Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          kL4rf2V7soW7CqjlO0bm1iY/2YchCG0rSHM7bkp/MdI=
Subject key identifier:   FB:F4:BA:54:E9:74:44:22:84:B1:EF:4C:0B:9A:32:C2:F2:58:C7:21
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       0198D84FA80FDD44750219C1E5B181FAC115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 19:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:35 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: qemL/CQBBxWsr7uFlBoIbIUbbJ2cfgGgEzzGj8XAP0Y=)
                          2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:a8:0f:dd:44:75:02:19:c1:e5:b1:81:fa:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Aug 23 19:02:35 2025 GMT
            Not After : Aug 24 19:02:35 2025 GMT
        Subject: CN=fbf4ba54e974442284b1ef4c0b9a32c2f258c721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:2d:44:0a:61:00:4d:12:83:f2:c9:e7:c5:
                    20:1d:18:71:be:c2:c9:aa:38:55:f1:a0:c5:9a:73:
                    00:62:33:4f:5f:72:b9:c8:13:24:5c:22:0a:b1:6b:
                    e6:05:21:be:7a:2a:90:8a:f4:6e:83:23:5b:8a:38:
                    c2:62:ce:6d:29:9f:6e:b0:b6:ff:15:57:02:a1:5f:
                    9c:ff:8d:1e:ea:f7:68:f9:ab:90:2e:b5:5e:cf:da:
                    23:51:da:55:d3:24:c9:29:03:7e:93:a5:60:db:d3:
                    88:7f:e8:bc:d1:af:4e:b7:8b:64:e7:ce:9c:23:53:
                    b6:9a:77:6c:62:e3:db:31:1e:47:f3:31:17:62:01:
                    7e:38:ae:ea:f3:39:7d:ef:82:ec:0d:51:3d:c3:4b:
                    0c:dd:51:2c:8a:47:0d:b0:77:b6:4e:b1:ab:b8:35:
                    4e:d3:ad:fd:4f:47:fd:3c:47:60:00:71:db:36:f8:
                    a2:d7:7d:5a:b8:97:a2:c7:37:10:91:b0:76:26:fc:
                    59:75:5e:62:c5:44:52:d6:ec:e6:28:a0:f1:62:9d:
                    32:7b:31:ef:5b:db:70:8f:f3:1e:ee:83:a3:af:62:
                    d8:03:e7:b2:ae:5e:a1:84:97:b9:37:f4:25:08:dc:
                    b8:78:cb:6a:4e:88:c6:52:23:32:6e:6f:39:39:cc:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:BA:54:E9:74:44:22:84:B1:EF:4C:0B:9A:32:C2:F2:58:C7:21
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e1:cc:32:4c:60:5b:e0:74:4b:b5:3d:b9:84:d1:23:97:e3:
         f3:67:50:e5:61:ef:bc:e7:4c:5b:d2:fe:bc:9e:1d:e0:9b:f6:
         cd:63:15:e4:86:74:db:28:8e:41:af:71:c9:e3:d3:89:59:03:
         d0:93:8d:ba:ca:7d:a7:f2:cf:39:24:6a:a3:0c:09:f6:4e:e6:
         09:f2:35:71:35:70:8c:09:95:b9:8b:52:9f:02:91:20:de:8c:
         93:52:4c:0b:9c:b2:f0:ad:e8:fc:7f:5b:81:86:2c:90:48:33:
         14:99:a6:c7:b8:17:54:80:de:05:9a:10:03:92:09:d9:16:ab:
         af:72:7f:35:95:de:10:78:0f:3f:76:e8:79:12:bd:b5:cc:61:
         ed:bb:f7:e6:a9:51:16:43:15:33:a7:00:32:b5:73:46:a8:cb:
         f7:58:0f:dc:0a:73:63:85:68:c0:ca:e2:09:90:ec:90:cd:3b:
         63:a3:49:54:00:cb:97:96:37:0f:a4:94:5f:17:06:34:85:c6:
         b6:b2:55:42:b6:bb:a7:be:81:1c:d6:89:fd:8d:6c:1c:6c:05:
         07:c1:f1:a8:5a:e8:8e:ed:55:0e:6c:b2:3e:fa:7c:b5:91:25:
         04:98:77:73:1c:a9:07:42:83:c0:78:e3:88:68:df:fe:82:27:
         fc:73:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:49 2025 by rpki-client