Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
File:                     u03_X665REU6fISwl-V8ccBPEfw.mft (raw, json)
Hash identifier:          rYg6nxz1jvZS8qnzCYM8mXZHh+5rjjKCINzEj8CWikI=
Subject key identifier:   69:C7:AE:F7:62:76:FB:88:90:E0:2E:A6:4C:62:67:E9:2B:3A:73:86
Authority key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Certificate issuer:       /CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Certificate serial:       0198469B0FE8EBBA4A491EC7D3A6CEFC6C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
Manifest number:          093E
Signing time:             Sat 26 Jul 2025 12:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:23 +0000
Files and hashes:         1: bmGSZIhDZ7omF5TcuRC3GMr8vZo.roa (hash: aa2GJMxBcb4lhY3ULNNCLoGJ/YB3WqwaeozmQDkZLmk=)
                          2: u03_X665REU6fISwl-V8ccBPEfw.crl (hash: PFTnO5ZboumLnurs2Bpgmce3wdukJ1Unuf5gCUsOoXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:0f:e8:eb:ba:4a:49:1e:c7:d3:a6:ce:fc:6c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
        Validity
            Not Before: Jul 26 12:00:23 2025 GMT
            Not After : Jul 27 12:00:23 2025 GMT
        Subject: CN=69c7aef76276fb8890e02ea64c6267e92b3a7386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:3b:e8:5c:b2:fd:f8:2c:b8:b2:85:0b:ca:
                    18:ad:8e:f7:5a:d7:af:4f:da:0d:17:36:26:a7:c7:
                    9e:28:00:19:f5:6b:71:13:05:9d:37:00:0a:d0:6f:
                    2e:52:24:7b:a3:02:d5:24:2a:ad:d5:ac:fc:26:1a:
                    4e:7c:e8:57:7a:81:8a:b8:de:00:d8:a2:47:4b:2b:
                    75:ae:f0:73:68:c7:76:8e:88:00:74:9a:94:91:62:
                    cb:d9:16:21:6f:f9:18:f3:32:41:aa:4c:42:38:2d:
                    ec:a4:16:5f:53:a2:2c:f0:d7:30:96:c4:b0:36:4f:
                    9e:8a:4d:6d:1c:53:cb:c9:e0:79:71:0d:4e:de:12:
                    8e:4a:52:1f:d2:17:d4:3b:99:6c:e8:4c:27:35:80:
                    70:ec:85:f2:72:47:e2:4a:b8:8a:4b:32:f9:19:2c:
                    d8:b3:f3:7d:f7:69:df:ee:29:bf:f4:2d:a1:6b:57:
                    07:84:f8:96:a6:52:d5:ff:b1:f1:f0:20:f9:d2:c1:
                    ae:4b:af:08:fc:32:cc:34:3c:53:54:d0:e0:09:25:
                    55:32:63:75:d6:6d:23:dc:d9:74:10:99:33:0b:23:
                    78:91:7d:43:f1:4c:54:8b:50:55:57:ac:86:05:87:
                    f4:68:a7:3b:c1:59:8c:4e:b1:e0:19:50:17:2f:db:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:AE:F7:62:76:FB:88:90:E0:2E:A6:4C:62:67:E9:2B:3A:73:86
            X509v3 Authority Key Identifier:
                keyid:BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:6f:b8:26:92:98:f1:73:1b:c3:5d:6d:6c:fa:71:8d:a2:
         6e:78:f9:27:3c:97:90:9f:02:ba:d2:7f:1b:01:eb:a7:40:37:
         8e:5b:09:59:0e:9a:bc:2d:d8:21:ef:a1:f4:e4:34:6f:d4:54:
         1f:07:ce:0c:fb:0a:8c:fd:0e:bb:db:61:a0:2e:d7:48:85:49:
         23:a1:42:18:a1:bf:fb:f5:f3:e5:f2:7f:d5:94:9d:1a:19:55:
         b2:99:8d:e8:66:7e:10:64:88:86:e9:bf:9d:75:57:db:e3:31:
         93:b2:50:fa:4c:0e:98:7c:1a:76:ea:c4:a4:45:e4:3d:39:6c:
         3e:af:3e:21:bc:47:5e:05:15:4e:7a:2f:03:1c:fd:7b:9b:4a:
         d7:31:85:57:94:a5:82:9e:be:a4:f1:96:67:0c:d2:0e:5b:20:
         be:38:b9:68:47:d8:b9:12:28:ce:c9:03:7b:10:64:a9:37:52:
         ec:bf:17:14:a1:b8:66:ab:47:bc:a1:b4:73:60:ce:60:4f:a9:
         1b:25:3d:ed:c6:48:b9:2c:c1:60:95:c9:98:18:76:03:f6:92:
         e8:a3:3a:d2:88:f3:49:a3:80:bf:40:b8:3f:d4:37:fa:fd:ea:
         cd:66:e0:7e:5b:97:0e:48:11:bf:0d:8f:87:b8:52:b7:0e:c7:
         94:26:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:12:47 2025 by rpki-client