Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          4ebl5RYF4sbJj6dypLt2Vof1ozp1ODEhTiMDWXkAcOc=
Subject key identifier:   59:67:01:8F:7D:0D:07:D3:3D:DB:CC:94:3F:48:32:E5:03:9E:39:BE
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       0198A04DE2619CFC4DF5B0156B8A2829BAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0C1D
Signing time:             Tue 12 Aug 2025 22:01:55 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:55 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:55 +0000
Files and hashes:         1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: xbowzKylp1fXHgVA+dUW1y0WlH/rFK2vbbI9f/o1IUk=)
                          2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:e2:61:9c:fc:4d:f5:b0:15:6b:8a:28:29:ba:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Aug 12 22:01:55 2025 GMT
            Not After : Aug 13 22:01:55 2025 GMT
        Subject: CN=5967018f7d0d07d33ddbcc943f4832e5039e39be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:34:c8:7d:9d:bb:65:0d:75:7f:32:4e:67:
                    61:90:a4:61:8f:64:b1:51:3e:2e:b5:cd:a3:b9:40:
                    82:55:24:45:8c:7d:80:92:a5:53:7f:fb:72:85:d4:
                    cf:2a:97:42:41:4a:cf:cb:60:7e:a7:57:87:65:8d:
                    bb:b6:13:08:29:d4:6e:94:d3:5b:1d:5b:69:aa:de:
                    d2:31:b4:77:e4:3f:5b:bb:b3:2d:03:50:70:bd:8d:
                    8b:14:44:75:f6:de:67:d8:a1:0d:42:e2:e0:cf:18:
                    2e:d5:1f:97:83:07:42:9c:a5:d2:c7:ef:3b:90:c4:
                    1d:96:d4:86:cd:9e:a8:43:ff:bc:7e:e2:f4:30:9e:
                    f0:8e:8e:3d:51:92:b3:73:24:07:e4:99:d5:e3:e3:
                    fb:a7:8d:e9:64:76:46:6d:cb:c4:15:f9:3a:18:a0:
                    2f:07:7b:a2:bb:5b:ce:23:00:c9:55:9a:ab:c9:9f:
                    3a:9e:fc:42:c8:f7:93:4c:70:9b:40:15:90:4e:79:
                    4a:aa:b5:6c:08:1d:56:a2:b2:d1:d9:81:18:dd:3b:
                    5e:7b:c0:8c:b1:de:03:73:36:8b:cd:f7:fd:13:ab:
                    f8:d2:63:0b:f6:14:d6:fa:10:78:a6:db:6f:09:31:
                    c3:77:32:57:a7:a9:bd:d4:89:8b:17:95:5d:0b:30:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:67:01:8F:7D:0D:07:D3:3D:DB:CC:94:3F:48:32:E5:03:9E:39:BE
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:52:e9:0b:42:bd:c8:d6:72:04:9f:28:a9:8b:08:88:3c:f9:
         b3:cf:d0:a1:3d:77:af:8f:53:b2:21:3a:84:5f:af:35:60:1c:
         9b:ca:c1:99:67:a5:f4:6f:7c:73:00:40:76:37:50:a2:86:b1:
         6b:ce:99:90:a3:b1:16:b0:ad:f8:e8:bd:04:b9:35:a0:d1:58:
         e3:72:61:52:32:1c:68:05:ed:6c:d9:74:af:b8:dd:3f:87:f8:
         b8:89:23:a7:56:ad:0b:67:2f:ff:6e:3a:3d:81:4e:f5:63:2a:
         57:f9:dc:23:54:0e:c3:b4:c1:9f:e7:8c:cb:39:bc:0c:fe:aa:
         f6:d7:f7:b3:06:63:bc:f2:01:a7:09:99:a8:a2:9d:f6:de:15:
         2c:c1:46:f3:40:50:08:67:c2:6e:b0:9c:96:59:f7:6b:4a:04:
         e9:71:ed:7c:de:e8:8e:3f:8f:a5:b8:2d:26:6c:8f:81:19:48:
         fd:5f:2a:88:9d:0b:51:7b:e8:01:80:82:1c:c3:e1:bc:aa:e1:
         41:78:f5:a4:c2:6b:7a:8b:40:9e:78:1d:94:c5:95:c2:d5:d8:
         ad:60:40:13:61:35:5d:93:97:c5:f9:18:3e:44:ad:3f:17:33:
         a1:b6:17:54:ec:ee:7a:be:54:32:9e:ec:07:40:28:53:cc:5c:
         c1:27:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:47 2025 by rpki-client