Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File:                     I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier:          udo6Vui3ZWD/03mXRIxDZRllaJr1B+IMmxAu9NWoZiQ=
Subject key identifier:   A0:A6:A1:5E:CA:E2:59:29:E1:1E:41:BF:A6:FB:8B:14:7A:D4:BA:34
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer:       /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial:       01987F7A171E0613D784E9AC07CFCB20ADC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number:          0A08
Signing time:             Wed 06 Aug 2025 13:02:44 +0000
Manifest this update:     Wed 06 Aug 2025 13:02:44 +0000
Manifest next update:     Thu 07 Aug 2025 13:02:44 +0000
Files and hashes:         1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: VUceHf23Xa6IpQHbKdZrnbcgHkWZmvzf1jyE42M8XRQ=)
                          2: b73ddOLLjPYnTz9o7yYL4kMMo3U.roa (hash: Vc85I6rYToAbWM15WR5pMloHamrCwTA2NvWFqIsFGlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:7a:17:1e:06:13:d7:84:e9:ac:07:cf:cb:20:ad:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
        Validity
            Not Before: Aug  6 13:02:44 2025 GMT
            Not After : Aug  7 13:02:44 2025 GMT
        Subject: CN=a0a6a15ecae25929e11e41bfa6fb8b147ad4ba34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:b6:2e:1a:54:c7:40:7d:9e:34:0e:8f:6d:
                    da:fe:3e:49:0e:fd:88:fd:f2:88:f5:df:dd:aa:a1:
                    3e:c4:30:d5:9a:c7:7c:69:d5:55:05:d3:67:2f:39:
                    d1:8f:35:9a:ff:bd:b6:29:de:f7:1f:7b:08:bc:e5:
                    8a:06:59:be:d7:4a:53:eb:43:f2:d5:1f:91:94:91:
                    b7:fc:5c:7d:82:99:d6:02:85:83:f4:1a:e8:42:9c:
                    4b:ba:9d:66:49:7a:5a:7d:be:b5:ca:33:b9:80:c6:
                    20:50:e9:8b:38:ee:26:fb:32:e1:d4:b6:4a:f6:67:
                    f5:6b:0a:68:5f:2e:f8:72:23:69:41:fa:8e:47:a3:
                    7e:5a:f9:bc:08:ec:11:31:49:49:15:d3:9f:47:f1:
                    06:bd:e0:66:73:23:d3:06:07:1f:ba:2b:02:bb:74:
                    72:88:b1:be:03:fa:2e:34:c3:5a:f7:f9:9a:51:9a:
                    0e:23:32:bb:7f:b7:d9:13:64:4e:fc:43:d3:a6:a6:
                    8a:e1:9b:14:df:93:09:cc:42:71:a5:07:34:42:6a:
                    06:b2:8c:de:d4:3a:0b:4a:9e:50:b7:83:71:82:b5:
                    e7:c5:91:41:aa:bd:1f:b5:e9:35:08:fd:15:0c:b4:
                    79:9c:5e:b2:21:4b:45:04:81:33:26:63:d5:f1:f5:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:A1:5E:CA:E2:59:29:E1:1E:41:BF:A6:FB:8B:14:7A:D4:BA:34
            X509v3 Authority Key Identifier:
                keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:36:aa:ee:50:de:59:43:8e:72:86:b6:b0:e0:ca:1e:c7:e7:
         3b:ae:5a:24:ef:99:0b:a1:1f:09:ab:8d:ef:79:61:f1:31:87:
         9f:3f:87:cf:7f:db:af:1c:16:46:c4:37:b2:f6:21:53:7b:34:
         04:cd:6d:9f:c4:5c:6f:e0:c4:8f:f7:f8:49:c6:61:01:97:0d:
         08:44:bd:01:df:51:2e:f9:c9:de:ae:bc:58:47:4e:0c:84:13:
         16:40:51:56:cd:03:c6:b8:bb:7d:32:38:e2:36:3f:76:f4:13:
         78:0b:71:f8:86:79:85:d3:d5:eb:7d:4b:6d:af:68:65:48:dc:
         38:75:81:d4:10:e1:d8:52:6a:08:86:f4:62:1a:37:d4:57:ef:
         34:67:c1:55:1f:92:f3:27:88:bf:36:42:8a:66:c7:13:3a:a0:
         be:5d:53:fc:4b:4c:6b:c7:cc:2b:5e:90:d8:22:ca:f1:e2:26:
         2a:67:48:d9:89:ae:5a:62:27:12:14:14:0e:ae:9a:3f:aa:94:
         6a:da:29:2e:60:44:50:b7:ca:49:5c:88:7f:c7:1b:05:90:28:
         f2:5e:37:03:95:84:95:3c:84:f4:32:34:fb:25:fc:d5:a2:9b:
         67:0a:bd:6e:db:d6:c9:1c:95:8f:c5:a6:a2:c0:22:03:98:b8:
         61:a6:2d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:46 2025 by rpki-client