Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File:                     RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier:          ekRzzZRtsTMahciazPEJst+PqyXrOzrnZPeZNdX2Z80=
Subject key identifier:   AF:89:6E:5D:39:BA:07:FE:16:72:16:92:6C:F3:8D:ED:0D:34:FB:88
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer:       /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial:       0198729849D715B682A837565F71B10657F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number:          1011
Signing time:             Mon 04 Aug 2025 01:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:39 +0000
Files and hashes:         1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: nCVxsxvf4UHDgsrIZ7P1wUVGu8K13slU/ur9J9GCk+k=)
                          2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:49:d7:15:b6:82:a8:37:56:5f:71:b1:06:57:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
        Validity
            Not Before: Aug  4 01:00:39 2025 GMT
            Not After : Aug  5 01:00:39 2025 GMT
        Subject: CN=af896e5d39ba07fe167216926cf38ded0d34fb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:a0:71:59:9a:15:af:75:71:c5:c2:b0:2b:
                    b8:ce:21:2f:46:f9:5a:70:06:07:88:a6:17:5b:07:
                    4b:b1:fa:77:3b:97:22:d7:f6:24:80:5a:84:65:6b:
                    50:44:b3:61:e9:99:ed:68:31:29:56:55:e9:f6:84:
                    8e:3c:06:99:41:d2:af:a7:c5:66:c5:2d:6a:10:5e:
                    79:e9:18:48:1c:dc:10:bd:4a:ef:74:2f:e6:bf:13:
                    9f:d4:d9:cf:e0:8b:0a:cc:bf:44:e6:69:3f:a4:f0:
                    1e:26:10:36:7b:8c:43:04:65:6b:81:b8:73:2c:f7:
                    80:82:27:5a:98:67:35:94:b0:04:f9:20:67:34:fa:
                    54:d4:0f:f3:b4:77:82:d2:71:23:d3:ef:cb:b6:21:
                    32:23:8f:3a:a8:ac:1b:48:35:ec:c2:e6:d6:c6:c9:
                    81:80:40:ee:5a:32:cd:c1:fe:bc:81:8e:9c:53:85:
                    76:a3:f5:ce:b8:b1:ef:b2:d9:5c:42:2a:9d:77:db:
                    e9:66:82:0a:bb:76:56:32:4d:15:57:5a:a4:96:23:
                    4f:d9:5b:0a:83:54:c6:37:27:49:a5:0e:c1:40:34:
                    bb:3c:b6:32:db:34:89:b4:11:99:2d:86:92:5f:cb:
                    47:a3:f5:78:97:44:b3:72:55:87:f2:2f:4a:9f:98:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:89:6E:5D:39:BA:07:FE:16:72:16:92:6C:F3:8D:ED:0D:34:FB:88
            X509v3 Authority Key Identifier:
                keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:f3:53:a9:f9:90:45:2b:46:3e:10:c1:1f:44:2d:6b:b2:
         a2:8c:6b:ce:03:0f:9f:2c:39:3d:ae:3f:01:af:95:b9:04:62:
         d9:bf:fd:b2:f3:2c:e0:d9:71:10:c8:2e:a7:00:44:bb:aa:b1:
         bb:e3:b2:d9:c2:1f:09:7f:f5:ef:ad:6f:8f:39:df:41:a0:87:
         34:9f:3d:8a:0a:bc:54:b2:48:23:38:76:33:07:3c:4e:7c:1c:
         0c:f8:06:6e:2d:bf:28:b9:38:39:74:1b:b0:84:9f:b5:3a:32:
         2d:fb:41:8a:df:8a:04:75:42:57:e2:20:c0:85:e4:61:7a:1d:
         c4:d5:11:80:46:32:6d:d4:3a:eb:5c:c5:d5:12:43:2f:c0:63:
         4b:a1:7c:8b:01:df:e9:30:90:2d:62:18:45:f7:a0:a4:56:82:
         af:55:df:bf:4f:ab:9f:38:9b:4f:e0:f3:e4:eb:97:42:c0:11:
         a0:78:0d:ab:98:ea:00:bd:3d:c5:ab:69:3a:31:c7:93:a2:8f:
         6b:43:cf:0f:2d:4e:fe:d7:63:5f:0e:a8:12:01:06:24:28:7f:
         a0:32:0f:40:3b:fd:3d:50:c0:6f:e4:8a:44:d6:cd:b7:7e:b4:
         30:ed:de:16:5c:5a:c9:04:1b:c6:d9:62:f3:f3:2c:41:a3:95:
         52:00:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:10 2025 by rpki-client