Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File:                     aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier:          3My0Z5n9jsa10PbmJNMnuNoKKCm6pzrAbh8IfzcRiMQ=
Subject key identifier:   F7:EE:EA:CB:EE:1C:DA:4D:A8:10:BF:B8:01:00:76:4F:0A:25:D8:84
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer:       /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial:       0198D6984A13DED875AE47101AB954338CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number:          012F
Signing time:             Sat 23 Aug 2025 11:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:41 +0000
Files and hashes:         1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: hSzfoB+szNnuPQ4F5wn1uPPp2t0tGUaVwgif5ObwmMc=)
                          2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:4a:13:de:d8:75:ae:47:10:1a:b9:54:33:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
        Validity
            Not Before: Aug 23 11:02:41 2025 GMT
            Not After : Aug 24 11:02:41 2025 GMT
        Subject: CN=f7eeeacbee1cda4da810bfb80100764f0a25d884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:af:96:fc:86:8a:53:f7:2a:87:d9:3e:00:
                    44:9f:bc:9f:d6:90:f1:3e:3a:87:92:83:15:89:62:
                    dd:7e:62:ec:3d:da:6f:f1:2f:08:c5:73:7f:c4:c6:
                    e2:52:e1:23:5a:2c:32:27:d6:f6:57:18:d5:8e:01:
                    5f:84:af:34:f2:4f:7b:8c:3e:6d:38:96:3a:63:4e:
                    7d:f4:8d:ac:0a:48:99:8f:5d:8c:1f:fd:ac:c6:54:
                    7d:95:b6:39:36:49:7f:df:7b:11:8c:35:bf:ea:99:
                    c8:59:6e:86:32:e3:ff:70:cb:90:c0:74:99:89:58:
                    b7:38:df:25:74:ae:2d:7a:88:12:f6:75:cb:d2:39:
                    a1:73:02:5f:e7:f5:a4:e0:02:bb:c5:27:93:05:f4:
                    1e:d5:33:39:4b:1e:ed:c9:f8:8d:d1:8b:e1:19:d4:
                    68:9d:69:4c:64:b8:33:8d:7b:5d:22:0e:50:34:89:
                    8f:3e:72:1b:c0:e0:d5:3e:fa:42:d3:6f:f2:54:bf:
                    14:8a:9a:2d:ee:c7:f4:d4:56:7b:b0:e8:1c:e4:f4:
                    35:32:6c:90:7c:60:6d:07:40:0b:5f:1f:da:8b:f3:
                    16:e2:a7:c9:cf:91:c9:b5:4b:49:41:07:ae:32:41:
                    15:57:b4:65:27:82:ca:d8:6e:e2:58:2d:39:f2:92:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:EA:CB:EE:1C:DA:4D:A8:10:BF:B8:01:00:76:4F:0A:25:D8:84
            X509v3 Authority Key Identifier:
                keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:85:b1:4d:b7:2d:ab:53:06:4f:41:12:55:29:1e:5d:9e:2a:
         a8:68:18:ef:e5:04:8f:d2:e3:fb:55:28:95:d3:c3:1c:bd:97:
         05:90:c5:61:08:7a:5d:ee:a2:d9:df:07:d6:a6:b2:91:4d:2a:
         fd:6b:21:42:dd:11:59:75:8f:4d:60:e6:79:6a:06:66:85:9c:
         84:de:4b:95:92:d9:d0:30:6f:14:fa:da:10:d3:25:1a:d4:40:
         8f:3d:43:2a:e9:11:19:8f:ee:02:80:ea:7e:c3:5f:36:d1:c5:
         f7:5f:17:d4:bb:f8:bc:ef:24:26:7c:e8:84:84:3d:65:82:9c:
         83:87:c0:1f:b4:5b:b0:99:79:37:70:55:92:15:99:78:72:87:
         3c:41:a2:81:2a:01:fe:a5:48:f2:fb:3b:8a:cb:ac:91:a8:98:
         f9:9e:81:1a:0f:4f:d8:c7:d3:d1:76:c0:46:f2:59:ef:1a:d0:
         a9:08:fb:b9:89:e7:68:c5:90:81:71:89:05:85:5d:ad:b2:b1:
         48:50:7f:6c:eb:3f:22:9a:09:a9:13:a8:61:70:0c:e6:dd:5a:
         75:b9:e7:4c:1b:55:7a:be:55:aa:4f:40:97:7e:92:8c:18:4a:
         8a:d1:a7:78:91:32:74:62:62:e8:35:92:b7:10:8d:03:b3:a9:
         16:dd:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:56:03 2025 by rpki-client