Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          1TNVWQ+xTm/XbeDPiL1bvazoKDqyVmd7Z14x6xe1ETE=
Subject key identifier:   B5:FE:1B:F1:CA:C1:E6:6C:5E:55:70:7F:FF:09:9A:63:0A:E6:27:AA
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       0198462D4E205D52FB912F8DE1AFC3CF1886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          0DCA
Signing time:             Sat 26 Jul 2025 10:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:30 +0000
Files and hashes:         1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
                          2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: zdiZORpIU8WIvelG7z8eYYdceUzsFZLpCl+rQ5wcyZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:4e:20:5d:52:fb:91:2f:8d:e1:af:c3:cf:18:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: Jul 26 10:00:30 2025 GMT
            Not After : Jul 27 10:00:30 2025 GMT
        Subject: CN=b5fe1bf1cac1e66c5e55707fff099a630ae627aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:63:dc:52:8f:2b:93:0a:47:b9:54:7c:7d:
                    04:f2:e5:47:79:e6:61:17:51:6e:01:69:8d:6d:ca:
                    ef:20:ef:1c:a6:1e:20:42:63:cb:0c:01:66:3c:ef:
                    72:1f:90:54:b9:3e:22:fc:7b:9e:9d:d3:6d:e0:10:
                    8c:0f:87:49:ef:c2:18:ac:96:63:5f:11:5f:77:7c:
                    12:12:67:49:86:a6:36:7a:1a:f1:fa:e2:0a:30:da:
                    3d:81:63:34:e0:bf:ff:b8:bc:c7:79:77:25:f0:ec:
                    dc:65:5e:d5:a1:3c:45:4d:6b:7a:f5:59:62:be:10:
                    fb:f3:5e:20:92:65:c1:90:99:2c:cb:04:0a:cb:74:
                    08:96:e3:52:ff:72:57:56:11:33:d7:66:8e:e0:b0:
                    85:b8:28:3b:1a:37:eb:84:69:87:06:f4:9f:3f:24:
                    db:69:41:e9:31:43:fe:a8:8f:fe:a3:b0:38:1b:21:
                    d2:3f:ab:55:7a:3e:db:60:f4:6e:38:d9:e9:a9:30:
                    64:da:33:b8:17:60:61:e0:2d:90:a0:57:87:2c:23:
                    eb:2a:45:7e:cb:65:2c:e6:a6:26:68:13:80:2a:f0:
                    6c:02:ed:ae:14:af:8d:a4:7f:be:ee:cd:87:7a:3b:
                    f6:37:78:81:ea:81:d4:c8:48:4f:f8:43:4a:9a:aa:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FE:1B:F1:CA:C1:E6:6C:5E:55:70:7F:FF:09:9A:63:0A:E6:27:AA
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:23:cf:2f:70:4e:f4:75:b4:22:09:74:d7:c5:e6:4c:7a:29:
         e0:0f:bd:eb:9a:76:9d:25:88:7c:e8:74:36:09:6d:05:d3:91:
         da:ea:e0:71:7f:c4:b2:3b:6c:7a:00:38:77:1d:12:22:52:56:
         e7:d8:3e:a0:f7:8e:60:04:b5:51:db:9f:28:4b:9b:7d:18:9f:
         70:69:14:af:5e:1d:01:24:00:6b:02:9c:e3:52:f6:e8:df:4c:
         cc:e1:2d:d0:69:be:46:68:2e:72:d7:91:30:0f:1b:ea:1f:db:
         7d:5e:bf:41:5f:a2:13:f6:c6:3d:74:0d:46:4b:dd:de:45:74:
         d7:4b:ec:83:75:c8:f8:11:2a:5c:45:5a:4d:ec:bb:54:9f:57:
         2e:61:f3:de:41:e0:a5:d2:5d:1d:0a:26:c4:5f:2d:80:04:89:
         d9:14:28:df:a3:a3:94:6d:91:04:ab:a8:e3:61:23:01:67:31:
         b3:59:4a:19:5d:c4:0a:88:ad:e0:ea:2f:9f:1a:34:7a:8e:5d:
         d0:f0:d6:74:c7:d8:13:f2:7b:d8:a4:1e:b2:05:84:1f:e7:1d:
         c7:cc:4c:d1:2b:cd:e3:9b:54:78:72:4b:8e:df:ce:67:f5:c0:
         ac:fc:96:60:df:ab:b7:ee:fc:17:e2:db:c3:06:78:0b:57:21:
         6b:9b:a3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:46:33 2025 by rpki-client