Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          QgehB9YJS8ia4VgJ4BojIMQEFfs6RGS8p+WGehj/rzI=
Subject key identifier:   85:D3:44:2E:77:9C:DD:97:15:B6:49:4E:24:2F:49:68:15:96:A4:16
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       01988167C980982DA0D776DB1B0C04A646D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          15B0
Signing time:             Wed 06 Aug 2025 22:01:59 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:59 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:59 +0000
Files and hashes:         1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: KrPRXKK1XrMxKZi0l548iltJIi9YMnZ9YL8wJS+fWjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:c9:80:98:2d:a0:d7:76:db:1b:0c:04:a6:46:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Aug  6 22:01:59 2025 GMT
            Not After : Aug  7 22:01:59 2025 GMT
        Subject: CN=85d3442e779cdd9715b6494e242f49681596a416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:5e:ea:7c:c6:8a:69:5e:6f:b9:eb:cc:76:
                    a5:b2:10:a9:74:67:b8:41:93:08:3e:c5:74:9e:67:
                    04:05:71:71:d3:58:7e:73:c3:7c:f9:1c:5f:80:c2:
                    c5:70:09:61:58:48:53:33:df:15:e4:f4:b9:8b:85:
                    58:54:d2:5d:c9:35:c4:7d:4c:3c:4f:67:7a:44:a2:
                    a0:e6:4c:0f:44:8d:0f:5b:ab:65:1d:26:c8:97:44:
                    2c:f5:70:ee:5f:27:75:34:e6:9a:14:bc:8a:91:c2:
                    4f:fe:75:37:79:a0:9e:39:55:f5:a4:77:88:bd:fe:
                    cb:2f:a7:3c:d6:94:bf:c8:bd:29:7c:3c:67:1f:93:
                    2e:47:c4:7d:61:3d:e0:60:32:00:3c:33:5f:d1:e5:
                    d6:00:7e:1d:be:ca:41:a1:03:0f:84:d8:ea:c1:38:
                    ac:08:06:e4:7d:63:8f:d0:dd:2c:94:ee:68:a9:b7:
                    31:6e:13:2e:83:db:9b:6d:d6:75:cb:a0:97:ea:23:
                    dd:0f:00:09:51:f8:37:30:fc:f5:83:28:1b:ef:74:
                    46:e0:bb:13:4f:2e:4e:20:18:3d:d9:35:22:6f:6e:
                    d2:2a:3b:16:34:55:ec:e4:59:58:d5:90:f8:a3:24:
                    a7:d4:bf:ff:91:50:ba:b2:71:c3:37:71:d0:34:c2:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D3:44:2E:77:9C:DD:97:15:B6:49:4E:24:2F:49:68:15:96:A4:16
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:72:9a:8c:2c:91:1a:3a:c5:76:a6:04:f0:06:81:d4:54:
         96:71:d0:84:05:ee:6a:4d:66:59:01:5c:69:b1:74:29:9b:be:
         0a:e5:42:3a:b7:af:52:b8:f8:4e:09:12:50:2a:81:e1:af:fc:
         ae:a3:41:78:34:37:39:45:33:f7:b4:4f:c7:45:f8:58:65:2e:
         04:f3:66:af:14:1d:02:1b:83:93:75:d7:36:ba:66:e3:2a:b1:
         9e:05:cf:d9:46:e3:7d:67:77:c4:6f:18:4f:af:99:c0:d1:ad:
         76:60:9d:47:e0:41:63:42:1c:ec:89:5e:01:57:82:b4:f8:d5:
         c8:98:ca:b6:cf:cc:93:c2:e1:7e:53:58:7b:0e:d5:7a:65:f8:
         0f:5d:4d:8f:a4:fe:85:ca:a2:f1:1a:62:76:ce:ce:ad:87:d7:
         7f:54:0b:24:f7:23:06:3c:f5:78:45:e7:96:cc:e5:db:43:56:
         a0:16:94:dc:2e:da:8c:86:03:f7:1a:6d:f9:06:45:39:ee:2d:
         7e:79:3d:c0:21:2c:70:b1:c0:51:66:9b:2a:f4:b0:bb:b3:6c:
         75:11:62:8f:a9:cb:c1:35:4c:c0:9e:d7:29:87:f3:35:3f:62:
         99:33:24:ef:06:1f:5c:84:be:cf:ad:38:96:af:b1:83:40:a8:
         1c:a3:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:26 2025 by rpki-client