Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          PggnFlPnjM3XdPPdfiWSju37Wl7dfvNzk+1vxxq/Qc8=
Subject key identifier:   BC:42:50:2E:D4:A4:F5:73:00:E5:7B:E2:71:4E:01:81:0D:F5:52:2C
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       01987E2EDF03332DE1AD22F910A58441695C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          060F
Signing time:             Wed 06 Aug 2025 07:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:57 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: cq233QwAgj2IKZlfJzl1Nzy36I+vPY9mXLvLKAdptVA=)
                          2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:df:03:33:2d:e1:ad:22:f9:10:a5:84:41:69:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Aug  6 07:00:57 2025 GMT
            Not After : Aug  7 07:00:57 2025 GMT
        Subject: CN=bc42502ed4a4f57300e57be2714e01810df5522c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:9c:ef:c5:4e:5e:8f:81:df:43:fd:55:f1:
                    58:d4:f7:3d:df:c6:2a:9a:20:bc:c0:48:74:33:00:
                    f3:9e:59:9a:57:66:8e:f4:c0:3b:f9:d7:0c:a7:1a:
                    02:b0:f5:af:f0:45:03:cc:0a:38:02:7a:b6:1b:97:
                    c2:f8:b6:95:ef:fa:dc:3f:7e:d1:a4:e5:3a:0b:31:
                    a5:06:d7:c2:76:0c:a6:f6:6d:25:2c:1b:ae:c1:84:
                    84:73:af:29:c3:be:82:59:6a:75:16:01:c5:7b:24:
                    21:30:ce:11:5a:bb:33:b8:77:33:75:1d:cd:5d:fb:
                    75:53:dd:eb:64:f6:ff:67:a0:99:a7:bc:9f:08:36:
                    32:93:ee:33:a8:58:6c:c5:60:68:97:18:09:e1:4b:
                    79:e5:aa:ef:78:8f:18:99:b9:37:ff:b6:12:e3:33:
                    17:ae:e0:e3:6b:9c:10:63:d4:b0:81:30:ed:9c:12:
                    d1:3c:af:74:ec:ed:71:f5:32:da:9d:17:04:4f:38:
                    fb:7b:e9:dd:1a:6e:18:77:8f:ad:4b:31:82:42:7f:
                    73:77:6f:1a:d2:a2:4c:20:ed:e8:33:b5:56:e4:83:
                    4d:52:07:6e:de:cc:22:5e:6a:59:24:40:b7:e6:d9:
                    c3:65:f5:4d:7c:ae:79:2d:59:fd:fa:61:86:29:fe:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:42:50:2E:D4:A4:F5:73:00:E5:7B:E2:71:4E:01:81:0D:F5:52:2C
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:8d:e9:5d:5d:be:a2:6b:aa:af:0f:aa:fa:26:c3:04:6f:
         67:16:2a:a7:c2:d8:cb:47:6d:05:3c:56:73:85:97:24:cc:3a:
         f9:c6:ec:94:42:26:ce:ab:1e:97:b9:f6:66:79:34:66:30:b6:
         21:a5:cb:32:bb:87:e8:51:1b:f6:ca:3d:75:d1:21:ba:3e:88:
         52:95:c7:33:27:dd:d5:88:16:96:5c:d7:54:93:fe:05:f6:de:
         aa:03:94:8c:ea:97:e1:f8:f6:0f:b9:a0:a3:b5:8c:de:08:fe:
         54:d4:d6:4c:fe:d0:b1:c1:5f:28:51:2d:3e:57:98:7d:9a:d1:
         0a:bb:00:49:8a:50:c9:e8:51:5a:ca:b1:7b:37:4b:c4:0e:cc:
         a2:ff:1c:14:41:34:e2:95:84:36:3d:46:0a:23:85:3e:6c:8d:
         5e:b8:50:b1:13:28:32:e4:67:15:3b:9a:f9:7e:fb:91:1f:b3:
         1e:27:d1:50:ad:e2:f7:b3:71:99:66:ab:eb:41:27:82:0c:43:
         92:39:70:8a:cc:c3:bb:83:65:d5:72:cd:41:6a:bd:41:96:d1:
         98:c8:e1:b8:c3:68:d4:2b:bf:fc:1e:f3:b2:4c:4d:4e:22:e7:
         b2:c8:26:f8:03:18:7d:8e:1e:54:98:da:73:bb:72:38:94:07:
         a7:f1:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:24 2025 by rpki-client