Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File:                     aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier:          /vMkh6yX7q7u53McN3j69r0ziHRKlYlPhHutCsm0dKk=
Subject key identifier:   55:56:DF:D5:94:5E:EA:D8:0E:2F:13:B9:26:42:60:A8:58:E2:A8:61
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer:       /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial:       01988B45B57BAC2271D273AB4FDB594C2DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number:          0108
Signing time:             Fri 08 Aug 2025 20:00:58 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:58 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:58 +0000
Files and hashes:         1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: IX1nDEUsyVBSH99fu1NlWDOzyqY+UDSvq7Zi7A+CKWs=)
                          2: ctE-xjtRaK2N_xv7jPgdr16mAqk.roa (hash: 6dqptnwwlw4mSqTSZoD2O9lUv3DCB5Cf6H1piQtg/m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:b5:7b:ac:22:71:d2:73:ab:4f:db:59:4c:2d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
        Validity
            Not Before: Aug  8 20:00:58 2025 GMT
            Not After : Aug  9 20:00:58 2025 GMT
        Subject: CN=5556dfd5945eead80e2f13b9264260a858e2a861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:dd:35:80:60:79:fd:4f:28:7e:bb:19:11:
                    41:b4:e8:62:19:e7:02:94:79:7a:f5:07:91:5b:85:
                    fb:57:44:2e:3b:60:74:f2:b6:24:c5:db:af:91:a3:
                    92:5d:26:28:da:96:ae:33:34:3b:14:f9:9a:df:9b:
                    04:de:e2:e4:83:12:d1:4c:c7:0b:c2:05:ed:31:f3:
                    84:5c:7d:9d:4a:bd:38:f5:6a:7e:6b:89:45:e6:86:
                    64:a9:e7:87:eb:06:e5:2b:91:65:67:98:b8:fd:5a:
                    16:a1:e0:3f:1e:71:79:9e:66:09:fb:14:3e:47:aa:
                    f1:db:05:53:39:85:cf:75:c0:9e:28:93:85:ab:2a:
                    90:f3:b0:73:83:08:43:0e:3c:f2:2f:63:9c:20:e3:
                    49:71:4e:b1:4f:c5:37:7b:b5:f0:e7:e0:c5:bc:19:
                    79:1d:60:aa:a0:d2:8d:ea:7e:c8:61:2d:a2:24:de:
                    e9:38:c8:eb:b9:1f:e0:f8:47:61:8e:d0:97:9e:d4:
                    b7:db:6b:e1:4b:08:1a:ce:8f:a3:fe:73:26:16:65:
                    9f:de:3a:d6:59:23:64:a7:3f:64:e2:8f:a6:07:9f:
                    3b:ec:f8:88:f7:5e:5d:9d:b0:3f:58:54:ae:d7:32:
                    30:62:4d:f3:ee:23:7c:cb:6f:df:f2:28:29:2e:bf:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:56:DF:D5:94:5E:EA:D8:0E:2F:13:B9:26:42:60:A8:58:E2:A8:61
            X509v3 Authority Key Identifier:
                keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:8c:e1:16:41:cb:61:6d:b1:83:04:2d:33:a1:1c:55:23:
         f0:4f:27:63:e5:33:bc:d2:1b:47:19:0a:df:62:be:d0:22:c7:
         de:ce:b7:55:8b:4a:54:40:3b:93:af:78:2f:a5:8a:cf:a7:73:
         cb:3f:64:61:4d:5d:2f:f1:f6:3c:d6:78:ec:39:0a:82:03:9b:
         41:ca:ce:8a:46:9a:64:3b:58:7e:d0:23:b2:47:29:cc:d6:49:
         b4:31:c5:5c:63:ed:a1:e1:9b:23:d7:25:30:ff:a1:3a:1e:38:
         4d:40:ac:37:43:bc:59:a4:bc:28:67:66:5b:f2:8f:7d:fb:5f:
         9f:f7:48:e6:4a:1a:23:38:e7:cf:86:70:e8:93:c6:d2:b7:d9:
         87:51:b8:98:d6:5d:a9:42:ca:4f:d3:92:39:f1:f7:f7:7d:11:
         c6:35:4f:44:c7:57:3d:6c:bc:67:31:cd:08:7f:cb:5f:67:e7:
         fc:f9:21:6d:e4:44:19:e9:76:d2:4b:8c:f2:27:0e:c5:59:8b:
         0a:23:5e:8d:a0:be:21:6d:75:1a:94:f9:c7:8a:21:dd:72:b8:
         31:34:26:52:be:12:e3:40:63:76:5d:9d:f9:8d:3f:95:4a:5b:
         26:2d:8b:d5:09:f7:38:97:0f:a6:f5:3e:f5:9c:a1:0e:a8:fd:
         bf:56:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:47 2025 by rpki-client