Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File:                     B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier:          udWHXtJlQ+ovXZilkAg8PchZIvfvyyxg5c3MHLx9brw=
Subject key identifier:   1E:6F:AC:B5:B3:5A:1E:E9:32:4B:F4:17:CD:49:9B:A7:43:E8:12:7F
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer:       /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial:       0198D65F0CDADFDCAD8445119C24ACB819DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number:          65
Signing time:             Sat 23 Aug 2025 10:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:10 +0000
Files and hashes:         1: 46XzKu3a4fKMXeCuE9jWSnT4sKA.roa (hash: lwL0HgCdLMecbbEuLUkH/UrJUTEh7UkBeV4V3Vskvyw=)
                          2: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: esmWJ4PnrM7738bKtc2WgLXX3eBO1JWuy1xkpHaTOZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:0c:da:df:dc:ad:84:45:11:9c:24:ac:b8:19:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
        Validity
            Not Before: Aug 23 10:00:10 2025 GMT
            Not After : Aug 24 10:00:10 2025 GMT
        Subject: CN=1e6facb5b35a1ee9324bf417cd499ba743e8127f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:7c:3a:fe:fd:80:15:21:68:63:36:7c:71:
                    83:3e:04:61:ae:bd:69:f0:0f:6c:d4:2e:16:7d:b1:
                    64:bc:19:25:4d:4a:d1:ef:0d:f5:db:0d:07:d1:a5:
                    0b:e6:94:79:4d:cf:5c:34:b1:27:60:eb:49:bb:f0:
                    66:2c:9f:32:fa:47:29:79:99:23:22:c7:44:91:e3:
                    18:30:f5:29:e3:83:52:47:a3:2d:2a:fd:39:b0:a8:
                    f0:99:67:d3:17:7f:dc:c9:15:05:a3:f5:25:51:23:
                    d9:ee:5d:15:1a:a5:51:f1:31:7d:5c:90:97:3d:00:
                    46:86:10:83:4c:50:2d:29:8e:ee:7c:96:9d:ca:fe:
                    71:5b:fb:67:bb:eb:f4:4b:8e:c2:73:f9:23:47:6f:
                    96:c7:37:6c:a5:5f:be:95:7e:ae:6b:b3:8a:33:6d:
                    ec:c3:f2:b6:b7:86:e7:94:e5:9d:b6:d1:d4:78:f1:
                    66:51:55:d8:b0:ef:ec:97:2c:86:22:51:63:b3:b4:
                    1d:05:8a:aa:20:0f:38:b5:40:63:2d:84:6e:08:ec:
                    b4:56:55:59:91:da:81:63:95:ff:1f:6a:2e:2a:63:
                    44:4e:af:6f:6c:d5:ae:d0:b3:fd:d9:2e:4c:e5:4a:
                    d0:07:0f:3e:00:2e:fe:f9:f4:d5:6e:e3:8c:18:b6:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:AC:B5:B3:5A:1E:E9:32:4B:F4:17:CD:49:9B:A7:43:E8:12:7F
            X509v3 Authority Key Identifier:
                keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f7:df:a9:62:9b:97:41:07:7c:c4:43:30:a9:41:32:9e:81:
         b8:eb:5e:da:3a:69:a5:69:07:f3:ab:cb:c1:6d:23:a7:cf:b8:
         6b:ba:a5:e4:ac:71:60:5d:9e:6d:cc:7f:59:d8:ec:4c:33:33:
         4c:f2:d5:d0:04:b6:3e:ba:41:06:9f:60:9c:35:b5:8d:c1:c0:
         5d:6d:92:98:20:28:68:4e:bb:bb:1f:f2:2b:cc:21:02:9e:c7:
         72:53:61:3f:40:6b:f2:6b:5a:ae:13:59:4a:6c:b1:b3:b4:da:
         ca:f1:c2:37:ff:b5:e5:dc:22:17:53:21:89:f2:c6:99:c8:65:
         7b:d3:aa:41:22:17:a5:75:0f:4a:25:77:0b:70:c8:5f:2d:da:
         b8:63:3e:5c:e1:2b:e7:6d:80:2a:5d:79:61:94:c2:3b:41:9a:
         01:da:d0:de:40:65:47:bd:52:32:84:0d:ce:bc:99:00:ac:38:
         c2:5f:7c:13:ed:7b:59:87:40:16:cd:cc:b4:9f:2f:3c:43:1d:
         2c:6d:67:1b:1e:64:4f:2d:f2:00:03:d2:9e:30:52:3f:1d:01:
         fd:5f:42:0f:ba:b1:8a:79:12:13:69:53:80:86:4b:a0:d9:50:
         7b:b3:e0:08:dc:ea:7e:3f:0c:88:9b:fe:ef:75:b5:32:5c:a2:
         69:ab:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:40 2025 by rpki-client