Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          hVkxen9eLbrilPTNchsxe1agRDGZ0Mx9Cd29sVtPABM=
Subject key identifier:   BC:A6:0B:B1:BD:35:BE:BF:C9:B9:48:A6:D6:D8:B6:8C:0C:11:00:02
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       0198D5159A964656101F6DB636F0778BD1BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 04:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:19 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: GVsAk5PQhD1OLuddHVTzmiUJaozpxDgj8f0RlB/XgHo=)
                          2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:9a:96:46:56:10:1f:6d:b6:36:f0:77:8b:d1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: Aug 23 04:00:19 2025 GMT
            Not After : Aug 24 04:00:19 2025 GMT
        Subject: CN=bca60bb1bd35bebfc9b948a6d6d8b68c0c110002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:b6:a8:9e:5a:56:4a:70:b5:9d:85:bf:a5:
                    e1:94:fd:4c:21:43:70:c9:70:8c:a9:7f:18:9a:6b:
                    1c:74:ab:17:23:a6:8b:81:0f:f8:99:80:b3:14:91:
                    a0:25:3d:8c:bd:c5:e8:8d:60:cc:58:d5:c2:dc:c8:
                    1b:58:22:09:fe:3b:92:ac:5c:8b:12:16:13:7c:db:
                    6b:ba:3a:29:94:f5:c8:49:f8:68:7f:25:54:54:e7:
                    2c:fc:2c:53:f4:10:9f:5e:0c:37:6c:4b:92:ff:04:
                    46:70:ba:9b:0e:f6:e6:e1:52:f4:ca:f5:4d:c8:f2:
                    cc:e4:aa:99:10:7f:93:ab:9f:71:21:35:16:0e:43:
                    c8:92:0f:95:7b:7a:ee:b4:ee:26:de:d7:c5:ee:69:
                    34:b5:ce:03:c5:98:67:ac:df:63:3c:1b:73:e6:81:
                    35:3e:e3:52:d1:0c:8a:de:3b:ca:85:fd:26:e9:64:
                    52:d7:b0:2a:53:fe:ff:54:50:85:10:45:ee:b3:dd:
                    62:2e:3d:ac:75:7b:a9:f5:76:4d:e7:50:e6:32:38:
                    ce:b3:52:22:7c:ce:42:8e:2d:51:f6:c2:7b:97:32:
                    21:a1:ae:f3:9f:1a:db:e7:a4:4d:f0:41:ea:9e:4c:
                    e2:d3:28:c5:63:bd:1d:24:e2:e1:05:ca:5b:c3:fa:
                    48:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A6:0B:B1:BD:35:BE:BF:C9:B9:48:A6:D6:D8:B6:8C:0C:11:00:02
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:86:1b:30:73:89:82:63:20:e2:11:5f:7a:4e:ef:6e:c0:
         47:e6:4a:52:8c:91:31:00:be:1b:e6:d1:50:19:5a:2c:1a:ba:
         22:c4:dc:98:89:f4:62:0a:5a:28:cc:7c:e2:2d:b1:7c:db:8c:
         f9:44:5f:5b:8e:5b:9d:85:f1:a4:88:82:91:28:02:d8:44:63:
         8f:0a:cf:37:48:4a:f5:c7:b2:e0:b5:1d:b8:d4:f4:9c:a7:46:
         b0:b7:c6:73:b8:05:ba:0d:55:ea:bd:e1:25:ed:ad:93:9c:55:
         bd:64:2a:83:80:d9:ed:72:1b:a2:59:4d:63:d9:6e:11:5c:f4:
         ca:b2:32:1b:a4:71:70:26:49:56:05:3b:2a:f3:de:05:bc:fd:
         12:d0:51:17:78:e1:63:2f:c5:e6:a1:e5:6b:b4:20:76:61:e4:
         f3:ef:86:25:09:31:fc:23:53:9d:25:b8:dc:c6:5e:4e:12:a7:
         6f:df:6b:a7:c3:9f:4e:8e:3e:8a:96:11:2d:03:00:0b:7d:9a:
         14:a1:62:ae:9f:62:26:09:92:2d:f7:6b:28:15:0a:cc:41:86:
         59:d9:08:74:65:05:21:83:7a:5d:53:e4:0c:8b:af:4c:1b:38:
         bb:1d:cb:cc:97:ea:e2:59:33:99:e3:fd:da:58:7e:e4:26:0d:
         84:e8:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:32 2025 by rpki-client