Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          242MsK7SpzB3KNmitkKowNlsic1EBINuWgRs8ZuDC/Y=
Subject key identifier:   CF:A2:0A:02:93:FF:28:2B:42:BB:1C:DC:FE:AA:BE:F7:96:01:35:67
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       0198838CADD69E66284E67AD2D0B6D8104E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          0A0C
Signing time:             Thu 07 Aug 2025 08:01:31 +0000
Manifest this update:     Thu 07 Aug 2025 08:01:31 +0000
Manifest next update:     Fri 08 Aug 2025 08:01:31 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: BGP81Beuz4tHCqYYuZLwSzE7o5XZM0M/mxlvrvaSnXs=)
                          2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:8c:ad:d6:9e:66:28:4e:67:ad:2d:0b:6d:81:04:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Aug  7 08:01:31 2025 GMT
            Not After : Aug  8 08:01:31 2025 GMT
        Subject: CN=cfa20a0293ff282b42bb1cdcfeaabef796013567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f0:b7:01:a2:fc:e0:0e:56:43:09:97:a8:55:
                    f0:da:d9:2e:24:4b:5b:61:cb:ae:a8:77:6b:15:f6:
                    61:a3:ab:74:1d:1e:e3:57:10:d8:4f:47:23:1e:b4:
                    7d:4d:85:83:d8:a3:1d:46:2a:fc:fb:7b:13:63:c8:
                    89:d9:d2:5b:dd:a5:ef:0a:c6:62:f2:8f:c7:e7:33:
                    29:39:a8:25:0f:d6:50:8a:fd:eb:92:14:ad:1a:31:
                    31:e9:aa:83:e8:49:83:8f:fd:8e:86:e2:5f:ce:bf:
                    eb:03:b6:e3:ce:f3:91:60:77:57:61:3a:eb:b8:c7:
                    10:f3:c2:2e:59:ee:b1:c8:7a:77:79:6d:af:65:99:
                    56:c4:85:19:1d:32:30:ea:41:92:6d:d0:f7:99:c6:
                    1d:e6:37:93:3b:60:e5:c9:24:8d:e1:3e:4a:3b:56:
                    e7:79:bf:d0:72:06:93:b3:79:41:58:96:0b:ec:90:
                    9a:ad:a9:5d:24:79:c2:52:83:9b:72:ac:b4:f0:48:
                    85:06:01:58:40:01:91:7e:cb:ab:2d:85:38:8f:13:
                    5d:a0:67:46:d5:d7:73:ef:83:fd:3a:f9:11:37:14:
                    1c:47:10:ed:77:7c:21:93:6e:0a:1d:b9:9a:9b:ea:
                    86:c5:2d:42:6f:13:27:7d:67:86:2d:ca:00:bb:30:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:0A:02:93:FF:28:2B:42:BB:1C:DC:FE:AA:BE:F7:96:01:35:67
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:43:79:32:24:b7:7b:d4:ab:ae:dc:06:7a:ff:30:58:86:c1:
         e7:69:da:e9:6b:71:bc:07:69:ac:94:65:0f:67:3b:40:bd:09:
         ca:7e:8d:41:e1:ea:bd:09:3a:82:0d:50:75:22:3b:fe:bd:d3:
         f1:82:a7:95:7f:3b:6b:40:93:0c:ed:15:01:e9:7f:70:26:61:
         bc:56:9d:92:d1:3f:33:b3:e5:0b:8f:24:bc:70:21:db:e7:82:
         a8:61:f7:09:c4:a5:d6:75:b3:c9:57:c7:40:72:b0:5d:8b:59:
         77:20:a0:43:d2:37:23:4e:a7:fa:93:65:19:f8:9d:bf:2e:66:
         cf:9c:6f:37:0b:ca:3e:4d:d0:de:ec:c1:94:5e:3f:99:e9:39:
         cd:94:8d:3a:4a:14:1b:24:e8:9f:45:f1:13:c9:e8:4a:99:7b:
         2e:92:29:94:45:d5:87:81:d8:24:b4:d3:96:2d:52:5b:39:e5:
         13:d2:3a:4f:b1:94:01:50:ce:ae:52:30:fa:0a:3c:2c:e7:65:
         b8:5d:76:b0:92:c5:da:da:a9:1a:0c:ab:72:75:b5:a2:33:1d:
         d7:6f:c7:90:5a:d8:a6:41:d8:e2:02:e3:d1:a5:e3:4a:c2:7c:
         43:db:f0:1d:ba:78:9e:33:61:9f:5f:c7:2c:00:a4:86:bd:ee:
         21:b6:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:37:01 2025 by rpki-client