Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File:                     CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier:          zu0YgxEF02sezgOKmIupSPsWgeaCxW8JqYzfDHXONp4=
Subject key identifier:   11:9B:3D:27:85:7B:00:4B:BC:E9:B0:4F:E1:CC:6B:01:29:C0:B6:28
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer:       /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial:       0198D85167F6B537DDDA3C4568902752E25A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number:          116B
Signing time:             Sat 23 Aug 2025 19:04:30 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:30 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:30 +0000
Files and hashes:         1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: 6CBe9JPmCcbKIacceWrkiGlqf0A2KQcA4cn80IIT+MU=)
                          2: xWSwZmKZMXs8e_GDLIRa8-opXK8.roa (hash: 2AZq1eXe7kQO99LmFv7okxwAGvQwGOGubxxQuVTNHbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:67:f6:b5:37:dd:da:3c:45:68:90:27:52:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
        Validity
            Not Before: Aug 23 19:04:30 2025 GMT
            Not After : Aug 24 19:04:30 2025 GMT
        Subject: CN=119b3d27857b004bbce9b04fe1cc6b0129c0b628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:30:b4:fe:14:eb:1d:9c:29:ab:97:10:d9:
                    fc:5a:66:5f:fe:b3:c4:c6:9e:78:7f:82:3c:da:46:
                    33:05:aa:11:bb:fd:ca:8d:d9:42:08:19:07:78:39:
                    79:bb:0e:89:61:de:44:b3:69:7f:54:a8:38:ce:c0:
                    bb:34:85:7d:04:37:91:ce:17:b2:13:cc:c0:8d:6d:
                    d8:8a:3a:00:37:17:32:79:54:59:c7:ab:fe:ef:f2:
                    3c:fd:08:49:43:e8:d6:db:23:b1:a1:31:09:f6:a3:
                    6c:7f:4b:86:64:2b:da:32:a8:40:46:c6:8e:a0:ba:
                    73:51:25:47:5f:bb:ee:eb:39:1d:a3:e0:51:8f:de:
                    7a:ea:2b:f7:0b:3d:3c:3b:06:51:a7:27:ca:ad:59:
                    54:f3:a4:9c:d8:b6:ba:ec:8c:05:10:ce:97:3a:5f:
                    7f:a1:e0:fa:8c:99:96:8c:00:3a:df:1d:46:59:15:
                    1d:66:e6:6c:1f:cc:84:50:2d:7f:d6:c8:d9:3a:a0:
                    2b:15:85:d4:01:d4:c4:86:02:44:00:bc:eb:e2:30:
                    bb:08:06:b0:87:b6:f4:35:08:31:fb:26:4a:68:d9:
                    9d:f1:42:98:f4:23:c8:3a:7d:57:58:9c:be:cc:eb:
                    3e:19:e1:4c:94:fe:9c:ad:c2:e6:43:cd:7a:fd:d8:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:3D:27:85:7B:00:4B:BC:E9:B0:4F:E1:CC:6B:01:29:C0:B6:28
            X509v3 Authority Key Identifier:
                keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:74:75:4f:bf:22:11:db:4b:a9:bc:8e:b5:be:70:38:be:8b:
         33:13:3a:d8:94:3e:32:cd:05:a7:f2:07:d2:60:02:7d:49:14:
         36:a0:91:33:47:a2:83:1c:64:51:07:51:3e:e8:79:22:96:a2:
         3e:a8:5b:fe:6a:15:85:e2:a1:85:5e:bf:0e:44:23:bb:f1:ba:
         b7:fe:2b:0e:23:5e:36:26:67:3b:37:de:70:bc:22:0d:f2:56:
         0e:9a:3b:ed:68:38:47:a2:70:3b:cf:0b:61:39:6c:1a:32:9e:
         c8:27:07:07:dc:5b:95:03:79:75:c2:a3:b2:8f:0b:b0:1e:1c:
         1a:c1:df:95:88:df:3b:57:6f:ac:1a:88:df:ac:d4:53:bf:74:
         ef:f8:8b:33:66:5e:95:ed:ca:e4:41:31:be:aa:fe:82:e1:1a:
         66:c8:d4:2f:26:8c:3c:ed:29:58:b3:a5:34:38:1c:48:9f:b2:
         e4:f5:de:92:3c:c2:12:75:67:d9:a9:6e:c7:bd:72:e2:b1:db:
         9c:30:9e:18:11:c6:ef:fd:c4:b3:e7:d2:fb:d1:5e:09:00:fe:
         a5:d1:4d:61:4b:f6:d1:d1:af:56:c2:5a:fc:34:55:e5:ee:53:
         1f:ce:12:30:21:f0:96:37:09:04:b1:d2:77:79:75:d3:34:ed:
         ed:49:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:39:30 2025 by rpki-client