Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File:                     CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier:          umv/1TCRBbvUfSfjZtcI+3yGkZEiqPq+fTJFVbFnHtA=
Subject key identifier:   BE:BE:0C:23:39:9C:02:6D:62:3A:7D:7C:27:90:65:C9:9E:A5:5C:25
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer:       /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial:       01987E2E76E13D08FE8CEAB844A35970E221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number:          0DB6
Signing time:             Wed 06 Aug 2025 07:00:30 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:30 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:30 +0000
Files and hashes:         1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: hjeBH4d4sCf0GELPJig9NR1rIVzGTqrMcRtC2QF8/+M=)
                          2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:76:e1:3d:08:fe:8c:ea:b8:44:a3:59:70:e2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
        Validity
            Not Before: Aug  6 07:00:30 2025 GMT
            Not After : Aug  7 07:00:30 2025 GMT
        Subject: CN=bebe0c23399c026d623a7d7c279065c99ea55c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:46:2b:a0:9b:a1:f9:1b:73:70:41:48:08:
                    fc:f0:57:e3:7f:74:a9:fa:25:24:7b:0c:14:01:56:
                    9a:3f:28:d7:c0:4f:db:af:2e:b0:81:6b:e9:3b:af:
                    b1:b7:83:3d:55:b9:eb:e3:81:4d:8f:53:3d:39:b6:
                    c9:70:ce:90:17:3f:4f:c7:75:05:46:f7:cd:b9:db:
                    65:ee:d1:96:95:ec:af:1e:28:7e:69:ff:c9:ea:cf:
                    5e:36:73:e3:f5:11:ff:52:ac:10:f7:db:a4:a5:5e:
                    82:1e:c0:21:eb:3d:d1:39:72:a6:c9:4a:4e:92:5d:
                    4b:64:0f:03:6f:5b:b1:2e:56:28:43:83:35:6e:e0:
                    f7:a9:ff:65:44:6d:0d:b1:ee:5c:ac:7f:03:de:2d:
                    18:cb:41:e8:51:74:c2:ec:52:cc:91:51:19:65:ed:
                    25:da:ca:54:6d:55:f4:17:7a:d9:56:a7:a2:71:72:
                    ba:59:26:af:1e:01:e7:cd:76:1b:45:47:82:40:ec:
                    fd:d5:6e:25:f7:99:48:37:4f:6e:ae:f4:32:47:9b:
                    92:fe:ff:6d:e9:81:9b:ff:c7:67:60:e4:77:be:eb:
                    f6:1d:f2:02:87:9a:68:99:5c:3b:27:83:4e:06:fe:
                    3e:16:ba:a3:ea:30:50:09:e2:cc:26:3f:70:e7:1a:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:0C:23:39:9C:02:6D:62:3A:7D:7C:27:90:65:C9:9E:A5:5C:25
            X509v3 Authority Key Identifier:
                keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:16:8c:c6:88:a0:34:5a:fa:8f:44:bc:65:b5:79:39:bc:30:
         7a:34:7c:4d:c7:7a:13:93:8c:92:fd:c8:45:64:51:6e:81:81:
         3d:45:ef:6a:b7:e9:39:54:6c:d2:18:3c:5d:73:16:d8:7e:5d:
         7f:48:41:8b:77:3d:66:5f:9c:3c:9b:be:b5:ce:36:7c:8e:5a:
         ef:b0:f2:4f:ff:28:f5:65:41:60:7b:17:5f:7f:24:58:ef:5d:
         dd:3c:fb:a5:bb:b1:33:92:9b:d3:12:39:92:27:39:5e:3e:21:
         21:ae:20:13:0c:e3:3b:ad:5d:3e:a2:6b:4f:4d:9b:ff:2d:1f:
         15:9f:25:44:8f:84:17:34:c3:5b:24:07:a2:cb:3e:90:67:8b:
         69:f6:9b:7f:5f:7e:54:bb:97:39:ba:22:2b:1b:0e:cb:96:24:
         e8:b7:dc:2b:f9:6e:ce:40:c2:2d:35:c4:54:a7:02:af:f3:54:
         1e:8f:e7:5f:1a:3f:5f:5b:9e:94:f8:a2:e6:80:8c:dd:29:1d:
         66:a5:11:30:2e:ff:46:68:90:2d:9f:83:10:38:0c:d3:9e:79:
         91:4f:38:8c:ba:57:d5:4c:47:17:38:5c:52:8a:e1:f1:25:03:
         08:b6:13:cb:a7:c8:73:50:70:b1:56:d9:13:4c:16:68:f7:65:
         4a:49:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:40 2025 by rpki-client