Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          GCBTOwgSmEK+RR7m5ugb2OkwHV1Z6WzfU84nYzLo15k=
Subject key identifier:   A6:47:F5:3F:DB:0B:8B:A9:2F:82:9B:3A:FE:E9:D5:D4:09:6F:D8:9F
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01987FAF6F237C63E9D4A64A3746A8D35946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          04B3
Signing time:             Wed 06 Aug 2025 14:01:00 +0000
Manifest this update:     Wed 06 Aug 2025 14:01:00 +0000
Manifest next update:     Thu 07 Aug 2025 14:01:00 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          4: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
                          5: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (hash: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=)
                          6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: /ilDIK8irERG94K7GVeRqZbikTE59bC7WICPPUOLBSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:af:6f:23:7c:63:e9:d4:a6:4a:37:46:a8:d3:59:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Aug  6 14:01:00 2025 GMT
            Not After : Aug  7 14:01:00 2025 GMT
        Subject: CN=a647f53fdb0b8ba92f829b3afee9d5d4096fd89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:85:ab:6e:7d:a1:7c:22:3f:46:58:d4:ab:
                    21:20:5e:c5:eb:84:94:8f:e4:f5:86:a4:df:fc:27:
                    2f:e5:7f:3e:e9:55:99:a2:8d:e8:4a:6e:70:59:93:
                    6e:4e:8c:57:98:b1:4b:c2:b6:f0:7d:7c:0c:18:3a:
                    fb:98:b8:3c:3d:70:ae:94:41:e6:d3:7f:c7:ab:7f:
                    1a:99:65:ae:62:0a:e8:16:a5:0e:f9:b1:d1:a9:41:
                    30:ed:cd:3f:97:70:77:8f:50:4c:62:8b:46:8b:c8:
                    cc:1e:4e:ed:29:c9:36:46:54:5f:cd:ea:83:73:ec:
                    ae:9c:49:32:fb:eb:49:b8:3b:71:12:5a:4b:f5:32:
                    ea:ed:4b:ab:51:75:55:f5:aa:a6:42:0e:42:1b:36:
                    a2:1f:29:a3:c1:6b:83:a8:2d:c0:cc:e7:02:0f:e9:
                    f5:12:f5:fc:68:21:1d:74:b6:b6:c5:eb:03:b2:da:
                    9c:a8:3f:1b:af:7c:fd:57:ee:99:87:4c:4c:33:69:
                    2e:29:4c:4f:a8:02:bc:a1:2e:a6:cd:cf:6f:0b:2b:
                    8d:34:e6:7d:a4:36:67:d0:f9:62:58:03:a5:73:3a:
                    23:4a:99:aa:f2:58:ab:77:61:10:77:f4:43:bd:4c:
                    24:aa:7d:9e:35:e0:7b:90:2c:58:e0:35:d8:a6:b8:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:47:F5:3F:DB:0B:8B:A9:2F:82:9B:3A:FE:E9:D5:D4:09:6F:D8:9F
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:41:ca:34:f7:c6:b4:32:51:32:d3:06:7e:41:79:bc:cf:2f:
         48:95:ad:66:65:c3:19:c3:dc:63:77:bd:a5:9f:eb:d0:58:f9:
         5c:c7:99:c0:02:a2:57:18:72:78:7c:11:07:78:6b:d3:51:85:
         06:75:f0:5a:17:34:a8:bc:0e:ff:3c:15:29:e8:ca:33:b4:b7:
         73:94:14:dc:f4:e6:46:ef:ce:d9:11:0c:09:0d:4d:ec:de:ff:
         d2:72:12:ed:e4:6e:4d:54:64:c1:3d:c8:12:55:47:a3:64:a4:
         37:31:21:54:f7:21:5d:7b:34:ef:74:de:3d:bd:75:ca:8a:9a:
         6d:d6:b7:4d:ef:04:71:ad:16:ed:f0:7b:0b:f1:42:fa:be:14:
         20:05:62:08:a8:a1:f2:ad:32:21:c0:0e:fc:a8:6d:6c:10:46:
         c6:2d:16:06:ed:35:e0:f7:1f:76:af:2e:35:5e:74:9f:17:c5:
         9a:9a:74:aa:36:bf:45:f6:9f:e7:58:74:88:7f:1b:ab:c1:19:
         f7:41:b6:f7:63:a8:17:8e:b6:d5:7d:b9:89:af:e4:11:1d:fc:
         40:d6:26:fb:19:66:8f:1a:5d:c5:f7:37:70:e5:d8:35:13:66:
         c3:2f:10:cd:4d:c0:d4:77:29:1e:99:9f:fa:5d:83:69:09:95:
         3b:09:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:37:44 2025 by rpki-client