Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File:                     MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier:          993pZ/httLHm628dnWxiRoXPSJHcLVxlRIcNudrdSvI=
Subject key identifier:   96:E9:8C:8A:94:8B:72:EC:08:3A:B1:B6:65:C9:B7:10:05:22:E7:61
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer:       /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial:       019873E1CF3C11AE2CCB3859403CFAAD7865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:35 +0000
Files and hashes:         1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: m8SsythhZYqk4T4oviFj4uiidZewWB7Ujw2Xc6oknzI=)
                          2: hldVZlO6d8WWA7-GTHuwlp4u6fM.roa (hash: fXvwRBJ+hinYD3qF0h+tIsxkZ7408ikqGqdWmZh6YUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:cf:3c:11:ae:2c:cb:38:59:40:3c:fa:ad:78:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
        Validity
            Not Before: Aug  4 07:00:35 2025 GMT
            Not After : Aug  5 07:00:35 2025 GMT
        Subject: CN=96e98c8a948b72ec083ab1b665c9b7100522e761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:04:ba:d0:c8:04:14:32:77:ad:6d:80:ae:8c:
                    e6:6c:8a:a0:dc:84:03:d2:fc:08:55:e1:22:fe:78:
                    be:d6:24:b6:fc:6a:34:09:2a:9b:69:a0:ae:d2:84:
                    e8:bc:ef:de:ff:43:6e:42:21:ea:7d:d4:4b:47:d8:
                    29:97:ba:b1:0d:2a:03:0c:8b:e7:40:1f:0d:13:db:
                    c5:82:74:5e:af:a1:0e:71:f4:49:6f:b9:bb:b7:87:
                    9a:d8:1c:0f:e0:dc:08:3c:37:15:5f:92:ed:af:dc:
                    e8:56:f4:c2:d3:0c:ca:e0:2f:9e:3e:92:eb:7a:30:
                    d5:53:d1:c9:56:56:4c:10:16:5b:35:64:8a:1b:86:
                    44:b9:45:2d:be:37:87:02:1b:38:f1:31:11:6d:46:
                    e7:2f:d0:4f:b4:02:af:c3:d9:3e:4f:c1:21:d6:ef:
                    ae:d0:9e:4b:c5:6b:a7:0b:e0:95:d6:65:e7:e7:7b:
                    59:2e:60:55:64:4a:fe:eb:78:a4:6f:fc:b5:b6:78:
                    f8:e4:61:f3:86:ac:ad:a4:1f:60:ba:3e:f4:e9:1f:
                    24:fc:27:d6:6e:cf:71:7c:07:f1:28:0a:48:a9:0e:
                    8d:2f:9e:f0:d1:24:c4:e9:53:1e:57:15:af:70:47:
                    ac:45:74:3d:c3:7a:57:62:b7:3d:34:43:00:8d:f1:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E9:8C:8A:94:8B:72:EC:08:3A:B1:B6:65:C9:B7:10:05:22:E7:61
            X509v3 Authority Key Identifier:
                keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:e0:8a:d2:d3:4c:45:df:31:f6:36:5b:b1:29:31:4e:ef:ca:
         04:6b:1a:a2:75:fb:f0:9f:f1:42:8d:4f:fb:64:30:65:64:ad:
         13:0f:b5:40:0a:1a:91:03:50:3d:7c:da:a4:e1:56:0a:52:d2:
         42:a1:89:8c:e9:e8:f7:31:35:d0:f5:1f:5b:d5:8c:80:a7:51:
         83:01:56:62:81:be:1b:ab:a6:7a:22:e2:91:7c:d1:1e:43:27:
         f6:61:49:7d:79:09:71:ad:fa:ca:0f:16:bd:40:17:f0:29:6e:
         06:b3:06:b2:db:4f:af:bf:ad:33:bb:a5:d5:da:df:a9:ae:fe:
         20:46:a7:f5:1a:55:59:cc:63:e4:1f:d0:57:49:f2:bb:7d:12:
         b0:a1:94:45:50:61:13:e8:4a:06:e9:71:6e:fd:34:8e:a7:7b:
         a8:aa:35:d3:fa:a2:c4:7d:3d:b2:45:2c:c3:4b:2b:68:7c:87:
         5b:44:9f:15:27:ab:78:c8:98:7c:5a:f6:c1:93:27:85:cc:7b:
         85:22:08:58:0d:b4:68:38:4e:a3:3c:b7:aa:c1:0e:e5:7b:0d:
         2b:45:37:ae:6b:7d:65:9a:5b:11:29:4b:ce:9c:e8:77:a5:85:
         9d:e1:41:ea:63:d8:7d:68:be:09:ab:e7:a8:66:50:be:02:79:
         ab:ba:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:37 2025 by rpki-client