Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
File:                     blQs7eU6DFcUWmr_L1gZbwLUoS4.mft (raw, json)
Hash identifier:          dPkIiDj95jKSsah5u15jqBqoiw77y/2HPQQGgGk4xlo=
Subject key identifier:   F8:4F:06:7D:A7:9E:81:27:C3:77:ED:A8:BE:09:94:C3:EA:9A:BC:83
Authority key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Certificate issuer:       /CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Certificate serial:       0199228C726C399F7670DF7ACBF838FE5B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
Manifest number:          1650
Signing time:             Sun 07 Sep 2025 05:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:53 +0000
Files and hashes:         1: blQs7eU6DFcUWmr_L1gZbwLUoS4.crl (hash: Y/a7NMRF5VJs1RXlVfelq3d5dJc2+2eXVFllOhXr+xE=)
                          2: pXv8FGbLwxECE7IPZwLe-oIEhlQ.roa (hash: lA0EoJbAgOHytg/Q3yX/rveAnxbQAYlQALMvfLmzZeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:72:6c:39:9f:76:70:df:7a:cb:f8:38:fe:5b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
        Validity
            Not Before: Sep  7 05:00:53 2025 GMT
            Not After : Sep  8 05:00:53 2025 GMT
        Subject: CN=f84f067da79e8127c377eda8be0994c3ea9abc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:3f:34:a8:7e:54:a8:b1:a1:b3:b4:94:fb:
                    f0:1b:b6:0b:e5:d3:12:cb:f6:42:20:ad:06:cd:65:
                    f3:34:bc:7b:b2:c8:d8:ab:8c:36:f6:62:71:d3:68:
                    5f:b2:a6:52:22:3a:ed:08:6d:71:bc:94:d1:dd:46:
                    07:10:6c:7c:39:05:2a:14:7a:82:db:83:84:86:21:
                    b5:32:be:5a:85:4e:80:ad:0f:65:ef:94:2d:cf:0e:
                    8e:2a:46:71:99:8d:32:c4:3d:1d:41:3e:b9:8d:d8:
                    3d:75:09:e5:9f:e1:5a:93:2d:99:1e:e9:e0:1f:ed:
                    17:3e:f4:ba:bb:5b:73:d2:ed:b6:e0:a0:c6:89:23:
                    75:d4:35:bd:bd:f2:70:47:21:cb:7b:58:47:d1:c1:
                    7c:b5:fd:b3:d3:12:47:34:ce:09:e3:c5:19:0a:39:
                    46:45:ee:a0:7b:9a:93:d7:8f:b0:c0:e8:b0:a7:9c:
                    a5:09:53:53:ae:4a:d9:c3:63:9c:c7:c0:6a:3d:e5:
                    44:70:20:9e:b7:5f:3c:d8:bb:5c:e8:3f:dc:12:79:
                    38:10:a4:3e:22:51:5a:48:7b:88:45:c8:e5:50:ad:
                    9d:5e:ba:6c:e4:3b:bb:a2:9a:4b:eb:95:41:e2:59:
                    0a:fa:98:23:f8:0e:95:ce:55:3e:3f:94:49:9c:88:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4F:06:7D:A7:9E:81:27:C3:77:ED:A8:BE:09:94:C3:EA:9A:BC:83
            X509v3 Authority Key Identifier:
                keyid:6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cd:12:86:82:fc:be:08:e6:1c:90:68:48:54:a0:7b:c2:cc:
         81:38:26:f2:56:5c:23:ad:a3:68:b5:ba:44:86:7e:c9:8a:c2:
         66:33:7b:5b:c2:fa:62:62:6b:18:ff:91:5f:db:e6:fe:fa:33:
         01:1a:c8:26:9c:f7:5d:94:0a:91:59:05:7c:2e:ee:99:ff:78:
         2a:43:d8:08:3d:5a:ec:11:9a:a2:29:00:7d:3e:14:6e:68:a4:
         59:27:fb:a5:5d:40:f2:e8:2a:90:4f:83:ed:61:fd:70:91:d0:
         07:f6:6f:75:a4:80:f1:a2:20:8a:8d:53:0a:36:f6:77:9a:ea:
         79:25:ac:6b:bc:74:ad:da:52:2d:0a:1a:b8:1a:f9:84:ab:9b:
         60:b0:c1:0e:74:dc:92:1a:ea:f5:d8:0b:d8:e6:e2:b0:05:59:
         f1:3c:95:54:19:4e:5c:dc:7d:e9:e0:35:3a:24:d1:1f:e9:81:
         53:39:ba:96:10:e0:64:30:1e:3f:7c:59:87:ef:20:cc:24:5b:
         1d:b1:e0:75:f2:2c:57:d2:02:b8:2c:09:a4:3e:22:af:ea:d7:
         e3:7f:6f:b6:00:ba:c6:ad:ea:cd:8d:65:b4:cb:66:e7:a9:0e:
         d0:1e:22:85:c0:51:88:a2:7a:a0:2c:80:39:89:75:b9:8a:fa:
         f5:8e:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:27 2025 by rpki-client