Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File:                     l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier:          bM2Toh0cfwXvFNPTHRHKgigsVI5Pk7rNUfKDRkOvDXg=
Subject key identifier:   65:BE:4B:27:FC:44:95:7C:57:AF:D2:E6:4E:62:CF:B2:E5:A9:6E:93
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer:       /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial:       0198D6CD5906C95AC9E1826C3FF8EFFB8990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number:          0B2C
Signing time:             Sat 23 Aug 2025 12:00:38 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:38 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:38 +0000
Files and hashes:         1: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (hash: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=)
                          2: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: C0AgDt4j7287I5jMIBN9XhgZbZbIPZbylhEyXd/fvqA=)
                          3: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (hash: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=)
                          4: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (hash: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:59:06:c9:5a:c9:e1:82:6c:3f:f8:ef:fb:89:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
        Validity
            Not Before: Aug 23 12:00:38 2025 GMT
            Not After : Aug 24 12:00:38 2025 GMT
        Subject: CN=65be4b27fc44957c57afd2e64e62cfb2e5a96e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:0b:66:c7:5d:5c:be:8b:ad:90:c1:2d:a9:
                    d0:3a:3a:6a:4f:13:7e:d5:29:d0:59:8b:c5:82:81:
                    97:8f:c5:13:0a:e4:94:5b:19:5a:cf:32:f6:29:24:
                    d3:41:d4:97:66:4d:2b:11:08:66:a3:36:f3:d9:e0:
                    e4:1a:bb:0a:f0:44:bf:84:0f:cf:61:f8:2f:1a:1a:
                    8a:99:36:98:64:1a:2f:8c:3e:6d:c4:d8:f5:f2:5b:
                    be:b6:f0:d5:a8:d2:ff:2a:7d:93:ed:38:70:57:69:
                    5d:fe:5e:2e:d6:7b:e2:fe:3a:70:85:17:23:e0:8a:
                    f5:2a:9a:cc:61:20:05:55:40:49:8e:b6:d5:a9:20:
                    0c:dd:83:fc:5e:2f:e4:c1:f3:63:3a:21:b3:2c:a0:
                    05:8a:8c:f6:43:ca:1b:8d:d7:d8:f5:5a:84:44:b9:
                    34:22:48:fd:bc:04:ae:58:8e:d5:27:69:84:db:98:
                    c6:98:53:3e:56:d0:11:f8:64:58:79:04:01:2b:08:
                    c0:2a:0d:b1:31:f1:1e:7a:9e:8d:6b:ad:7e:b4:e8:
                    45:56:af:d9:ec:c1:2f:f0:b6:da:6d:df:70:73:2c:
                    9a:9b:a7:55:ca:42:b2:8f:07:38:a4:38:6d:9e:a6:
                    c2:46:85:bd:67:76:0e:b7:b9:6f:a3:4a:21:43:31:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BE:4B:27:FC:44:95:7C:57:AF:D2:E6:4E:62:CF:B2:E5:A9:6E:93
            X509v3 Authority Key Identifier:
                keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:94:b8:94:38:d5:cd:ed:c8:47:7e:a9:21:e5:e3:da:c1:
         9b:c1:0c:0b:81:ee:1e:87:a8:f7:e8:bc:27:49:2e:58:7f:97:
         cc:d9:03:97:07:41:9e:50:5a:9e:3e:e8:33:da:10:b1:77:2a:
         5d:68:7e:5d:61:99:6d:f3:cb:d5:28:5b:ff:e9:49:ad:1e:64:
         ae:3a:5b:10:14:d2:40:bb:e7:84:bb:a3:d8:77:16:ad:fb:14:
         72:ab:85:7b:bf:6d:23:3c:00:a4:95:25:6f:34:14:f9:8e:09:
         0b:69:9c:dc:e6:bf:62:56:5e:ab:c2:33:ed:5b:04:44:68:15:
         f5:d4:55:a6:48:66:fd:ed:a7:41:40:42:22:eb:82:1e:ea:c4:
         ab:f9:c6:33:fc:7a:22:9f:b2:e2:4c:0e:e0:3d:d8:e0:f7:5a:
         3d:8d:40:6c:4d:c2:80:a7:94:fe:c9:44:4c:b2:a7:eb:f7:3d:
         01:5f:3c:1a:b1:e2:88:b6:bc:12:59:07:d7:93:8e:e8:5d:7d:
         c5:30:00:9f:8e:08:87:6f:71:2b:5f:df:a6:c4:6b:58:33:24:
         67:6b:ea:7f:44:dd:d6:61:67:1b:ae:3f:1e:0c:34:f0:e9:07:
         4c:f6:5b:0b:3a:b9:db:d1:4e:c5:79:44:15:b8:f5:f5:cc:b0:
         05:dd:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:34 2025 by rpki-client