Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
File:                     a4us2V8fS9Z1Un0ybSmZVoYsMho.mft (raw, json)
Hash identifier:          HviVxPA8aGio3ca06VjYBGd1iD8rPSmBGhNx68fpoLQ=
Subject key identifier:   5B:E2:CA:78:CC:80:10:E9:FF:B5:36:64:D0:9E:73:60:9D:F6:0A:DC
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Certificate issuer:       /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial:       01988054391E781C6E0724B60D3400230008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
Manifest number:          10BE
Signing time:             Wed 06 Aug 2025 17:00:59 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:59 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:59 +0000
Files and hashes:         1: a4us2V8fS9Z1Un0ybSmZVoYsMho.crl (hash: CDeySC8wTywktb0vdl/WHOBywARmRO2/5gyfBEb2cmM=)
                          2: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (hash: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:39:1e:78:1c:6e:07:24:b6:0d:34:00:23:00:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
        Validity
            Not Before: Aug  6 17:00:59 2025 GMT
            Not After : Aug  7 17:00:59 2025 GMT
        Subject: CN=5be2ca78cc8010e9ffb53664d09e73609df60adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:e2:91:15:77:32:ea:5e:fe:04:bc:1d:59:
                    61:5a:bd:4b:c0:91:fb:7f:bf:59:9e:94:5a:4f:92:
                    2e:0d:68:49:ef:66:6a:e0:2c:93:f8:cd:4d:b4:b7:
                    28:22:11:79:7b:23:4b:da:3a:58:9e:8d:1d:ab:3e:
                    8a:9e:65:cf:08:ea:51:8d:40:dd:f3:be:04:7b:4d:
                    68:85:e3:b2:e8:f7:e9:74:cb:16:ae:47:5d:ca:67:
                    77:c4:0c:cb:7a:e0:7a:99:5e:43:64:84:49:13:73:
                    5c:e3:08:34:a2:f1:18:45:92:e7:94:be:bd:35:94:
                    dc:3c:a8:66:7b:c2:78:cc:ab:7f:5b:59:5b:9e:57:
                    09:0b:58:b9:4e:c0:ad:72:bb:a1:3a:de:b9:af:16:
                    e9:d8:a0:20:0a:ef:b1:18:95:f4:d1:e2:6b:dc:f8:
                    a6:c8:d7:01:d8:31:d9:d7:7b:6d:90:3e:e7:70:da:
                    84:67:2b:04:51:e8:5e:0a:d8:3a:b3:c9:88:84:36:
                    cf:d9:84:0e:e8:74:17:d7:40:5f:28:58:88:00:8c:
                    a6:dd:ee:db:1e:df:85:cf:0f:41:98:a3:55:8b:71:
                    7f:bc:27:c3:6e:69:47:ab:88:19:c0:88:94:a5:01:
                    ef:b2:17:54:7a:c5:01:97:7b:b4:af:d5:2c:1c:f2:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E2:CA:78:CC:80:10:E9:FF:B5:36:64:D0:9E:73:60:9D:F6:0A:DC
            X509v3 Authority Key Identifier:
                keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:f2:46:75:ff:1d:17:c7:44:58:03:89:c5:12:0e:d0:b8:
         d0:07:81:04:23:02:1c:79:14:c1:01:ce:dd:8b:fe:ab:4b:5c:
         c5:78:fb:e9:68:df:e8:9b:61:3e:f8:97:a3:a4:69:19:42:1c:
         20:54:72:24:70:c0:5a:61:3d:b5:73:30:ec:34:96:4b:09:c6:
         73:4c:3c:6d:34:7e:8d:8f:d5:53:81:75:ad:39:71:49:44:07:
         03:ce:35:84:1d:3b:60:39:4c:e1:78:72:0d:51:ca:06:30:44:
         d4:39:ce:17:5a:68:30:e2:2d:a2:69:92:dc:e3:fd:f5:f7:0e:
         b1:27:80:8d:64:17:5a:19:d6:a9:80:c1:fc:45:37:cc:68:3e:
         59:54:9a:4b:1a:d8:a2:80:04:37:39:63:6c:9e:ab:e8:5b:da:
         47:86:bb:53:8a:5e:6c:11:5b:98:ff:0e:39:e6:26:32:1b:d0:
         14:02:31:98:83:9b:85:38:64:6b:2c:10:fd:9f:96:2c:7f:ea:
         86:b5:91:3d:c1:b1:48:c2:15:45:1c:d2:cd:b2:ce:bf:ae:67:
         5b:4d:2a:75:07:a8:0c:cf:2b:1d:54:c7:6c:83:0f:76:0f:79:
         cf:7e:b6:df:ec:bc:4b:e4:ad:1b:5b:1f:41:e1:1a:19:75:24:
         09:0b:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:25:45 2025 by rpki-client