Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
File:                     RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json)
Hash identifier:          qi9HAiDBULv7cvjmsAW7uCRxtAUkZgWxPtPFa9t9EyY=
Subject key identifier:   B1:F9:62:F2:5F:0F:DD:1F:96:5E:52:79:DC:86:CC:EF:15:06:7C:A3
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Certificate issuer:       /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial:       0198D4E08C903375438E8297827076DB7A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 03:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:22 +0000
Files and hashes:         1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: pKSIsjbpSqA99Q306fVp2QBbPVS1kUUCtA8LFHDArHU=)
                          2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:8c:90:33:75:43:8e:82:97:82:70:76:db:7a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
        Validity
            Not Before: Aug 23 03:02:22 2025 GMT
            Not After : Aug 24 03:02:22 2025 GMT
        Subject: CN=b1f962f25f0fdd1f965e5279dc86ccef15067ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:78:57:5e:e3:91:f1:82:bb:7f:fa:ac:c3:08:
                    a8:6a:70:b9:d8:fe:be:d7:0a:39:66:a0:9d:b8:24:
                    65:b9:66:a7:db:07:81:eb:46:7f:3c:a1:06:31:cc:
                    6a:b8:24:5b:ca:34:0a:d7:87:92:63:c2:a1:b8:5f:
                    23:b5:fc:59:38:fa:dd:a4:b9:59:d4:95:b0:cd:84:
                    f8:8b:3e:ff:c9:40:3e:8f:ee:7a:06:3e:de:2a:7f:
                    f8:ff:ec:4c:a3:51:a3:0e:fa:11:9a:95:75:e5:f3:
                    ba:bb:0c:ec:02:7e:b3:4f:65:2c:e7:aa:a5:aa:8f:
                    c0:a6:75:1e:6e:dd:36:6b:4d:e7:97:c8:6c:93:49:
                    7c:56:f0:a8:a6:2e:23:f7:de:cf:d3:a4:da:58:f9:
                    26:c9:74:b8:0d:2d:cc:54:2a:db:ab:56:1e:95:4a:
                    82:27:9a:fe:50:75:32:e5:99:94:2c:c6:bb:99:0e:
                    e5:fd:f9:e8:45:76:f9:cb:45:c2:a5:16:a8:c6:85:
                    fa:ae:2b:04:6e:03:7e:8b:96:d5:b0:30:f2:03:cb:
                    52:4f:2a:57:60:07:10:72:90:ac:f2:99:4a:28:d3:
                    ce:77:89:14:a5:dd:21:ea:e8:c6:c8:03:a8:15:75:
                    bf:8e:a1:6b:ca:34:e6:73:16:8f:0f:0f:a1:7c:34:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F9:62:F2:5F:0F:DD:1F:96:5E:52:79:DC:86:CC:EF:15:06:7C:A3
            X509v3 Authority Key Identifier:
                keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:90:8a:d5:7a:b2:d0:b3:a2:71:ff:79:ab:0f:c8:15:f3:
         ea:40:10:5c:16:d3:fa:49:97:af:f2:90:30:7e:55:a9:e4:1c:
         12:b9:91:1d:c8:d6:7e:78:dc:78:1c:e2:09:95:d1:a8:bc:80:
         22:40:7a:b8:aa:41:bc:34:91:6e:52:29:a3:0d:53:ab:a9:fa:
         37:de:7e:4d:32:97:36:0a:f1:b7:56:8a:1e:e4:cf:36:30:6f:
         20:34:65:d3:78:a3:fc:b7:d1:d7:94:8c:83:1e:2c:a3:68:78:
         54:dc:7d:a1:0d:88:82:53:34:f3:88:f3:0c:e5:b0:46:60:26:
         9e:e9:a6:f5:45:1f:bc:a0:ca:a9:54:cb:08:35:fc:da:7c:13:
         73:f0:4d:4c:79:0c:69:8c:58:da:a6:da:ba:6b:b4:c3:f0:70:
         b7:12:c1:15:61:db:fa:43:5f:6e:f7:81:7f:8b:3c:49:79:9e:
         65:cd:55:28:ec:2e:25:13:a5:07:31:ff:c3:b6:08:d2:85:74:
         7a:ec:0f:b6:8f:d9:79:72:38:2f:64:b4:5b:3a:c2:f6:61:09:
         2a:a3:4a:01:97:72:30:52:63:4e:aa:02:d5:2d:d1:38:d7:36:
         26:a4:ef:32:2f:30:0f:5b:ae:dd:5c:35:1b:8a:46:61:99:09:
         f6:4c:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:37 2025 by rpki-client