Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File:                     I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier:          vtmruNNnU2Tk1eF8m2dL4r0bYbC/jCRE3XlPVI2UW1g=
Subject key identifier:   AF:1C:38:04:9F:DD:E6:99:26:79:42:82:AC:DC:23:65:4D:4F:C1:3F
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer:       /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial:       019873E227C70DB19D7DC9537057963FD71C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number:          1385
Signing time:             Mon 04 Aug 2025 07:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:57 +0000
Files and hashes:         1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: ax2zYpT2+An9ZcxGzU7K0OtpP5vWeToDzN0aB41b31Y=)
                          2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:27:c7:0d:b1:9d:7d:c9:53:70:57:96:3f:d7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
        Validity
            Not Before: Aug  4 07:00:57 2025 GMT
            Not After : Aug  5 07:00:57 2025 GMT
        Subject: CN=af1c38049fdde69926794282acdc23654d4fc13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:f1:17:72:ec:4e:46:55:f5:44:2b:bb:0a:
                    c1:24:14:2c:5d:96:37:53:84:fe:0e:eb:a2:a0:44:
                    d3:ef:f8:de:24:86:c4:80:a9:50:42:74:e6:d8:bc:
                    60:59:bf:45:58:9d:02:20:70:f6:9b:0b:48:04:58:
                    9b:72:a8:01:60:3f:05:ca:13:f6:8d:8b:e9:90:9c:
                    50:78:df:54:d9:f3:0d:5e:50:d0:ac:0b:1b:18:98:
                    af:6a:ca:dd:00:af:5a:e0:0a:60:1e:19:1f:3f:6b:
                    26:ef:d3:95:d3:c2:24:5e:ce:db:1e:28:23:8b:56:
                    29:06:ac:14:99:76:4f:d3:4d:d3:f9:2e:7f:8a:72:
                    10:a2:6f:af:92:b3:fa:8f:b6:8f:e5:38:0d:24:13:
                    eb:15:c9:11:dc:d7:23:7d:a2:6d:67:4e:7b:c5:fc:
                    15:d9:f4:67:bf:b5:d1:6e:7c:32:c9:f4:c3:ce:f2:
                    bb:b0:f7:24:9b:d4:34:21:8f:7b:c8:1a:5c:d6:84:
                    6c:e3:b1:e7:48:47:93:88:fd:36:38:90:85:5a:f8:
                    1b:de:4a:29:f0:7c:61:f9:9e:c1:ce:30:9a:cc:92:
                    15:b3:9e:47:a3:32:81:2e:33:68:5a:d8:27:c7:6a:
                    33:0a:a3:9a:2d:7e:39:8b:62:b4:74:78:51:65:55:
                    97:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:38:04:9F:DD:E6:99:26:79:42:82:AC:DC:23:65:4D:4F:C1:3F
            X509v3 Authority Key Identifier:
                keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:ab:5f:08:ef:d4:33:09:69:90:32:86:a3:b1:c7:a8:1f:
         23:ac:62:cc:79:bf:4a:be:5a:68:88:77:fe:df:e3:28:9a:68:
         f5:9c:7b:af:27:30:40:15:05:e4:2a:4a:d5:ba:60:c4:85:fe:
         59:ef:2a:c8:fe:be:f3:5c:bf:ba:4b:5c:e7:7b:d6:0c:ec:bf:
         68:33:89:13:aa:db:a5:30:be:62:65:02:9e:5e:5a:84:6a:f8:
         60:9c:56:a8:eb:c7:21:49:09:b4:8d:e8:76:1a:7e:cb:af:d6:
         49:82:c8:ca:ec:8c:93:fb:79:37:c2:ab:95:ce:84:c9:4a:fd:
         2f:aa:ce:5c:46:69:eb:9b:64:21:4a:11:3b:d6:7f:6b:d3:b3:
         4f:b0:78:04:cd:98:22:79:f5:3d:8a:66:87:47:34:b1:b2:18:
         81:af:2b:f0:9a:2b:f2:8d:b4:bf:0e:5d:5a:ba:47:96:53:89:
         9e:5f:3c:e5:3d:df:7e:f3:b3:da:da:7b:0e:ee:f2:fc:87:00:
         41:f4:16:46:5b:c2:29:b3:cd:66:a4:83:b1:8e:c3:b2:68:78:
         ef:7e:cb:e3:9b:03:46:11:82:09:b4:18:8f:8c:97:23:87:d2:
         7a:9b:cc:6d:49:a1:35:f9:c7:16:22:61:31:b4:e2:9b:ec:b4:
         1c:d3:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:50 2025 by rpki-client