Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          fbM+6stQswf53XZIW6wsrjZxiOiJFwFpa218mm5MTpc=
Subject key identifier:   BD:67:15:01:75:9D:92:7F:D2:61:67:5B:68:7C:43:B3:31:FD:26:50
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       0198D54E97810728640F9E12365CA39CDC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0E12
Signing time:             Sat 23 Aug 2025 05:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:34 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: 0wIAtBahAWkqZkIAvJPzzjTCQ5bzogH1JFYzitMgmf8=)
                          2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:97:81:07:28:64:0f:9e:12:36:5c:a3:9c:dc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Aug 23 05:02:34 2025 GMT
            Not After : Aug 24 05:02:34 2025 GMT
        Subject: CN=bd671501759d927fd261675b687c43b331fd2650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:7c:25:ad:3d:94:1a:d6:df:f6:54:4d:14:
                    07:03:4d:c2:29:94:0a:5c:ea:d6:f6:81:2a:f5:2e:
                    be:c6:82:d5:c3:39:91:b9:99:40:41:03:82:27:15:
                    66:54:5d:0d:70:54:80:8b:f0:7d:6e:a0:48:18:0c:
                    08:13:29:6d:76:9c:35:57:1c:6a:2d:ee:e6:43:d2:
                    0a:27:61:ac:67:3c:36:6f:57:f8:6a:ef:a7:15:57:
                    24:9d:a5:b3:6b:e2:0b:ec:d3:a8:8e:d8:71:74:34:
                    c4:22:63:e8:9f:d6:e2:4e:b3:7b:bc:5f:c1:ac:75:
                    ec:13:41:12:56:64:b7:91:8f:f0:25:2e:14:10:d6:
                    67:ae:28:c5:d5:a2:60:8b:47:a5:ee:72:11:22:98:
                    e7:36:9a:23:28:e2:1c:e3:22:0b:dc:7d:2d:2b:13:
                    63:85:b7:fb:1d:55:af:9e:03:35:1e:aa:88:09:2a:
                    89:80:32:86:90:4d:af:ba:5d:8e:30:19:c6:ac:76:
                    e5:a3:7b:09:c2:25:b7:a7:8a:fe:34:e3:a0:37:cc:
                    23:dc:cc:c6:49:9e:38:dd:08:64:69:4f:4c:0c:43:
                    cb:ca:33:d1:5a:08:67:18:04:4f:a1:71:b1:a0:f2:
                    f6:08:c9:1b:42:b3:0c:ee:86:9e:8c:95:cb:04:d8:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:67:15:01:75:9D:92:7F:D2:61:67:5B:68:7C:43:B3:31:FD:26:50
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:d8:8a:86:5f:31:4b:8e:ec:5a:12:67:3c:aa:58:58:c8:
         32:0b:3e:85:4c:bd:cc:35:4e:ca:9e:54:90:5d:8b:20:7c:5e:
         c6:1e:04:13:60:48:1c:14:3e:94:4e:ca:ba:0a:28:8f:27:d7:
         ac:e1:d9:b8:43:a0:51:d0:a7:72:ba:cf:0e:43:01:4f:b4:08:
         56:72:e7:4f:f4:75:ae:01:5b:42:16:6b:83:a3:6c:bb:a0:b9:
         19:d2:f6:cd:a0:fa:32:db:e7:dc:a4:d7:ec:ec:e5:cb:27:7b:
         88:6b:65:8b:86:b0:2d:0f:8d:ac:d4:ab:91:a1:0e:db:42:4d:
         2e:4e:31:49:8f:80:ab:53:94:36:24:b5:e0:be:0c:69:27:15:
         6a:a7:b5:8b:52:f3:5f:67:f2:5e:70:34:09:be:d4:3b:59:65:
         61:21:bd:36:cc:44:55:3f:37:c7:89:b1:cb:63:1c:a3:81:76:
         38:e8:e2:92:cf:52:55:28:23:72:f8:32:a6:36:d5:f8:8a:df:
         ce:14:3b:9f:03:51:43:de:fc:35:53:41:a1:ec:e1:11:52:4b:
         90:a2:d2:d0:f8:ae:3e:13:45:f7:2d:b0:18:a0:8e:6e:c8:76:
         a5:49:c0:e3:fe:e2:f4:a8:eb:0f:c2:d4:5b:27:ea:36:c7:72:
         bc:c4:c0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:43 2025 by rpki-client