Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File:                     Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier:          hTyeQJ9oo8GuVasuLFPa371GYugaWycXetVCu//pv+I=
Subject key identifier:   0E:BE:C3:B1:92:04:43:24:56:B1:A6:BD:A2:86:BC:D0:7D:D3:06:CF
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer:       /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial:       0198D4726E96BF1AEEE28A258FA461A120B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number:          0660
Signing time:             Sat 23 Aug 2025 01:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:05 +0000
Files and hashes:         1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: ocl8v0wPOnzN7s/Oek/NPBLySazbmRGs278G2ZNUkC8=)
                          2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:6e:96:bf:1a:ee:e2:8a:25:8f:a4:61:a1:20:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
        Validity
            Not Before: Aug 23 01:02:05 2025 GMT
            Not After : Aug 24 01:02:05 2025 GMT
        Subject: CN=0ebec3b19204432456b1a6bda286bcd07dd306cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:2d:5d:91:61:34:15:99:c4:74:14:ce:91:
                    2b:6b:e0:e2:4a:e9:fb:be:ec:47:7e:c6:c5:88:75:
                    24:45:d1:5d:0a:b4:c2:ac:3b:b0:20:9b:0f:64:83:
                    67:79:ed:74:4f:b8:69:28:38:73:51:72:cc:c0:ad:
                    69:6e:e9:fc:a9:51:65:5f:40:df:d7:4c:47:b4:f0:
                    e2:c1:de:62:87:44:8b:64:8f:bb:4a:6a:82:70:30:
                    a5:5f:c9:b8:18:9f:f2:93:39:96:d8:8f:b5:07:5e:
                    65:0a:70:d3:84:b3:d0:51:b7:50:90:d7:e2:95:f1:
                    f1:8f:99:ec:8d:9f:8f:af:ff:04:b6:d5:31:45:d0:
                    77:00:dc:ef:04:80:b8:6b:9e:03:9a:44:e6:a6:68:
                    41:c7:1a:d6:e3:0b:ea:64:88:f1:6e:bf:ef:c0:f1:
                    f7:84:f3:9c:aa:35:8e:18:b8:0e:cd:0a:6d:60:b3:
                    b9:8a:71:b2:de:8e:ed:d2:b8:b7:00:df:87:15:ed:
                    45:8f:1c:e5:19:8a:fa:b9:0c:e1:f1:66:db:68:3d:
                    c9:12:50:95:4d:2e:0c:af:33:fc:5e:b5:7e:6b:67:
                    66:41:f6:85:8b:d1:6e:8b:7e:cc:23:c4:23:b4:92:
                    7d:4c:a8:3c:ee:72:3e:72:f7:bc:99:c1:6a:36:34:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:C3:B1:92:04:43:24:56:B1:A6:BD:A2:86:BC:D0:7D:D3:06:CF
            X509v3 Authority Key Identifier:
                keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:0d:ad:bf:4a:02:bc:f3:ba:fa:da:39:95:01:cb:53:b2:
         d2:bf:91:98:37:cb:44:21:9c:82:86:fb:b7:80:36:9b:8c:81:
         bd:a7:8e:55:81:e7:57:93:5e:98:5a:b5:c2:0e:1a:8a:19:bf:
         9e:c8:db:46:83:ea:51:d2:3c:69:2a:81:17:84:93:a5:71:5b:
         8e:82:2d:67:07:8e:69:b7:da:b1:6c:4e:ae:cb:a5:87:95:73:
         f4:63:20:3c:ea:d9:45:58:0e:10:19:21:88:d2:1d:c9:4d:8a:
         0f:7c:b3:b4:6c:f9:ba:a1:01:af:5b:be:44:13:14:ca:7d:48:
         b9:15:80:e0:4a:aa:77:5f:34:a1:c9:82:4f:95:36:a1:f8:a0:
         32:3f:36:19:c5:96:56:60:34:0d:32:10:a3:1c:0c:16:af:2c:
         f3:9d:32:ee:d1:74:ec:e7:e9:8c:2a:83:e2:05:c0:dc:fa:fc:
         ae:bc:c5:81:dd:cd:c7:93:61:79:88:8e:77:49:d6:f4:a4:05:
         36:d9:d1:0c:1b:55:d4:2e:f5:2d:4f:0e:b9:e7:81:b4:1f:11:
         39:97:5e:ee:24:c1:1b:69:81:93:15:db:f4:44:62:2a:b2:17:
         8f:11:d4:31:97:e0:cd:2d:16:4e:53:1a:1a:2e:81:a6:0d:52:
         9e:b7:d0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:57 2025 by rpki-client