Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File:                     B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier:          B9g/I7DIyggK/cNTP8UgYAqkd8fZujF967tNcWfN+Y4=
Subject key identifier:   06:7C:17:F3:94:03:87:17:77:89:CA:F6:2F:29:E6:95:64:DF:71:CE
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer:       /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial:       0198D473505A9122C238C23CFFB45045322A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number:          08AD
Signing time:             Sat 23 Aug 2025 01:03:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:03 +0000
Files and hashes:         1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: Bs6nK3xsk3UK/BlxLFtCzat9aPrFBHLwoia2CeSLwEI=)
                          2: YF_8BljowlmU3n9MOrd56EKDy3I.roa (hash: 5hFRnx4Cut7X+n+05i8/H1CgpRmoRUaN3KMI2gJMlwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:50:5a:91:22:c2:38:c2:3c:ff:b4:50:45:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
        Validity
            Not Before: Aug 23 01:03:03 2025 GMT
            Not After : Aug 24 01:03:03 2025 GMT
        Subject: CN=067c17f3940387177789caf62f29e69564df71ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:87:33:92:8d:fc:ce:09:b1:19:b6:f8:61:2e:
                    9a:68:cf:d0:75:81:aa:d4:09:ae:74:82:ae:96:dd:
                    d6:f4:a9:7e:e9:7f:4d:6e:24:1f:f9:f5:0d:35:e6:
                    1d:79:1e:83:e7:42:22:66:47:1b:44:e1:fd:c1:d3:
                    45:96:92:11:6d:c1:56:0d:51:d8:e3:dd:8d:a7:1d:
                    b5:f9:33:dd:c8:a2:71:17:a5:df:4c:7a:62:e5:1a:
                    26:34:5d:04:f2:1e:8e:43:54:bf:05:65:9a:ed:e3:
                    bf:02:f6:d3:95:99:14:a4:12:04:c5:41:bc:be:29:
                    df:82:e4:5d:d4:c6:c0:8c:2f:36:3c:c6:a4:35:4f:
                    d8:f6:e5:9e:6d:ec:1f:ca:70:20:7f:04:7a:1a:35:
                    a6:86:34:87:ee:9e:8e:1d:21:c2:09:82:2c:bd:f0:
                    97:f3:4c:a0:08:05:02:df:41:79:a3:8c:2e:c2:e5:
                    76:d1:22:17:8a:b4:8c:3c:01:68:10:50:6b:eb:62:
                    ef:b6:52:b8:9f:69:17:b3:e9:93:46:95:31:17:0c:
                    1d:68:d5:25:ec:11:01:28:82:e6:0a:3b:17:84:15:
                    2f:ae:bd:aa:fe:bf:ce:9a:29:0c:49:d4:8e:fa:73:
                    20:89:2e:dc:3c:34:58:69:56:de:15:73:93:6a:2b:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:17:F3:94:03:87:17:77:89:CA:F6:2F:29:E6:95:64:DF:71:CE
            X509v3 Authority Key Identifier:
                keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:48:c1:8c:87:98:9c:7b:7b:21:ab:f0:83:d7:56:ad:07:
         9b:04:be:03:5c:f9:b5:ca:0c:3a:5f:8d:e0:c8:a4:ac:d2:24:
         69:f9:d4:b8:25:0f:d5:6d:3c:88:e4:ec:d0:8f:e1:3d:7e:2b:
         93:0d:bf:f8:e7:57:4f:a2:6f:a2:d2:ea:32:c5:ab:44:21:61:
         3d:cb:04:4f:0b:d0:5f:50:5d:a9:8d:d3:0f:1b:68:4a:b4:28:
         a3:fe:9d:dd:93:8c:56:f2:c9:c7:5d:c2:6f:56:19:d3:3a:92:
         ff:a5:1b:3d:84:9e:b0:d3:83:cf:a1:4c:5f:35:6e:fb:72:96:
         f8:12:48:8f:a5:8e:57:ed:61:16:95:fd:eb:c5:38:78:43:92:
         fb:9d:e0:92:c6:c0:23:3d:c5:27:55:d5:4a:ab:fb:64:d3:8f:
         5d:a8:49:23:51:35:d5:b4:74:9e:1f:43:37:25:41:28:ee:f0:
         d5:ef:a5:f8:78:cf:0a:45:23:ce:1c:2b:01:f1:ec:16:cf:b9:
         1f:ac:5f:54:0a:cb:cc:39:4e:c8:fa:1d:bf:26:66:7c:3d:0d:
         56:c1:92:57:ac:56:3a:4a:4c:91:2d:c3:2f:d9:45:4a:07:4c:
         3f:a6:18:77:a7:9c:12:d6:07:82:7a:2d:ca:c7:0f:dd:9e:04:
         cf:7b:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:47 2025 by rpki-client