Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          R1H8/AiWjw/9Lq+jv3VySmgYoPHODSB8WICOmYxPu/c=
Subject key identifier:   45:A6:61:E7:26:E2:7C:E7:85:5E:A9:58:EE:E6:B2:58:AD:2C:A7:C6
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01991FF92ED9A5C189D60A40642152666616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0506
Signing time:             Sat 06 Sep 2025 17:00:48 +0000
Manifest this update:     Sat 06 Sep 2025 17:00:48 +0000
Manifest next update:     Sun 07 Sep 2025 17:00:48 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          4: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
                          5: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (hash: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=)
                          6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: wdhHvZ+XK7ye3WsPi21/Qvkh/aW+wNkncnl32KoM3vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:f9:2e:d9:a5:c1:89:d6:0a:40:64:21:52:66:66:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Sep  6 17:00:48 2025 GMT
            Not After : Sep  7 17:00:48 2025 GMT
        Subject: CN=45a661e726e27ce7855ea958eee6b258ad2ca7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b1:54:d4:d6:88:08:80:e1:51:e4:2a:45:e9:
                    36:23:98:4c:8e:99:d5:be:fe:0f:d1:85:f2:c7:65:
                    48:7b:0a:9e:f9:b2:8d:44:db:42:96:7f:49:8e:d9:
                    80:9a:4d:46:a0:bc:d9:3d:0f:58:71:56:12:4e:f3:
                    d2:9f:7e:7a:a4:23:ce:38:e1:73:c1:97:dc:96:43:
                    4c:e2:f0:be:2e:fd:b9:34:e4:bb:5e:22:2d:83:c2:
                    0b:0b:60:68:6e:0e:46:5f:71:b0:49:9f:9a:a6:bb:
                    f1:a1:e4:c8:61:5d:ed:70:11:fc:1a:de:d6:3d:ae:
                    2a:75:51:30:28:21:5c:f1:6c:4c:01:ea:76:e3:62:
                    a1:9b:7f:65:41:32:6d:27:07:b8:08:c3:a4:23:ab:
                    22:5e:d1:aa:4a:66:37:5e:0d:5b:96:ab:3a:8b:bc:
                    44:18:8a:37:e1:5c:a4:57:33:d0:ad:e4:24:b0:70:
                    cf:a4:ce:24:6f:aa:dc:e5:c2:3a:23:4c:b2:05:d8:
                    f4:87:4a:97:45:5d:13:08:5a:a5:5a:45:dc:e9:ce:
                    c4:ca:73:ec:e8:69:05:ef:b8:50:02:1d:bb:8f:89:
                    fd:d7:98:37:a8:b6:82:f2:c7:6d:6f:ca:62:61:12:
                    ba:a0:0c:47:32:a5:af:1f:62:82:4b:b3:3e:f8:27:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:61:E7:26:E2:7C:E7:85:5E:A9:58:EE:E6:B2:58:AD:2C:A7:C6
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:82:42:94:96:52:d5:fb:1d:8c:74:97:05:5f:6f:66:8d:f9:
         a7:03:c6:eb:ac:ac:7e:f6:51:5e:e4:4e:bb:ec:c6:12:4b:34:
         49:24:7e:1b:d7:9b:f3:29:7d:c6:58:b6:5b:f2:e7:b8:7c:69:
         de:d7:f5:91:ea:14:b3:2d:ae:ed:8b:a8:e5:47:ca:a8:ca:de:
         74:68:6a:0b:ed:0c:bb:22:27:89:b6:3d:c5:d0:a8:69:b7:65:
         94:13:03:d3:7b:8d:c3:95:e7:6d:43:51:67:39:74:fb:72:05:
         32:3c:fc:59:c6:7b:4c:a4:93:8d:8d:b3:2e:03:2f:00:d6:a8:
         1b:c7:8b:04:fa:9d:b4:d8:04:32:c0:8d:5f:c8:8b:1b:2c:b9:
         76:78:f2:d1:e7:c4:d3:29:22:ac:62:e0:2e:c7:b5:27:6c:77:
         d7:b2:16:11:66:ca:ed:3c:98:e6:92:82:98:00:e8:a8:a8:b5:
         23:2e:b5:ff:3b:fd:5f:b9:1d:09:ce:1a:23:65:da:57:d6:08:
         a6:0c:6a:be:94:4c:17:03:8f:99:bc:84:64:49:12:9a:bc:f9:
         6e:f9:3a:1e:08:c5:c6:60:fc:13:17:62:9b:c3:08:96:ab:3b:
         f7:17:c9:56:e3:5b:f2:9f:bf:de:1e:e2:c4:7f:62:aa:09:58:
         ba:39:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:51:56 2025 by rpki-client