Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
File:                     aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft (raw, json)
Hash identifier:          YrQI1eJlMnZvw5YMFD6th81TPfD2FT1PbWiANDqFwDI=
Subject key identifier:   79:39:78:C2:60:A0:04:65:CB:77:43:6A:C3:4A:8D:E6:54:A2:36:65
Authority key identifier: 69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2
Certificate issuer:       /CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
Certificate serial:       019873E22FD7DC8B7187BACCB87B963AD968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
Manifest number:          0A9E
Signing time:             Mon 04 Aug 2025 07:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:59 +0000
Files and hashes:         1: aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl (hash: mIkeZP/ZHs2RR8YSXUXBq3DQB3XzdTSoFVw+eA1yXqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:2f:d7:dc:8b:71:87:ba:cc:b8:7b:96:3a:d9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e3ad8b0224521cd0ae7492c694bc2d4ee1fdb2
        Validity
            Not Before: Aug  4 07:00:59 2025 GMT
            Not After : Aug  5 07:00:59 2025 GMT
        Subject: CN=793978c260a00465cb77436ac34a8de654a23665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:89:60:61:d0:c1:3b:75:a7:d0:35:a6:7f:bb:
                    c5:8b:0e:41:4d:ae:1c:a4:a2:1f:de:c4:14:44:6b:
                    84:0c:e9:55:fa:b2:5a:ac:97:fd:aa:d2:a7:4e:96:
                    f4:02:86:e8:24:05:76:42:f7:44:4f:ce:b1:10:1f:
                    d6:cf:42:41:ba:8c:d3:00:08:7a:ca:91:a7:6c:3a:
                    b3:7d:66:fc:14:62:b1:88:65:df:4d:09:65:d2:a8:
                    af:24:b2:8a:34:2d:d7:43:18:09:7c:ac:d8:cb:11:
                    ef:73:cb:29:de:ef:c5:27:82:f5:86:d4:21:82:c1:
                    68:78:7c:38:e0:cb:c9:0a:04:0c:3e:a6:38:ba:82:
                    90:3a:15:a2:df:dc:0f:5f:59:75:93:64:56:ed:19:
                    25:0b:c2:00:4d:75:9f:15:1b:00:c3:2c:bb:b6:9b:
                    0a:be:39:a3:83:a3:dd:a0:0d:b1:a5:3a:be:f1:18:
                    bf:d0:27:f3:bf:5d:73:61:aa:0b:b9:50:31:18:88:
                    52:1c:3c:d9:a6:c2:7d:fc:b3:d9:76:37:97:a4:0f:
                    45:8c:9b:3f:27:8c:ef:25:4c:a0:f3:25:76:40:74:
                    14:bb:41:07:5a:97:ef:39:ae:b3:b9:3b:28:fc:b7:
                    80:73:82:3c:cb:85:c3:c0:bb:67:07:29:72:dc:70:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:39:78:C2:60:A0:04:65:CB:77:43:6A:C3:4A:8D:E6:54:A2:36:65
            X509v3 Authority Key Identifier:
                keyid:69:E3:AD:8B:02:24:52:1C:D0:AE:74:92:C6:94:BC:2D:4E:E1:FD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeOtiwIkUhzQrnSSxpS8LU7h_bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bd8ec1-17a4-44df-883d-e97d226fbeea/1/aeOtiwIkUhzQrnSSxpS8LU7h_bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:86:ee:4f:ea:20:5a:68:83:38:b9:4a:23:e5:34:48:47:
         65:d4:3a:8d:b4:33:38:22:b1:48:bf:7f:d1:16:fc:7a:d8:bd:
         65:bf:45:73:fc:ab:8e:9e:05:3e:dd:5f:e2:b0:b0:8d:45:3a:
         db:2c:df:3a:4b:a4:8a:70:8b:61:ed:8e:7a:c5:92:4f:03:af:
         90:98:af:d2:47:31:5e:6e:9c:fd:de:d5:69:80:cc:c7:29:8d:
         0c:66:ab:7f:b3:5f:e9:0b:cd:c8:41:7b:53:d9:3c:3e:0e:f7:
         f7:7f:ae:66:98:da:a2:ae:12:d5:90:99:21:54:da:23:d9:31:
         08:7a:c1:77:f1:9a:50:25:40:c8:7e:cc:5c:0f:43:f2:1d:c7:
         c5:eb:4c:e6:f8:79:6c:5c:ac:68:79:76:31:2b:3b:78:fe:3f:
         e4:d5:51:6a:01:49:ac:07:3f:fb:9c:c4:5f:0c:70:a7:12:4c:
         0b:b7:cf:a0:fb:88:c0:a7:81:37:e1:43:42:d3:4c:e2:d0:9e:
         2b:30:9f:a8:46:78:d2:89:b8:ae:ef:cf:66:81:2a:47:a1:b6:
         1d:9c:60:cf:9a:d2:8c:10:84:f8:41:ac:3a:1b:cd:93:68:1b:
         a1:28:d8:ca:e5:ee:3f:79:ca:63:05:bd:ad:64:24:0e:87:dd:
         dd:13:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:15 2025 by rpki-client