Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
File:                     Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json)
Hash identifier:          p14d6UqwPoQm8AG0/8NTgc5LWAwBaZxjD5kfWWyBSrw=
Subject key identifier:   8C:36:AC:19:82:3A:51:63:BC:E7:64:7D:B3:2F:05:B4:63:52:EC:92
Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F
Certificate issuer:       /CN=46acafe61343d710df60cd91de08901fdbba6f8f
Certificate serial:       0198D5161632DA0C4065B9628ECAC4409688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
Manifest number:          0689
Signing time:             Sat 23 Aug 2025 04:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:51 +0000
Files and hashes:         1: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: XqVuabe0UoyHfm2XIR8k5tFpghnKzXWNX9ZevBjuTt4=)
                          2: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (hash: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:16:32:da:0c:40:65:b9:62:8e:ca:c4:40:96:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f
        Validity
            Not Before: Aug 23 04:00:51 2025 GMT
            Not After : Aug 24 04:00:51 2025 GMT
        Subject: CN=8c36ac19823a5163bce7647db32f05b46352ec92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:9c:c0:cd:b0:6c:20:56:79:3d:aa:0f:35:
                    9a:de:af:6a:13:c9:81:50:ec:5f:65:57:2e:8d:7d:
                    8c:4a:63:72:7e:44:7f:12:65:fc:2d:b2:d6:5a:f3:
                    2b:56:02:6c:62:ae:15:07:06:45:a2:5a:9d:00:81:
                    4d:8c:3e:26:e4:b3:74:a6:c7:6e:07:f2:bc:31:97:
                    ac:c7:d3:c5:81:9c:91:da:f7:86:34:26:43:d4:48:
                    97:dd:fa:aa:36:6e:4e:07:83:05:8f:52:63:2f:47:
                    3b:42:0e:79:22:ef:5b:27:48:76:4c:7b:99:54:a1:
                    42:f4:61:05:03:ff:cd:68:03:ae:5b:84:2e:92:08:
                    99:07:d2:8d:f9:3b:e5:95:b3:56:b5:c6:46:25:03:
                    7e:d9:39:24:ca:cb:94:95:c3:f9:01:2a:d1:e0:85:
                    21:80:98:26:63:88:77:fc:75:4c:36:2d:25:45:e2:
                    aa:4b:7c:f0:02:1b:d6:c3:4a:69:95:d5:8d:2d:ce:
                    ac:90:d7:2b:6f:d5:7f:e7:b3:b1:fc:b9:1e:15:b1:
                    05:a6:6e:d9:92:a7:2f:c3:1d:87:7f:be:56:57:42:
                    47:bd:73:c2:46:3d:54:04:8d:0e:e6:2c:64:32:81:
                    bb:05:e3:4e:2e:41:7d:cb:75:01:3c:15:54:17:39:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:AC:19:82:3A:51:63:BC:E7:64:7D:B3:2F:05:B4:63:52:EC:92
            X509v3 Authority Key Identifier:
                keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:5d:1d:99:58:75:7e:a3:4f:75:5e:24:17:d7:95:1c:92:
         7f:4a:59:31:19:bc:1c:c9:ab:fb:ff:ef:8e:1d:8d:4f:22:21:
         77:bc:47:17:cf:08:df:60:27:d9:72:12:bc:0b:72:3e:00:cb:
         ac:be:8a:30:3a:f5:5c:69:25:bd:69:a0:77:f6:49:a6:ac:68:
         9d:ea:95:70:c7:74:a5:35:b9:ca:20:a4:58:c5:05:c8:c8:96:
         74:e8:87:c6:5f:71:34:8f:d3:74:a7:3e:83:4b:9a:97:ce:ad:
         20:c9:7d:7d:09:0f:ab:dc:e5:aa:75:85:38:2f:91:94:c8:5c:
         5a:0d:8f:4d:ff:e4:bf:b7:cc:9b:e1:e4:d0:4e:2c:70:e1:5b:
         3a:a9:7f:d4:d1:01:92:e5:80:4b:a6:51:2a:0d:05:f7:cf:3d:
         d3:f1:a3:fe:0b:e0:45:94:5a:0b:bd:86:79:ca:78:74:9e:45:
         12:01:0c:d3:20:30:bd:ef:66:62:0a:65:b2:92:f9:67:f6:8d:
         ec:c9:06:fc:99:b2:9c:f3:ce:a1:c4:db:48:d3:41:5f:02:8f:
         2d:4f:81:6d:21:0a:66:26:ff:f4:dc:47:e2:e7:bb:89:98:3f:
         c2:d0:d5:b0:2a:10:a1:35:5e:9a:3f:7b:12:01:63:bf:44:92:
         9f:1d:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:11 2025 by rpki-client