Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File:                     AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier:          z/iOU/ieCGkIgvhxTIdM9XqGolEkQRSrQ8xtaRLIJVU=
Subject key identifier:   F5:3B:9E:38:E3:30:31:84:BF:0D:8F:83:80:C1:01:C4:96:A6:F3:58
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer:       /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial:       01988053F979170CFBFE5C1321E0AC4A5A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number:          0FB3
Signing time:             Wed 06 Aug 2025 17:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:43 +0000
Files and hashes:         1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: 696xpaP5TwNkX7U+KAMgkVFMameiP/6nnP2/p+zWYq0=)
                          2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:53:f9:79:17:0c:fb:fe:5c:13:21:e0:ac:4a:5a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
        Validity
            Not Before: Aug  6 17:00:43 2025 GMT
            Not After : Aug  7 17:00:43 2025 GMT
        Subject: CN=f53b9e38e3303184bf0d8f8380c101c496a6f358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f5:93:a6:b4:6f:63:62:c4:d5:b5:08:97:1d:
                    e8:41:31:f5:12:6e:5a:71:84:27:ff:46:af:fb:f1:
                    1c:e1:6a:57:fa:28:fe:62:1d:dd:9f:36:44:dc:25:
                    dd:be:68:a2:b6:3b:5e:62:8e:60:41:65:2e:72:55:
                    14:06:30:4c:11:b5:3a:15:b8:ff:5d:76:f0:9b:38:
                    34:31:0c:08:7b:08:38:19:19:ea:5a:03:b1:de:d8:
                    e8:75:4d:ca:ce:84:8b:12:68:8b:8f:30:0b:7f:61:
                    ab:fa:b3:f7:34:04:fb:e9:8b:3b:fb:99:eb:cb:db:
                    b1:dc:b6:32:59:13:43:56:56:fe:99:1d:6d:8a:c7:
                    e6:49:cc:72:1e:c2:b4:74:69:88:14:83:81:c7:73:
                    84:11:02:9d:c0:8d:aa:a9:f1:9f:9a:47:4d:73:56:
                    39:25:a3:24:84:bd:fa:44:f9:e5:7c:02:63:06:14:
                    11:8b:29:13:52:39:94:30:8a:22:6e:8d:68:5d:fb:
                    b8:4f:09:72:d6:cc:41:08:1d:18:96:a1:5f:6d:59:
                    c0:d9:58:ad:8d:63:74:53:a5:52:e6:97:50:4b:10:
                    34:e1:9f:14:a7:38:0f:99:8d:4e:26:6f:9b:0c:47:
                    65:0d:5d:a0:bf:d7:c1:6d:33:56:ea:bb:ec:48:26:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:9E:38:E3:30:31:84:BF:0D:8F:83:80:C1:01:C4:96:A6:F3:58
            X509v3 Authority Key Identifier:
                keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:6b:74:bd:cc:d9:b0:20:58:1e:7b:c7:ea:c6:1b:a7:13:
         0f:f3:da:9a:0b:4b:bc:da:5e:84:60:82:a8:aa:3f:84:a0:25:
         d0:39:16:43:5e:dc:9a:ed:a5:e1:97:c7:30:92:ab:8d:b3:87:
         ea:ba:d1:97:dd:32:2f:09:57:40:d6:b7:2d:ee:1c:73:02:fc:
         cb:7f:6a:4a:b1:fb:bf:8a:89:03:71:11:2e:12:d6:18:2d:55:
         a2:2f:33:d7:ee:c3:61:43:1f:24:ec:ad:9f:a2:b9:13:2c:1b:
         05:cc:5b:72:6b:f8:d2:8b:25:e5:92:79:a5:8a:28:50:98:98:
         94:e8:65:28:9b:3d:ed:58:28:84:34:92:30:8d:c7:14:02:10:
         c3:ec:24:d3:3c:df:f6:17:14:ff:56:2f:d3:a9:d3:e4:c6:66:
         95:73:d2:b2:f4:df:aa:d8:54:01:5d:d6:9b:b8:9e:38:44:93:
         86:94:bb:7e:c5:7a:dd:dd:a9:bc:dd:bf:f4:22:6f:83:34:fc:
         f3:b2:34:36:c6:bd:56:9f:42:65:a1:98:7c:d2:6f:a5:ff:db:
         ad:01:00:a6:1a:52:14:54:bc:06:d7:db:37:39:47:00:9a:e5:
         fc:1c:0b:94:b3:11:a3:83:47:35:ee:43:0f:58:4a:e6:f0:24:
         e6:4b:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:16 2025 by rpki-client