Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File:                     Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier:          uVNavEhmU4BHj8WWWQfBsraDjo/wSi4ohyDByAOcqdU=
Subject key identifier:   15:6D:B9:0A:F3:94:0F:9F:45:96:C9:8C:5A:6C:8E:0F:11:4D:02:5E
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer:       /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial:       0198D661037906133A52BBCFEAF8692BD6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number:          06C0
Signing time:             Sat 23 Aug 2025 10:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:18 +0000
Files and hashes:         1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: J0ruon03M32EdUuKya6hpZ3c2Dcz3sNA99DqMKNWpCA=)
                          2: PveX9WXxCJj9e18L9V5LXcSlf4I.roa (hash: Gc7ehRUF/Atprjxx4oQFsUeoQdkyLlSY7XL+/gL4J0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:03:79:06:13:3a:52:bb:cf:ea:f8:69:2b:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
        Validity
            Not Before: Aug 23 10:02:18 2025 GMT
            Not After : Aug 24 10:02:18 2025 GMT
        Subject: CN=156db90af3940f9f4596c98c5a6c8e0f114d025e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:89:e6:7a:4b:6e:d6:29:5f:51:f3:e2:9d:
                    33:c0:b7:be:53:37:ed:00:a1:26:0e:81:f2:2c:51:
                    90:9b:52:8b:d4:4b:4b:04:96:85:d8:6d:3c:35:39:
                    85:37:00:15:06:fd:11:d2:e5:80:15:13:ce:7e:ce:
                    b0:95:f4:58:b1:d2:3f:ef:f3:36:0f:20:11:be:8e:
                    7f:55:75:ac:09:a8:c4:44:01:7f:34:bc:7f:e4:b1:
                    32:b9:f5:31:c2:76:d1:4d:fc:1f:c5:eb:07:8c:da:
                    84:4b:b0:78:46:c1:31:0e:75:ba:00:c0:a5:a0:0c:
                    3a:93:b1:71:08:fc:2b:98:8b:47:75:1b:02:d6:89:
                    e1:a1:a0:57:b2:57:ae:46:a8:af:96:a3:ff:df:bc:
                    ec:1d:6c:34:fb:e3:d6:48:9c:fe:e0:94:f6:c7:26:
                    9d:79:cb:de:9c:27:64:e7:d4:71:05:c8:78:1a:24:
                    c4:8a:3f:c7:ac:4f:ba:f9:7f:39:ea:40:56:6b:2e:
                    23:32:cc:49:99:c7:cb:40:2e:a0:6a:67:f6:a2:0b:
                    1a:b4:21:95:9f:64:ec:64:97:fd:a5:82:3a:7a:47:
                    78:a0:9a:3b:bf:0e:6c:3f:6b:93:b3:e8:d1:fc:56:
                    38:f8:09:99:a5:9a:a7:60:1a:91:2a:0e:46:ff:74:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6D:B9:0A:F3:94:0F:9F:45:96:C9:8C:5A:6C:8E:0F:11:4D:02:5E
            X509v3 Authority Key Identifier:
                keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:00:f2:b1:cb:31:84:83:5c:0d:7f:f5:8e:18:7a:51:76:40:
         84:b2:98:57:61:94:bf:41:08:88:f4:8e:04:59:61:16:20:a8:
         72:22:60:e4:1c:b7:83:db:4f:40:af:e4:1c:10:1a:0f:c1:d1:
         84:d9:16:15:67:87:6e:5f:82:39:f1:89:84:6a:bc:7b:80:24:
         b7:62:87:f4:41:3b:46:e0:92:4f:4e:28:54:40:39:db:6e:45:
         e3:0f:0a:9c:f4:79:a8:9d:41:ee:31:ef:0a:b4:72:ea:60:ea:
         00:5c:d4:7d:3e:d7:78:2d:49:d7:91:59:26:18:b8:d3:11:78:
         8e:81:bf:b3:8c:06:a9:3f:34:43:e4:6b:22:b0:d2:b0:79:9e:
         de:1b:48:bb:ba:47:35:c3:c1:6e:66:29:23:b4:d1:f2:68:a7:
         2d:e1:22:c3:31:5d:17:ee:f8:44:a9:c2:75:cd:95:19:d6:78:
         8e:b9:58:aa:8c:9c:f9:9c:cd:8f:78:dd:8b:f9:a7:a5:d8:c2:
         43:13:e4:e5:f0:fe:d6:80:b7:f4:a1:70:3c:0b:71:d1:c2:48:
         85:47:c1:6d:88:3a:a2:e8:8e:cb:c0:58:87:77:9d:29:26:66:
         aa:ca:e2:e3:d1:ce:3c:90:51:12:d9:5f:f5:03:54:69:23:99:
         13:dc:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:07 2025 by rpki-client