Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File:                     NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier:          Be/syROoAqmRY5eFwV8jYsoH5UmvNsPFl6MiLXf7kJQ=
Subject key identifier:   8B:CB:F0:BE:3E:39:99:23:3B:09:CB:7A:0C:0E:37:66:6B:A2:3A:AB
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer:       /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial:       019897139265FDFA3B6C438E865AC60F3F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number:          15BC
Signing time:             Mon 11 Aug 2025 03:01:38 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:38 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:38 +0000
Files and hashes:         1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: 4Q/SsNiC1l5FlqDP/wyIlo2aRWg2fBFj8s4XthU0FSk=)
                          2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:92:65:fd:fa:3b:6c:43:8e:86:5a:c6:0f:3f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
        Validity
            Not Before: Aug 11 03:01:38 2025 GMT
            Not After : Aug 12 03:01:38 2025 GMT
        Subject: CN=8bcbf0be3e3999233b09cb7a0c0e37666ba23aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:ac:a7:bf:2b:13:72:d9:d0:65:48:f3:96:
                    ef:c1:2a:a0:5e:a3:04:a2:7b:a5:3a:e3:75:1d:0f:
                    09:06:8e:66:0b:e9:50:dc:a4:2f:18:b8:33:69:2f:
                    50:77:90:70:66:1b:c1:fb:5c:aa:41:99:75:b8:ce:
                    5c:0d:dd:79:ba:c6:4f:d3:69:63:1a:ce:79:bc:41:
                    be:a9:08:08:a4:53:0a:56:97:7e:66:c6:b9:3e:68:
                    2d:50:4b:21:c2:ae:b1:d0:92:75:ff:ef:99:19:43:
                    f4:0c:90:21:d8:03:8c:4b:18:cd:3a:bf:17:38:ba:
                    44:44:9e:37:ac:b3:b6:87:8c:0e:e0:80:42:eb:5d:
                    f5:8f:ab:64:e6:4e:cc:61:f4:47:48:cb:a5:6d:68:
                    59:65:7a:22:05:f1:d2:93:87:97:30:6d:fa:aa:5b:
                    5c:6d:ad:7a:e7:01:43:4e:ac:6d:fe:11:d5:c9:f8:
                    45:35:87:0f:64:94:fa:6e:06:a7:94:ad:f5:2b:44:
                    fb:bc:e8:c3:63:ba:0d:db:1c:b9:a3:3f:1a:1e:cb:
                    ed:4e:ea:6b:25:4a:b7:e7:93:6b:47:99:cd:26:0e:
                    86:e0:11:51:16:67:b1:a8:3a:46:d5:a3:bb:12:35:
                    c9:27:8c:65:35:55:77:56:36:be:c0:08:44:0e:88:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CB:F0:BE:3E:39:99:23:3B:09:CB:7A:0C:0E:37:66:6B:A2:3A:AB
            X509v3 Authority Key Identifier:
                keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:65:37:b7:91:50:55:35:de:c0:f8:61:83:bb:94:af:80:2b:
         54:47:6e:b7:d8:6c:87:f9:64:82:29:ef:87:c8:31:a2:d4:12:
         7b:dd:55:9a:c1:ed:32:dc:cb:ea:53:5b:9c:99:a1:09:c9:4f:
         f6:3a:46:82:08:80:61:38:94:89:9a:eb:57:bc:8c:bb:28:06:
         65:71:a7:57:b7:89:4a:88:0d:18:5e:45:19:0d:96:74:8a:a6:
         7e:af:7c:ce:22:40:f8:06:b3:4c:18:27:1a:97:7b:f9:5d:5f:
         9f:a4:86:a1:c0:ec:8e:c8:8f:f0:b5:c2:12:44:8b:8e:7d:69:
         fa:ef:1e:92:9b:91:ff:45:15:52:ee:9f:d9:f6:bd:a3:f4:ad:
         f6:f7:01:00:73:f2:92:52:af:47:16:ba:22:7e:2b:3f:e6:6b:
         30:63:ce:ff:b0:82:c6:02:0d:f1:84:b6:70:ed:dc:a9:24:c7:
         32:48:c4:7b:33:ff:03:80:6d:af:29:74:a4:77:ba:c8:43:21:
         ac:51:9c:f1:8f:05:20:f5:c7:ed:02:02:51:d5:74:f0:bc:29:
         e6:6f:81:2c:ec:73:80:25:20:66:15:3b:97:3c:5c:5a:db:a4:
         f2:57:5e:b4:82:20:a5:4d:1d:a7:19:18:ee:c4:56:35:42:f7:
         22:52:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:26 2025 by rpki-client