Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File:                     ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier:          X9l98Fnnnnc33jOxYUqrOIF7Ae/qOE+SxMY/PKZla6E=
Subject key identifier:   0D:50:5A:10:DF:F3:1F:86:E3:69:9A:2F:82:58:22:50:C2:30:62:65
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer:       /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial:       019880540345D0D4D842F3CBEED015D16C1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number:          012B
Signing time:             Wed 06 Aug 2025 17:00:46 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:46 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:46 +0000
Files and hashes:         1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
                          2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: +7FGiSbcVOTZKe5szBdjngBGtIwhwo1TbztvP1OwtLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:03:45:d0:d4:d8:42:f3:cb:ee:d0:15:d1:6c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
        Validity
            Not Before: Aug  6 17:00:46 2025 GMT
            Not After : Aug  7 17:00:46 2025 GMT
        Subject: CN=0d505a10dff31f86e3699a2f82582250c2306265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:f0:14:43:c4:cc:1d:22:ca:48:aa:39:c0:
                    ee:4f:fc:ea:7b:b0:43:d6:82:d7:63:4d:8e:d3:1b:
                    5b:60:07:04:46:e6:4b:8c:8e:b3:99:21:74:9a:e7:
                    51:82:b9:36:d8:49:45:67:11:a9:f2:69:69:01:f1:
                    6e:49:a3:59:2d:9f:a8:27:74:6b:f8:61:00:19:0f:
                    25:bf:02:dc:bc:6d:26:26:75:02:bd:d5:79:ca:aa:
                    ce:61:4f:48:2f:03:61:88:8d:ec:6a:6e:eb:5d:08:
                    3f:af:43:83:39:61:02:3c:55:f4:df:63:fb:ac:c3:
                    04:f7:c1:38:ff:c0:97:89:6d:28:0c:10:39:b6:7b:
                    28:c3:9e:9a:c7:22:47:02:e4:77:3f:81:b8:e2:0d:
                    d2:18:92:db:17:76:dc:d0:8a:87:1a:02:e0:c8:ba:
                    ae:a3:a3:af:3f:88:7c:e0:aa:1d:a6:46:77:97:6a:
                    87:06:d1:e6:e6:66:f5:77:98:1e:cf:f0:4d:54:e8:
                    59:84:e9:01:86:3d:61:70:8c:62:9f:b6:ac:c8:3c:
                    ef:bf:ee:99:3c:98:d0:0a:60:80:b3:7b:7f:2d:dd:
                    7b:1c:8c:5a:2e:1f:ad:00:1e:a8:c5:1b:79:c3:8b:
                    78:97:e4:21:4d:5f:7f:6e:b6:c8:83:19:8a:88:c2:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:50:5A:10:DF:F3:1F:86:E3:69:9A:2F:82:58:22:50:C2:30:62:65
            X509v3 Authority Key Identifier:
                keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b9:87:d9:8d:d9:b0:1a:31:74:da:15:d3:53:60:69:21:26:
         f3:30:20:6b:17:ee:20:8d:8f:fd:5b:1d:fc:b2:a0:66:ff:14:
         f8:2e:7f:61:f3:1c:04:d0:a6:7b:de:8a:6b:63:86:59:3a:50:
         22:82:4e:5b:88:85:c7:61:61:a3:ea:b7:27:9e:74:40:7d:f6:
         1f:04:c6:0a:cb:d8:76:03:8d:0c:a7:4f:ce:e6:a7:ac:d9:f6:
         67:bd:70:3b:51:31:11:33:6e:ce:ed:70:b8:81:4e:34:37:70:
         19:d8:90:a3:4e:eb:17:f8:79:b8:cd:0b:18:6f:b6:8f:9f:0f:
         39:8c:5a:47:7f:f0:93:cd:48:d8:a6:b0:f1:3e:d6:62:d4:49:
         47:d2:4b:4a:90:50:b9:6a:90:1f:33:9f:2b:d3:d8:1e:c1:dd:
         37:a9:97:b7:d7:41:2a:fe:45:b4:b4:02:39:2d:ec:16:7e:c3:
         fc:cd:5b:4d:04:0e:2a:a2:cf:c6:84:44:08:bc:cf:92:83:cc:
         0e:ad:cc:fe:2e:42:a2:36:28:97:6d:57:5b:86:de:5f:64:70:
         dc:27:82:06:38:aa:c2:9b:61:e8:36:1b:ad:80:e2:ea:f2:3c:
         ee:33:b1:39:04:31:b6:d6:ac:ae:91:19:1c:9e:a4:a0:57:0a:
         bf:fa:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:58 2025 by rpki-client