Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File:                     IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier:          sMZMMLqqpquAwOXpG1OHW62N+ZWAmCjMpJ3kLwWHKi4=
Subject key identifier:   CC:6E:50:A1:3E:AC:22:06:58:27:88:89:68:B9:D4:3D:71:48:C8:75
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer:       /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial:       01988B7D73A1F0A68F8C693A40FB728BEC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number:          101E
Signing time:             Fri 08 Aug 2025 21:01:51 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:51 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:51 +0000
Files and hashes:         1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
                          2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: o0Qm4Rdks4GmQMn4uuFX3UZ8a5y7m/KM9KIAxM3D8ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:73:a1:f0:a6:8f:8c:69:3a:40:fb:72:8b:ec:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
        Validity
            Not Before: Aug  8 21:01:51 2025 GMT
            Not After : Aug  9 21:01:51 2025 GMT
        Subject: CN=cc6e50a13eac22065827888968b9d43d7148c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:35:fa:b4:9f:10:41:4b:c7:5f:ef:96:3f:
                    49:87:ac:eb:9b:c2:92:52:6c:cc:32:7f:74:4c:e0:
                    ea:de:b5:2f:74:5f:d7:f5:43:26:4e:4f:72:2e:a6:
                    60:93:5f:03:55:dc:b3:d4:07:e3:d0:0d:d8:b6:7b:
                    49:83:0e:a9:39:46:08:83:5b:09:19:47:67:d7:2c:
                    be:bc:31:9a:7e:43:6d:ee:c4:53:0d:d8:4a:49:a0:
                    1c:cc:c0:4c:ea:13:d0:50:f0:b8:f5:20:8a:8a:1b:
                    03:0f:b3:5d:f1:bd:ef:bf:9c:03:d4:46:2d:7e:75:
                    84:87:8d:db:78:28:b8:0f:59:c5:a6:87:c0:9f:56:
                    14:91:72:40:ef:9b:5e:e6:5a:2a:28:ff:af:2e:ad:
                    5c:29:4a:c8:ce:20:28:d2:b3:bd:c2:96:bf:28:93:
                    7b:7e:ad:04:01:00:1e:a2:9c:1c:af:19:76:f5:cd:
                    91:d7:2b:ec:0c:30:f3:72:96:08:fb:6a:8a:ff:a1:
                    94:86:3b:48:c6:9f:aa:ea:bf:c5:9d:44:22:f9:b1:
                    b5:ce:37:c6:72:c7:8f:57:db:21:e2:3c:a1:64:45:
                    ca:0c:f4:f7:03:db:0b:d7:f7:4a:b7:2b:46:9a:e3:
                    46:30:a7:19:32:0e:2c:bf:49:3c:d1:22:c4:fe:ba:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6E:50:A1:3E:AC:22:06:58:27:88:89:68:B9:D4:3D:71:48:C8:75
            X509v3 Authority Key Identifier:
                keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:91:9a:0e:fb:13:e4:ad:71:0c:43:31:1f:9e:30:a6:e6:2d:
         38:44:93:3e:85:8c:5f:7d:03:3e:fc:71:ee:31:49:13:ca:de:
         87:9a:27:6f:e9:3d:ac:35:34:70:78:5e:51:4c:8f:35:09:2b:
         d5:7d:50:a2:74:c1:1d:76:46:b0:96:c8:c0:be:31:19:60:f3:
         08:cb:84:ed:e7:0c:c7:65:12:d0:32:8b:44:59:9c:e3:88:3d:
         74:98:5a:25:7e:a1:c7:e4:99:ac:1e:e9:a0:6e:9c:29:78:ae:
         60:b3:12:1f:92:dd:64:01:ba:d6:39:2b:aa:43:41:34:4e:64:
         50:9f:b3:36:02:9a:ff:84:e3:be:ee:41:9e:30:87:42:cd:c9:
         a4:81:97:ec:e1:41:bb:70:17:30:63:84:a4:78:eb:99:bf:32:
         b6:63:f2:b2:bd:12:62:52:4e:9c:0d:d5:e1:1d:cf:e9:20:5b:
         21:5b:34:7d:c8:59:15:ab:5f:15:28:32:52:56:64:05:b4:83:
         dd:22:b4:d8:51:04:20:18:40:c4:e3:21:f8:d2:0c:b9:3d:6c:
         9c:d9:9f:20:8e:2c:3b:d5:da:ce:0a:e5:17:d6:49:54:66:e1:
         cb:b8:7d:bb:eb:ec:ab:d8:79:06:ae:af:3a:66:22:95:aa:eb:
         14:24:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:11 2025 by rpki-client