:c2:4e:af:3d:db:64:18:2d:08:27:0d:d5:c3:5f:c7:62:ff:
         c3:58:a6:95:29:5f:2e:f2:b4:6a:f0:b3:43:d0:b7:f8:4a:7f:
         3f:03:4a:2f:4e:90:99:24:d8:99:8e:6e:05:74:af:8e:26:3e:
         cc:4a:de:40:08:e7:c7:d0:e0:d9:8a:50:0c:a6:ee:df:31:fa:
         c8:5c:a3:08:de:ac:3a:36:5a:3f:39:e7:fa:30:6b:db:17:ff:
         48:ee:03:a3:26:18:6e:98:05:d4:e2:63:21:52:fa:ae:8d:a1:
         15:6f:10:a3:f5:55:9c:20:44:2b:ba:8f:24:e0:c9:50:73:b5:
         b9:ac:f8:59:f6:fd:e0:60:b3:7b:7e:c5:dc:da:6b:35:ca:b6:
         f4:b2:ae:ff:76:97:58:3d:79:5f:13:02:c6:47:dc:b0:1a:4e:
         e4:7a:54:f8:ec:c3:d5:23:cf:2f:ea:8f:33:4e:c9:e0:5b:66:
         92:70:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:41 2025 by rpki-client