Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
File:                     32QSxd3xKOxxSvrqSD6Hsbx01B8.mft (raw, json)
Hash identifier:          6xYkib85o/k4rCf+9gZtMGkRVwxRErSE2lIgBi0KueA=
Subject key identifier:   C4:FE:FB:FE:8F:02:9A:32:46:7F:8C:0B:2F:43:7E:62:B6:F4:41:CF
Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F
Certificate issuer:       /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
Certificate serial:       0198D65F2ABD34CF9578B712AA990B80FB06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
Manifest number:          0503
Signing time:             Sat 23 Aug 2025 10:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:17 +0000
Files and hashes:         1: 32QSxd3xKOxxSvrqSD6Hsbx01B8.crl (hash: FbrdIEZEv3579YXnVNUY/22oSn9Zy6S0yRiXsuh0j+Q=)
                          2: NldJhq1MAVdUgbD6n6XKOd_rYuI.roa (hash: nicnFQBAIXmcU10eabjaRC66nw/nEzjS6x4xuq2azqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:2a:bd:34:cf:95:78:b7:12:aa:99:0b:80:fb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f
        Validity
            Not Before: Aug 23 10:00:17 2025 GMT
            Not After : Aug 24 10:00:17 2025 GMT
        Subject: CN=c4fefbfe8f029a32467f8c0b2f437e62b6f441cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:d5:27:e2:63:21:7c:a3:49:ad:93:7e:bd:
                    d9:c3:af:5f:02:f0:0c:00:34:90:88:24:3b:8b:25:
                    fe:9e:cc:94:18:5e:3b:81:86:8c:bc:bb:b0:14:c3:
                    22:3b:8a:15:2b:28:1e:1a:1d:d1:45:21:73:8c:0d:
                    45:12:10:73:5c:d8:b7:c7:91:38:b1:f1:7f:f1:b1:
                    9d:91:e2:24:87:64:35:0a:57:78:f1:28:43:63:0b:
                    9d:33:b3:e6:ef:54:99:55:ac:8d:b1:aa:bc:23:9e:
                    61:e3:6f:ab:38:b3:7b:db:1b:d9:de:15:9d:4e:1e:
                    ae:88:0a:f3:18:a0:1d:a3:94:33:41:27:d6:c8:a1:
                    d6:37:c6:b7:0b:2b:f2:85:93:74:4c:ee:5a:10:3d:
                    58:e5:18:03:0c:77:54:08:1b:e9:7b:1d:df:61:1a:
                    85:48:b3:12:a3:0d:4d:3a:a4:e4:28:52:2d:65:6c:
                    b6:dc:42:94:21:f4:a7:44:65:9e:6e:5d:b9:c0:9a:
                    71:bf:c1:cd:8c:8e:95:9e:b5:cb:26:e3:80:fd:19:
                    97:db:2a:4e:f2:43:ee:0d:04:3f:39:0e:a9:82:31:
                    00:c3:6a:38:5c:81:43:1d:3b:a6:30:9d:67:99:bb:
                    be:23:9b:b1:67:1e:33:f7:b5:28:28:ac:03:10:5a:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:FB:FE:8F:02:9A:32:46:7F:8C:0B:2F:43:7E:62:B6:F4:41:CF
            X509v3 Authority Key Identifier:
                keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:d8:e5:a3:6a:b5:46:51:ab:5b:34:fd:61:cb:6d:88:8b:
         83:f8:9c:0f:9d:f1:10:04:f2:86:b0:0a:cd:03:c3:f1:26:85:
         44:ce:35:8f:94:c2:b1:ea:41:aa:6f:52:52:36:be:9c:77:3f:
         04:cc:15:02:eb:5a:cf:18:e9:47:00:bc:4a:0b:a6:0e:11:3c:
         30:89:86:71:06:ba:79:dc:32:62:c8:3b:55:7b:08:f6:5f:77:
         f3:c8:d6:e4:74:ad:9d:d3:49:82:40:1a:72:85:5f:f6:a1:69:
         26:27:70:0e:cb:e4:13:ee:23:5c:0a:0f:dc:01:9f:c5:a0:e6:
         c9:41:55:e1:2b:66:98:e4:fe:13:ff:97:34:27:b6:a2:df:40:
         ed:ab:bb:0a:72:63:e8:3d:ed:94:4f:9e:eb:32:70:57:9b:d6:
         8f:c1:6d:8a:a0:5c:66:87:ad:31:b3:82:0c:85:bf:22:cb:7e:
         9b:d2:dc:a2:c2:0c:33:30:f7:d9:4f:7f:8a:39:80:a5:7f:59:
         04:c0:f4:73:39:6e:73:8c:3b:8b:21:de:85:1b:0b:41:86:44:
         65:89:09:6d:d7:15:ab:ba:0e:4d:c4:56:02:29:c9:20:49:e9:
         05:75:be:b4:14:6a:63:d6:bf:a3:56:4c:b9:c1:17:ad:c8:5d:
         52:7c:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:37 2025 by rpki-client