Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
File:                     b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft (raw, json)
Hash identifier:          VP0IjZTdloEfgfw4KJm83+YKHwoHv9+tGAkn/HzVJjA=
Subject key identifier:   55:E0:5E:AA:B1:09:1B:71:5D:CD:3B:69:63:67:15:12:12:AC:1A:61
Authority key identifier: 6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5
Certificate issuer:       /CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
Certificate serial:       0198C610761ADFBF03FB8A0B7748824BBE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
Manifest number:          018F
Signing time:             Wed 20 Aug 2025 06:00:24 +0000
Manifest this update:     Wed 20 Aug 2025 06:00:24 +0000
Manifest next update:     Thu 21 Aug 2025 06:00:24 +0000
Files and hashes:         1: Gp0R5zDh8lM3SO2TjRE-IgUbcO4.roa (hash: 7jHco5ZuwfFCZy8s7K6w6Z+7cmvFX9c1LH/XB4jVbqc=)
                          2: b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl (hash: fsxob2Qm+yCQXM1ACBGFSb+PQxfxz9zCIn7GJK7OVh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c6:10:76:1a:df:bf:03:fb:8a:0b:77:48:82:4b:be:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f46cf964a46fb50f25b5d14fd965fd6861048a5
        Validity
            Not Before: Aug 20 06:00:24 2025 GMT
            Not After : Aug 21 06:00:24 2025 GMT
        Subject: CN=55e05eaab1091b715dcd3b696367151212ac1a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:74:4c:2f:56:e2:c2:45:e4:ee:99:02:82:
                    0f:e9:bd:80:81:76:6c:31:c4:81:cf:54:e8:23:79:
                    5c:20:c6:1e:48:b5:64:46:07:6f:99:b7:98:98:c7:
                    1e:f3:c2:9e:05:a8:f1:51:74:45:c3:b1:d4:95:7e:
                    4a:ac:ba:3d:8a:65:cb:0f:bc:52:48:90:fb:cc:9d:
                    c5:23:6a:b4:2c:da:0c:fd:6a:85:76:e9:38:ed:3b:
                    1d:e2:43:86:df:31:33:6d:6a:5c:68:85:67:e6:42:
                    94:40:99:7b:cc:d8:79:2f:c3:44:db:f8:68:ad:45:
                    61:45:26:8b:d1:40:56:b2:96:bf:11:13:fa:cf:cd:
                    6f:7b:d4:f5:e5:5b:0c:03:08:b6:67:aa:89:13:1c:
                    b7:51:0e:f9:cf:60:0f:14:34:12:e9:55:3c:20:10:
                    c6:93:4d:3f:dd:26:e3:63:28:2e:18:e6:6b:56:d3:
                    ff:b3:04:15:0c:1f:f0:11:ea:34:e1:f2:62:31:e4:
                    73:6a:2b:61:9a:6b:d0:90:b6:f5:da:28:b1:de:c6:
                    a5:f5:df:7f:ac:0b:cf:33:56:e8:ba:f4:5f:b0:2f:
                    7b:ee:08:02:58:37:81:e8:77:c3:64:52:29:25:49:
                    94:6c:ee:20:17:ef:88:9e:e6:c6:4f:42:f5:78:2a:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:5E:AA:B1:09:1B:71:5D:CD:3B:69:63:67:15:12:12:AC:1A:61
            X509v3 Authority Key Identifier:
                keyid:6F:46:CF:96:4A:46:FB:50:F2:5B:5D:14:FD:96:5F:D6:86:10:48:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0bPlkpG-1DyW10U_ZZf1oYQSKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/190d08-f1b1-4803-a722-99a08b91274c/1/b0bPlkpG-1DyW10U_ZZf1oYQSKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:de:f6:26:2b:2d:8e:d6:b5:61:e4:eb:98:98:f9:2e:ae:af:
         1b:e6:df:ed:04:c2:98:d5:ad:fd:35:f5:dc:10:02:e1:79:20:
         e6:3b:15:4e:91:07:9e:d8:ef:b3:be:34:d3:92:84:39:99:18:
         ca:dc:ef:80:49:66:73:8f:54:29:1b:21:ed:42:16:7d:52:d6:
         a2:22:ca:6c:f8:49:be:33:86:99:7d:46:ae:4a:22:6f:e6:ae:
         6d:25:0e:30:01:3f:d1:da:ee:c6:36:2f:54:bc:b7:ef:9a:85:
         ec:8d:a0:ac:6a:f1:22:57:ff:e3:b3:7e:07:db:ff:1c:c9:a3:
         7a:68:a1:e1:ef:3e:bb:96:1a:1c:d3:0b:bc:85:76:97:2e:c6:
         ad:e5:46:dd:a1:36:4e:29:0e:9f:84:76:8e:78:33:ca:48:a0:
         ef:59:fc:24:41:b9:de:63:8a:87:af:34:8e:8d:0a:16:64:8f:
         ce:d1:15:1f:73:67:70:56:57:d5:1d:c0:50:5e:17:da:0c:2d:
         5a:37:08:ab:29:67:e4:01:5c:70:a8:69:56:b8:76:9d:59:87:
         05:8f:5a:fb:32:c4:b3:53:ca:6e:3f:44:5b:ef:b7:84:5a:be:
         c5:ca:97:c0:ab:f9:49:6f:10:7a:9f:3c:d0:ad:72:9b:ad:28:
         07:e2:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:46:03 2025 by rpki-client