Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File:                     d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier:          2GMwOmJ7KYmnZFnvZjCy/IzKYgXbX24K0VugCiFW1no=
Subject key identifier:   01:B0:42:D8:34:3B:84:95:BE:D2:FF:96:AE:BA:5F:3C:DD:FC:22:E1
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer:       /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial:       0198A0F19EFEC20A48145E54873929F944F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number:          1552
Signing time:             Wed 13 Aug 2025 01:00:46 +0000
Manifest this update:     Wed 13 Aug 2025 01:00:46 +0000
Manifest next update:     Thu 14 Aug 2025 01:00:46 +0000
Files and hashes:         1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
                          2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: dFeY5RAzALtV7THjFGP4AloA4kFGaZR5oMI+1UadIpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f1:9e:fe:c2:0a:48:14:5e:54:87:39:29:f9:44:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
        Validity
            Not Before: Aug 13 01:00:46 2025 GMT
            Not After : Aug 14 01:00:46 2025 GMT
        Subject: CN=01b042d8343b8495bed2ff96aeba5f3cddfc22e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b8:47:63:be:68:2d:bc:09:8c:1f:e8:a3:10:
                    7e:91:2b:60:38:64:61:ee:9e:e5:28:4f:59:c0:0b:
                    c1:e3:18:e6:38:43:a6:26:3c:35:99:33:ae:29:c1:
                    36:23:77:87:7d:9a:9f:ef:a4:d3:61:4e:41:74:2c:
                    1c:10:2c:76:73:4c:d0:a9:2e:38:19:08:ca:11:5c:
                    1a:f2:fc:8f:a3:a8:c8:fa:31:f9:40:11:66:05:7d:
                    2a:a0:5c:72:d5:5c:85:a9:a2:ce:1a:3c:c3:a6:71:
                    3d:a1:b6:b8:b1:fc:18:5a:17:6b:d0:a2:a0:16:2b:
                    e1:99:e3:9b:a1:b6:23:00:de:50:ca:d9:19:9e:dc:
                    6a:c3:14:93:ad:c0:84:8d:83:68:96:29:50:a0:0c:
                    d6:90:bd:64:f9:17:dd:4f:f9:34:09:ba:11:11:52:
                    0f:c6:75:cf:74:04:bc:50:e7:15:77:ca:ce:fa:11:
                    93:e4:9b:a9:87:23:58:69:77:c8:2f:68:50:4c:4e:
                    bc:c5:3f:57:0a:21:84:c3:d1:80:42:5b:77:ac:31:
                    7b:f6:04:49:59:33:d3:ed:19:69:ec:d7:af:b0:7c:
                    9b:3c:de:ef:51:2d:24:af:8a:9d:88:14:20:09:6a:
                    e7:6b:f4:95:f6:e4:10:86:0a:a8:73:4d:18:6f:59:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:42:D8:34:3B:84:95:BE:D2:FF:96:AE:BA:5F:3C:DD:FC:22:E1
            X509v3 Authority Key Identifier:
                keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:26:66:2d:ff:73:76:d0:f2:0c:70:d2:a1:2d:43:5d:1c:
         55:da:4f:9d:89:37:05:6b:e1:ce:98:41:0d:3c:08:39:a8:44:
         6e:e7:91:cd:8d:ba:5b:26:b4:ca:83:b3:0c:15:f1:97:87:44:
         db:84:48:b5:e2:2b:f1:d6:8a:5a:7c:ce:bf:34:2f:87:eb:09:
         25:2b:6e:51:e4:60:6f:14:f5:e1:d0:4d:f9:f8:0c:86:7b:5c:
         d8:0a:8a:19:78:08:a0:5a:b4:80:94:b6:46:58:e3:88:a9:e9:
         c0:9e:23:12:fa:85:93:d2:46:3d:1a:0a:42:3a:f5:2d:79:5f:
         f9:e9:d4:c1:37:c2:cc:aa:59:4b:d5:7c:07:b7:ea:9f:bc:34:
         42:c3:09:c8:37:65:69:c9:03:63:cf:79:44:57:cb:0c:2b:f0:
         47:bb:f1:97:40:b2:f0:61:04:6f:bf:d1:d6:38:b1:6d:ef:dc:
         28:07:9f:7b:ed:a7:45:8f:8c:fe:04:43:64:d7:61:c8:54:22:
         af:c0:82:ff:6b:66:87:78:af:cd:a7:95:e9:fe:16:b1:83:14:
         2f:4f:a6:c5:b8:de:70:f4:8f:f4:de:55:c2:94:ec:67:58:bd:
         c9:66:41:12:5b:96:1b:71:6d:b0:0d:dc:ce:8c:2a:a7:8c:11:
         c2:c6:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:33 2025 by rpki-client