Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          oicRTJIKtfxqv3yTY94rnZVg8uSUZQXszWynMgf0EoY=
Subject key identifier:   27:51:B4:6F:E4:A6:CF:4C:F7:A1:CB:91:88:29:FA:14:57:09:FF:F9
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       0199228C452000B83160E509BD3347AD584E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          0B23
Signing time:             Sun 07 Sep 2025 05:00:41 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:41 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:41 +0000
Files and hashes:         1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: ygWD5yJ8i/T+vpn3pykLRptXE5lP3J0gpREJ2MWzmzI=)
                          2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:45:20:00:b8:31:60:e5:09:bd:33:47:ad:58:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: Sep  7 05:00:41 2025 GMT
            Not After : Sep  8 05:00:41 2025 GMT
        Subject: CN=2751b46fe4a6cf4cf7a1cb918829fa145709fff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:b5:f3:27:e8:c7:fa:5a:b6:22:a3:0f:41:
                    7c:e5:43:8a:e4:5c:b7:1c:f5:5f:b6:de:e6:95:bd:
                    94:d3:4b:95:1f:c2:42:0f:fb:9f:96:5c:7e:99:31:
                    bf:4a:c7:e8:9c:d1:75:63:5e:c6:b8:4b:2e:40:7d:
                    ff:3b:2a:1f:22:a2:46:75:d2:99:68:e0:1e:ab:30:
                    81:a1:73:1b:42:35:27:ee:eb:1e:33:3e:f5:d9:a6:
                    eb:2d:b9:ef:5c:6a:40:93:77:9d:76:a9:87:94:c2:
                    d8:8d:f4:3d:a9:be:68:32:c9:da:cb:dc:32:4c:c7:
                    78:f8:80:35:7c:69:7a:25:52:f7:23:ff:4a:a4:5d:
                    a1:c0:b9:7f:09:b8:cb:64:43:4b:8b:57:01:08:9e:
                    a4:21:12:87:ea:d4:04:99:d7:2c:49:9d:9d:ff:e8:
                    cc:d3:1b:cc:f1:50:d8:7b:b8:26:95:a1:8f:ab:a8:
                    26:7c:5a:cc:24:60:ba:26:2e:aa:e2:01:bc:40:1e:
                    87:07:23:5a:ba:03:f9:20:be:16:6a:fd:ab:6a:f1:
                    7b:ef:96:05:c5:1d:e1:62:ed:c2:c7:83:51:f5:87:
                    a5:1b:de:63:f2:f5:6f:8b:9d:49:41:12:66:56:f7:
                    77:62:8e:2c:e6:8c:d0:70:e3:5f:07:3c:1d:99:6f:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:51:B4:6F:E4:A6:CF:4C:F7:A1:CB:91:88:29:FA:14:57:09:FF:F9
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:4c:30:9f:56:e3:05:07:e8:79:a2:95:dd:d3:99:9e:71:
         46:5f:de:4b:ac:c9:9c:b0:83:af:1d:1b:15:9a:e6:9d:e0:34:
         b3:35:97:76:2e:c0:f7:9b:6e:ca:76:a3:b7:2c:2b:0e:2c:61:
         e3:cc:d9:06:fe:3c:b7:bb:fe:5b:ad:d5:04:1f:82:16:59:07:
         6f:25:45:55:80:dd:43:65:e9:56:17:c6:f1:ce:1e:0e:c8:f1:
         81:87:d7:03:db:f8:40:38:4a:60:a6:5a:68:92:1f:87:15:f6:
         54:a1:1b:2d:3f:7f:bc:0b:7c:53:05:59:1e:c6:37:4f:58:20:
         a2:d2:99:93:b6:9c:07:2a:25:08:b9:e5:61:31:01:67:64:38:
         02:81:04:b4:b8:d6:6b:58:80:cb:b2:32:83:fc:c1:ed:9d:f0:
         d3:4d:76:87:a4:0b:62:1f:36:af:6b:8e:10:09:fe:77:57:84:
         d7:96:26:b8:71:63:2c:2b:4a:d5:2c:68:95:e2:aa:8f:cb:23:
         7b:dc:a0:f1:d5:8c:81:9b:0a:d3:1d:4c:f8:a3:49:fd:a5:a4:
         a3:c8:f7:00:39:e9:d1:4d:91:7c:57:c9:9c:00:b5:28:73:5f:
         18:92:2a:c5:09:bb:bb:1d:44:e0:45:25:6a:9e:31:2d:c4:9a:
         64:8c:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:12 2025 by rpki-client