Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          5i69OJRdOfnwE4DeNDE3XmLSlQ05H0cNqD6+Z+R6kgc=
Subject key identifier:   28:B1:37:EA:FF:25:1B:D1:3C:71:BD:89:12:9A:62:B5:52:7C:E2:B5
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       01988166B3D98E1A4A1E11D15A45531E9DF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          137B
Signing time:             Wed 06 Aug 2025 22:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:48 +0000
Files and hashes:         1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=)
                          2: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=)
                          3: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=)
                          4: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=)
                          5: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: oOrXp7yi38T73oouAzif8sn6ElnNnvVJjV2QLBLPgpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:b3:d9:8e:1a:4a:1e:11:d1:5a:45:53:1e:9d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Aug  6 22:00:48 2025 GMT
            Not After : Aug  7 22:00:48 2025 GMT
        Subject: CN=28b137eaff251bd13c71bd89129a62b5527ce2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:ae:f6:b3:c2:da:5d:c9:11:71:7a:90:7b:
                    c8:01:f0:c8:e6:a4:1b:b6:7b:c1:2b:d3:17:79:6e:
                    ff:41:99:6d:52:eb:d7:aa:c8:c0:54:cd:30:fd:bd:
                    aa:28:37:e6:12:ec:a3:85:57:1b:f3:01:87:67:48:
                    ed:60:e4:c2:01:ab:2d:de:3f:68:f3:51:ab:a2:98:
                    57:a5:5b:5c:88:34:35:e3:93:b9:e0:c0:b3:ca:87:
                    e2:9b:d7:de:f9:bf:90:a9:01:1b:b0:b2:95:62:b1:
                    73:6e:f6:24:e2:10:a0:20:c2:b5:f2:5a:38:b9:bc:
                    b8:5d:56:de:ea:e9:16:e3:ca:c3:9a:64:75:2f:24:
                    75:ee:bf:15:8b:d3:60:32:10:67:37:99:30:62:e4:
                    aa:89:7c:b8:6e:35:3f:59:a2:72:1c:21:3e:71:83:
                    25:d1:3c:c1:ff:4a:5e:00:c3:30:ca:93:b5:36:98:
                    81:3c:2a:69:d1:a9:00:c7:be:05:bf:ab:44:5d:5d:
                    2d:c3:50:84:0b:a8:7c:b5:35:6c:ed:59:69:8d:69:
                    5d:c1:8e:5c:ed:af:63:b9:72:0a:62:80:b2:9e:29:
                    af:8b:19:35:14:4e:88:d9:ab:e8:1c:24:b5:6a:31:
                    d7:6d:46:14:38:56:ef:e3:0a:62:0a:df:61:60:ca:
                    17:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B1:37:EA:FF:25:1B:D1:3C:71:BD:89:12:9A:62:B5:52:7C:E2:B5
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:d4:70:cc:63:4a:9b:71:03:09:67:8d:0b:ff:b5:44:b7:
         48:bb:86:e6:56:80:d6:b8:a4:47:cf:6e:b5:8c:3e:c1:a4:6b:
         b1:1b:90:38:56:23:d0:df:8a:42:d8:74:62:a6:bb:7f:4f:5f:
         d2:34:82:f8:4b:d2:a1:6d:85:ff:63:03:7d:86:58:30:e3:47:
         ec:ef:a9:ca:b5:a4:22:59:5c:57:0a:c7:dd:6a:58:59:bc:85:
         22:03:5d:8d:2a:71:23:47:f7:2e:20:e6:1a:24:ef:b9:61:a3:
         1c:d2:3c:dc:cc:f9:ae:ca:cf:ba:65:91:f9:5f:06:74:f3:bb:
         9b:4c:0a:fa:59:58:17:3f:48:9b:f7:0a:af:3c:4b:d9:9b:72:
         73:c8:9f:28:6d:c3:b0:58:b7:6d:d9:53:93:5c:aa:b6:0b:f4:
         53:ad:ca:ab:c3:b7:03:8d:f2:74:90:92:e5:05:2e:ae:1e:63:
         aa:8e:0b:26:f4:5f:30:6f:37:aa:c3:2b:8f:1a:35:b9:70:d8:
         2d:6e:25:4a:ad:88:4a:61:2c:82:e8:db:a8:f2:aa:bf:e6:6f:
         e1:19:36:e4:42:9b:ae:d7:bb:45:15:2f:89:62:06:d7:43:0e:
         99:7a:86:34:a4:d9:4f:84:c8:c8:2e:67:fa:f8:c1:4c:2d:3c:
         48:2c:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:48:07 2025 by rpki-client