Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File:                     aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier:          xkJIqP5x80WytWoR3HNcXBTo9CwmPwpfCpLxvjcJPbk=
Subject key identifier:   A6:36:12:79:BB:C1:40:01:1C:5F:7B:AE:AD:F7:91:F7:93:5C:05:E7
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer:       /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial:       019875D0846F90022AFC2436678EF0D70EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 16:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:56 +0000
Files and hashes:         1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: MWiY5p2G6NXZsgUb58JYCc0LUs7oUhWMR9bHKpvEblA=)
                          2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:84:6f:90:02:2a:fc:24:36:67:8e:f0:d7:0e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
        Validity
            Not Before: Aug  4 16:00:56 2025 GMT
            Not After : Aug  5 16:00:56 2025 GMT
        Subject: CN=a6361279bbc140011c5f7baeadf791f7935c05e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:c7:12:61:6e:20:28:e0:2a:d9:8b:af:a6:
                    dc:33:57:84:c8:16:81:8a:16:2f:f9:bd:cd:11:32:
                    65:8f:d1:35:81:51:b1:11:23:15:5a:5c:e0:0a:df:
                    7f:4f:32:5c:07:1a:c4:4b:e9:8b:31:95:80:5d:c7:
                    78:bf:17:ce:29:c5:31:dc:43:00:50:ba:e5:91:a3:
                    ff:c8:f9:59:b9:c7:d4:61:45:35:25:b1:2b:93:46:
                    e3:42:d2:9f:e6:8c:ab:4c:41:f0:df:ef:ee:90:6d:
                    c3:d1:bb:00:2d:e3:a5:97:63:51:04:e6:5b:ca:77:
                    85:47:91:04:2b:53:3a:77:27:fd:5b:06:ea:93:5c:
                    c4:bc:0c:06:a3:25:af:91:e5:cc:f4:04:85:2f:4e:
                    67:25:40:88:eb:19:af:cd:3f:43:75:10:e0:3d:01:
                    43:86:2d:b9:2c:27:30:57:6f:aa:a6:d4:d1:fa:2c:
                    75:13:42:42:5f:d0:75:22:5e:53:db:48:e5:28:f5:
                    95:9a:83:55:a8:0b:91:c5:de:b3:e5:63:b0:ec:68:
                    3b:6c:48:cc:7c:67:95:ab:aa:68:e9:df:b8:46:10:
                    a0:7a:de:b6:70:20:9e:20:c8:8b:29:fd:14:63:10:
                    97:82:7e:07:a0:de:82:a1:6a:9d:e1:b5:3d:92:02:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:36:12:79:BB:C1:40:01:1C:5F:7B:AE:AD:F7:91:F7:93:5C:05:E7
            X509v3 Authority Key Identifier:
                keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:a3:7d:a0:34:17:bd:6f:21:e4:fa:48:c4:86:18:2b:86:
         0c:21:ab:af:6f:cd:54:b3:95:7e:7e:8b:c5:7d:d3:fc:11:63:
         98:a5:5d:e0:e2:7c:dc:f6:eb:3f:9c:0f:c7:87:fd:cc:33:e0:
         1d:9f:18:94:e5:16:9a:fc:a6:b2:f6:84:78:47:bf:6e:61:14:
         59:8a:2d:51:6f:28:70:a1:55:7f:93:f0:39:f4:39:c3:5d:de:
         45:e1:40:a0:11:9d:fe:af:cf:78:8a:44:fe:0d:48:13:f6:6a:
         a1:75:bc:b0:bb:34:ff:91:48:a6:de:49:ea:d6:31:77:f9:b6:
         c4:4d:88:11:0c:8f:85:f9:a7:39:bc:4f:30:3a:34:eb:02:d6:
         97:8c:80:2c:39:22:ab:eb:b5:b5:6c:70:e8:05:03:01:0d:50:
         f5:0d:21:37:5a:19:bb:94:58:09:97:3d:3a:6b:2d:2b:67:5a:
         20:33:8a:2d:c8:06:f9:83:67:07:ec:48:64:8a:84:11:1a:8d:
         1b:df:75:de:35:4c:99:7e:da:05:fb:1f:43:7f:3e:9e:59:4e:
         97:24:4e:b4:5b:30:7d:24:76:a5:3b:e1:56:78:98:26:1f:b3:
         76:43:6c:2c:81:97:3b:46:e8:55:f6:01:6d:1d:e4:29:da:c6:
         1e:49:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:49 2025 by rpki-client