Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File:                     a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier:          gs3c1EZRDq+b7Wh2nT8h6+9N405pfPtKifJsFmJ664Y=
Subject key identifier:   E2:26:84:A9:C5:11:E1:8C:2D:62:67:B2:05:B1:6F:3D:75:77:6D:03
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer:       /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial:       0198D515EE6CF8C2EB2F817DCAA49C1BFCA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number:          1544
Signing time:             Sat 23 Aug 2025 04:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:40 +0000
Files and hashes:         1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: 6hrxHJiiyyYV8C2wSYIg6OW6E95+y0PwYa2AVkJD+ik=)
                          2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ee:6c:f8:c2:eb:2f:81:7d:ca:a4:9c:1b:fc:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
        Validity
            Not Before: Aug 23 04:00:40 2025 GMT
            Not After : Aug 24 04:00:40 2025 GMT
        Subject: CN=e22684a9c511e18c2d6267b205b16f3d75776d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:38:34:09:c2:7a:ab:b4:fc:01:08:28:8f:
                    ef:bb:4e:62:92:3a:75:7b:fd:bc:3c:85:5b:c8:de:
                    39:a3:6a:3e:63:e5:09:7d:dd:0d:e1:b8:29:9a:a5:
                    b4:b2:6c:b2:cf:ff:18:0e:bc:d4:08:76:21:bc:4b:
                    e3:26:a7:9d:44:bb:f7:a6:ce:9b:57:02:46:eb:40:
                    fe:9b:89:90:5c:99:88:3b:9d:ac:6b:74:67:8d:c6:
                    18:64:29:c3:fd:44:9d:0f:52:43:7d:57:92:fc:42:
                    4f:9b:53:d3:6a:7c:65:9f:17:13:f8:0b:84:98:49:
                    fa:6a:22:a4:f0:bf:7d:f1:3f:b9:d4:a0:a5:81:62:
                    a7:b7:7e:35:48:ae:3e:df:72:96:dc:83:05:21:c9:
                    c2:be:1a:b1:67:1b:8b:d6:53:8a:d6:ae:e8:b5:05:
                    c1:18:ca:b2:6b:d1:d1:fb:6d:b3:70:c9:a1:45:cf:
                    8d:e4:74:bd:9f:b0:59:e1:f3:36:c8:ab:a1:ce:57:
                    b0:8f:ee:be:73:f7:75:62:5c:03:21:77:3b:b2:59:
                    d8:06:57:af:d5:4c:dd:14:5a:33:cc:77:f6:c2:b9:
                    05:02:5e:40:03:f9:3b:57:1b:96:a6:02:e0:01:4f:
                    c1:f7:77:e9:fc:08:b6:ce:16:fc:de:fd:c6:e6:bd:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:84:A9:C5:11:E1:8C:2D:62:67:B2:05:B1:6F:3D:75:77:6D:03
            X509v3 Authority Key Identifier:
                keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:2a:00:59:76:ad:38:92:13:27:eb:14:8a:61:26:35:ff:
         ed:d5:bc:51:16:0b:91:25:b7:65:2c:24:2e:10:12:e3:89:b9:
         5c:57:ba:2c:79:37:87:43:28:bc:59:f2:61:49:01:b3:27:12:
         74:e7:68:ce:8c:30:57:b0:7c:b1:c3:77:5f:d9:0d:09:7c:29:
         8f:d2:fe:92:0f:c3:72:35:5d:68:2a:73:7c:7d:a5:7b:57:80:
         e2:85:be:06:60:f5:53:31:45:91:82:3c:ac:92:51:5f:eb:6a:
         ab:8a:ff:04:28:ed:99:71:eb:5e:1f:21:75:8b:99:6b:bd:f5:
         99:bf:65:b4:9d:75:e5:1b:b8:b0:61:8e:a9:3b:09:16:16:21:
         34:52:1f:07:97:78:4b:88:4d:c8:00:b4:6c:11:a5:15:37:3b:
         94:5a:26:49:93:7f:87:3c:17:b4:6c:80:cc:2a:d2:e5:76:44:
         04:7d:99:cf:19:61:ae:0e:d1:00:fa:0c:f9:39:4f:f3:8f:c4:
         e3:1e:31:20:27:ae:c6:7c:d9:65:79:b1:4b:11:00:ef:77:fa:
         3b:be:bd:3f:78:76:2d:e4:d4:1f:53:a2:50:af:d2:1b:8e:31:
         e7:4e:36:b9:f7:92:a9:73:08:52:27:70:59:17:e1:a7:2e:34:
         37:22:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:26 2025 by rpki-client