Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File:                     X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier:          G96zcW9KRcs2dHa6B2r5nKQnku9izDldjoksKXq7Ejk=
Subject key identifier:   74:51:B1:99:95:F3:1F:78:A0:A6:68:3D:17:16:BB:22:6F:84:5F:FA
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer:       /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial:       0198D69863B4E6122B2A457561AE64DF9003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number:          0470
Signing time:             Sat 23 Aug 2025 11:02:47 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:47 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:47 +0000
Files and hashes:         1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: 0fTKIRboNEnpN2C5dZzENQD16wgA7Z7cmYcPb/r2Ao4=)
                          2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:63:b4:e6:12:2b:2a:45:75:61:ae:64:df:90:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
        Validity
            Not Before: Aug 23 11:02:47 2025 GMT
            Not After : Aug 24 11:02:47 2025 GMT
        Subject: CN=7451b19995f31f78a0a6683d1716bb226f845ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:02:7a:7a:5d:a8:0b:c0:f6:3f:84:33:4a:
                    3c:20:91:f3:d0:d7:3b:b8:99:6b:c4:d9:54:21:4f:
                    26:54:7b:90:86:49:c1:58:25:07:d7:24:d8:9a:c9:
                    51:3d:52:2d:be:c7:58:eb:c6:27:97:6a:6f:b1:a7:
                    4a:b3:1c:8d:35:f6:cf:eb:9a:61:d7:6d:fd:35:46:
                    a8:35:9c:7c:ee:67:39:ba:72:69:b5:fe:76:83:e9:
                    bd:53:c2:17:c1:99:67:5f:f5:11:01:8b:d5:0c:33:
                    e0:63:b7:92:56:61:4a:8e:bf:5e:4c:1b:8f:78:1a:
                    b2:ba:35:f2:e6:62:2a:47:7b:9c:eb:c8:d0:de:a7:
                    63:27:eb:93:96:41:f3:46:6c:68:d0:b4:8c:96:70:
                    27:59:db:5f:ee:83:3d:e4:e2:ba:78:15:9f:6c:55:
                    90:98:1e:6f:86:b2:b2:04:a8:02:8c:32:f4:e1:d0:
                    f4:78:f5:a3:94:bd:b8:c6:c8:5c:74:4a:77:88:fb:
                    29:4c:60:d1:29:e4:1e:97:cb:3b:14:8d:4b:37:77:
                    cb:73:8a:a5:14:53:56:c0:89:4f:f6:a3:98:cb:a3:
                    5d:d3:3b:c8:2e:f7:e5:1d:5d:0f:43:09:a1:aa:15:
                    52:f6:2e:72:98:70:b4:1f:b8:0c:82:83:bd:ea:39:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:51:B1:99:95:F3:1F:78:A0:A6:68:3D:17:16:BB:22:6F:84:5F:FA
            X509v3 Authority Key Identifier:
                keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:db:d6:d0:1b:2e:e1:c1:f8:01:22:54:ee:cf:54:e4:bc:
         07:d9:f3:88:22:26:87:59:e1:6b:29:42:2b:9e:39:ac:27:3c:
         3f:ad:6d:0b:fc:4e:d3:95:87:29:61:e9:04:d2:1b:d2:57:28:
         53:7e:4c:07:61:ae:a4:12:b1:59:ff:c8:37:1f:b0:e6:ac:5f:
         ff:89:ae:6a:9e:f2:97:98:31:a4:b8:91:f5:98:8b:a2:f6:9c:
         e3:7c:75:78:92:71:0d:96:94:c0:1d:cc:a9:64:62:fc:1b:97:
         9e:2a:cf:e1:7b:62:23:f9:f2:96:a8:9e:bd:a9:8a:bb:f3:a0:
         92:9a:30:03:f6:6f:30:77:ef:29:27:c9:5e:06:62:82:51:07:
         ee:f7:6e:64:af:c4:27:d1:98:ba:58:4a:33:76:e0:26:7e:ea:
         25:5b:5a:e3:81:7b:5c:0d:08:2d:66:38:b8:5c:31:f8:23:b0:
         d3:0b:c8:e7:0c:3d:21:5a:58:36:ae:8f:34:91:96:0a:81:cb:
         5c:28:16:a0:0b:f3:71:22:12:da:14:16:2e:19:f5:18:7a:87:
         78:6f:25:e1:f5:6c:7d:ce:7d:82:d5:68:04:02:0d:41:28:33:
         e0:6e:23:a4:63:ff:a3:a4:01:33:8f:ef:9f:90:e3:5e:7f:a0:
         37:71:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:52 2025 by rpki-client