Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
File:                     beisSVlyXk_tHDMNIrXNBgJBpRQ.mft (raw, json)
Hash identifier:          LNBbcjkRIgiOP4kQItsCTFjnsgwXWoHTx2jHmHr4ag8=
Subject key identifier:   38:69:FD:50:21:5E:21:D8:FA:5B:AC:BF:EB:B9:EF:80:23:51:70:43
Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
Certificate issuer:       /CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Certificate serial:       019922C361EB81E6E872A6164C61F2F400B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
Manifest number:          0598
Signing time:             Sun 07 Sep 2025 06:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:53 +0000
Files and hashes:         1: 0YIOVBW-uwL5vGELnsoWXjbdbbc.roa (hash: YnwOh3rBgK7q6cV+gaFLtLus1V2Wyasj+jLsXsDsPIs=)
                          2: beisSVlyXk_tHDMNIrXNBgJBpRQ.crl (hash: GyPADkPdcN/Yq7y0sSQzI9sQo5hEFcelmNNdQftAzO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:61:eb:81:e6:e8:72:a6:16:4c:61:f2:f4:00:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514
        Validity
            Not Before: Sep  7 06:00:53 2025 GMT
            Not After : Sep  8 06:00:53 2025 GMT
        Subject: CN=3869fd50215e21d8fa5bacbfebb9ef8023517043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:3f:38:37:2c:22:80:a4:61:ee:02:0b:e3:
                    99:34:5d:80:75:a1:b5:ae:90:d9:33:11:c1:d3:d9:
                    fc:0b:d7:6d:b0:83:3b:90:fc:a2:b7:8b:d7:6e:af:
                    12:9f:fb:f1:7b:72:84:69:5b:5a:68:bd:56:cb:ea:
                    20:da:2b:77:29:b7:96:0f:68:e8:44:bf:e8:fa:b5:
                    00:19:12:bc:72:9a:a1:a9:98:e4:96:19:2e:86:5a:
                    fa:be:74:e3:89:55:54:4d:f8:5a:01:b8:e2:f0:98:
                    43:61:30:2f:59:15:58:d4:57:75:b2:14:3e:7d:4a:
                    16:66:a0:e5:67:b6:8d:e7:5d:17:68:ab:d6:ca:bb:
                    13:fa:e2:66:b5:38:2f:f5:7e:12:ca:6d:4d:6c:63:
                    55:23:91:92:d7:2a:2d:fa:c5:53:58:24:2d:fc:27:
                    55:9a:ef:80:3d:93:ad:02:65:5b:54:7d:c3:91:15:
                    81:46:ee:33:72:29:8b:5c:f7:1f:13:ab:c1:c5:5b:
                    c8:3b:69:56:b9:a9:16:bb:78:1e:2e:3d:c4:38:1e:
                    5f:87:62:b9:c7:76:d4:3d:fe:6c:d6:13:8d:d5:46:
                    81:29:03:2e:92:ae:ba:ad:93:6e:30:74:78:d4:58:
                    a9:e1:26:87:f3:ab:b5:44:d7:0e:af:2a:48:f6:ca:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:69:FD:50:21:5E:21:D8:FA:5B:AC:BF:EB:B9:EF:80:23:51:70:43
            X509v3 Authority Key Identifier:
                keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:cf:55:6b:3c:f2:88:bd:4d:24:75:a2:70:f6:b4:f2:cd:
         7d:f9:ea:ce:99:70:83:5c:80:76:2d:16:97:15:37:ff:24:04:
         32:cd:27:cc:f8:06:4a:fc:68:d5:76:8d:6c:f0:bf:a7:b1:1c:
         4a:6c:7d:93:ce:53:28:2b:81:5d:e2:0b:a3:df:a0:8e:17:71:
         ea:15:43:ec:6f:c9:6c:c9:b2:b0:14:e9:79:8a:81:4f:35:a7:
         08:c7:9b:28:1e:35:82:b3:0b:10:23:d7:64:72:d1:73:88:11:
         53:0b:27:47:85:3b:b4:8f:46:0d:23:45:39:4c:a5:4d:98:26:
         d8:1a:1d:64:2f:48:12:75:fb:5d:60:02:86:af:39:dc:e2:7c:
         b0:63:93:9a:3b:1b:eb:8b:df:b5:c1:92:a2:04:29:af:06:8a:
         80:b9:79:86:24:87:cd:02:f9:47:be:1d:38:c8:31:72:6c:24:
         62:2f:90:9f:b9:44:64:9c:ce:5e:d5:ce:a4:56:c3:3a:9f:91:
         65:48:93:98:3f:75:d9:cc:ad:eb:f6:58:27:e9:9d:53:4b:00:
         53:3d:47:99:f3:2a:62:59:6b:c2:fc:b8:96:d4:be:2a:ec:7b:
         5d:6b:29:98:0d:74:ec:f4:ba:b9:fa:48:ed:99:ab:dc:da:e6:
         11:d5:e0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:00 2025 by rpki-client