Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File:                     CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier:          cvLev1xTol5EjVo0fFJqcDmPx+crIL0TfTF+848QlH4=
Subject key identifier:   55:B7:55:4E:39:40:34:4B:D1:00:89:AF:FC:B4:F3:F0:46:CC:DF:07
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer:       /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial:       019875D158722C32DD540229A8C40FB9F271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 16:01:50 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:50 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:50 +0000
Files and hashes:         1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
                          2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: VsDalG+ikUJ4YlQp3lB+3d2MEtO5WVwLxICBF9teQdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:58:72:2c:32:dd:54:02:29:a8:c4:0f:b9:f2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
        Validity
            Not Before: Aug  4 16:01:50 2025 GMT
            Not After : Aug  5 16:01:50 2025 GMT
        Subject: CN=55b7554e3940344bd10089affcb4f3f046ccdf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:93:82:c4:89:21:77:0c:b7:26:4b:02:8e:
                    c2:0c:53:5b:08:d7:8f:46:60:61:69:00:28:b4:cb:
                    6c:b1:f7:21:fb:07:0a:f4:7b:a4:bf:15:83:93:49:
                    2f:2b:49:9c:c0:9a:ae:b9:ab:0a:44:74:51:4a:7b:
                    7d:38:2a:b4:ad:e3:92:ae:bb:76:fc:26:f3:5a:fd:
                    2b:0c:c2:38:f9:f1:3e:4c:93:4f:78:bf:59:ae:62:
                    b2:50:14:f0:f6:e8:50:10:2f:be:d0:32:81:37:11:
                    16:ec:f6:fb:e2:c7:5e:86:00:4f:ae:08:5c:80:c9:
                    5c:99:1b:57:48:8f:20:7e:53:dc:b6:5a:67:9b:f5:
                    89:4c:de:47:c8:69:c8:98:2f:d8:82:c0:a5:ce:f1:
                    34:b3:8e:84:3f:de:75:77:8b:4e:11:3e:c9:44:ad:
                    90:83:82:49:01:f3:f3:1b:dc:b5:9a:6d:43:55:4c:
                    da:43:c2:29:96:ed:6e:a3:ee:ec:5f:f3:66:43:66:
                    3e:1c:aa:87:ba:db:3b:60:5b:2f:05:ca:93:f9:48:
                    33:14:00:39:eb:1c:e3:f0:81:a0:f2:ce:2a:f1:72:
                    b5:1e:79:98:5b:e5:7a:fa:8a:e0:b6:45:8e:0f:6d:
                    7a:0a:86:86:ab:89:16:5a:8c:2a:ec:3c:8d:79:64:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:55:4E:39:40:34:4B:D1:00:89:AF:FC:B4:F3:F0:46:CC:DF:07
            X509v3 Authority Key Identifier:
                keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:1b:72:f9:c0:5f:b4:58:fa:75:3e:e7:f3:8e:48:0b:9a:
         26:5f:89:33:fa:71:67:a0:44:81:98:28:f3:33:fa:bd:41:cf:
         7e:5d:f1:fc:44:66:85:25:d0:6c:c4:ed:e3:e8:0e:ef:2a:55:
         41:bb:36:c0:4b:22:3c:e7:ba:9d:7a:79:6a:7b:3a:92:77:69:
         52:f1:c1:c4:20:0d:ed:25:49:4a:a3:3d:ac:af:83:c8:83:d9:
         0c:0e:7e:2e:41:19:65:05:23:3a:ac:e8:d0:67:56:5e:7e:1d:
         9b:51:8b:83:f8:6d:85:75:fa:46:62:23:dc:db:13:e0:c8:63:
         6f:3e:18:41:4b:80:df:ed:32:3b:1f:9a:fa:f2:f8:75:a7:d6:
         3e:89:07:5d:e7:32:05:75:05:41:58:1e:95:6a:72:c5:22:19:
         61:ab:5c:a1:1a:bf:5c:87:11:4e:04:90:b7:81:0e:b0:8e:86:
         09:1d:a3:e5:2b:b7:4d:f1:66:86:dd:cb:06:8c:b8:c1:61:e6:
         9c:c8:9b:d7:66:f7:8c:00:9a:8b:62:0e:bf:7f:55:bc:2a:5c:
         9e:a8:a8:77:30:ba:2c:ae:76:65:d6:cb:76:40:90:74:b6:5e:
         ef:08:55:93:28:b1:2b:7e:81:ed:18:5c:a4:5d:f8:f9:6a:db:
         d1:7f:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:38 2025 by rpki-client