Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
File:                     IqyN_06Z0-IomvY7FdVdJFDIQsM.mft (raw, json)
Hash identifier:          2yBAcU7c9dpVYiiwDEj7erB5hS9WlM7IEtCYj+ievkM=
Subject key identifier:   C3:F7:93:5B:98:A8:99:E8:5A:9F:47:FC:88:F6:8E:A5:18:AB:B4:01
Authority key identifier: 22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3
Certificate issuer:       /CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
Certificate serial:       01987C4024D9F651E28BF4B23A7763287604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
Manifest number:          053C
Signing time:             Tue 05 Aug 2025 22:00:35 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:35 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:35 +0000
Files and hashes:         1: 1YFZUWeFsFFhNH6pH-z6oTf7e1M.roa (hash: N3xo7g5jGJQoS/qFHbtXSlXVpbFrX6/YoQPrJBEqRCc=)
                          2: IqyN_06Z0-IomvY7FdVdJFDIQsM.crl (hash: m8erNvOv4cAbYjkXA1Jy48VRNoFdbIm+vGex6XdqqO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:24:d9:f6:51:e2:8b:f4:b2:3a:77:63:28:76:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ac8dff4e99d3e2289af63b15d55d2450c842c3
        Validity
            Not Before: Aug  5 22:00:35 2025 GMT
            Not After : Aug  6 22:00:35 2025 GMT
        Subject: CN=c3f7935b98a899e85a9f47fc88f68ea518abb401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:c4:35:73:c4:87:2f:07:14:61:69:d1:65:
                    f6:08:95:38:4f:21:6f:62:56:4a:7a:61:93:69:74:
                    55:29:19:89:ff:f4:46:41:03:4a:b4:05:3b:2e:34:
                    c6:fe:3e:a6:31:a0:12:cb:d9:75:85:20:6c:01:c2:
                    64:3f:d8:ad:1b:e7:3c:a7:22:34:22:ab:41:61:9c:
                    0f:fd:01:e9:77:a7:ad:e4:9d:da:74:96:1a:10:b5:
                    52:a7:13:54:4c:09:a8:47:16:b2:0d:98:f4:ff:3e:
                    f9:2d:bb:66:a4:5f:3a:f3:e7:3b:bf:9a:39:c6:22:
                    5f:c8:dc:59:59:3f:75:a3:99:59:57:62:e4:f4:5c:
                    ed:2e:5f:cf:e0:f5:16:fd:cb:59:b6:27:d9:5d:49:
                    ae:21:2b:bd:09:42:3f:eb:ad:f6:15:42:8a:b8:eb:
                    48:87:13:1d:2d:bc:81:88:f0:0f:60:fe:80:58:9c:
                    90:b1:5a:ef:93:3d:bd:45:20:8f:88:ea:82:58:64:
                    a2:e1:ff:f4:06:f9:04:be:89:07:98:ec:b7:11:13:
                    83:1f:a5:46:37:04:64:da:ee:f0:6d:6d:28:cc:b4:
                    ff:1a:b4:2f:62:47:17:f5:56:8e:68:73:8b:41:1d:
                    80:1b:a3:44:a0:5c:51:74:08:4d:ed:e3:e5:10:ab:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:93:5B:98:A8:99:E8:5A:9F:47:FC:88:F6:8E:A5:18:AB:B4:01
            X509v3 Authority Key Identifier:
                keyid:22:AC:8D:FF:4E:99:D3:E2:28:9A:F6:3B:15:D5:5D:24:50:C8:42:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqyN_06Z0-IomvY7FdVdJFDIQsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a75e1d-4d81-49cb-aca5-82998a9287e2/1/IqyN_06Z0-IomvY7FdVdJFDIQsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:a1:d6:c1:60:17:08:0b:0a:5c:78:1c:93:70:f0:3e:5d:
         94:61:cb:06:8a:d2:e2:83:e5:7b:76:dd:41:71:7c:6e:41:23:
         fd:37:7f:6d:e2:88:53:2d:71:90:1d:5f:66:40:07:ab:3e:14:
         83:d3:f7:5e:0b:f2:67:6e:41:af:0e:72:18:b5:2a:16:9d:22:
         54:cb:a3:db:8a:8f:5c:80:f5:a5:a9:c0:95:28:6e:8a:a4:d5:
         bf:a0:c8:5f:a6:8d:0a:1e:38:45:11:00:76:84:a7:89:91:f5:
         87:88:40:f2:6b:d6:71:ac:c6:ca:d5:ee:b2:b8:87:8f:c2:98:
         59:43:1f:09:30:ca:ea:2b:2c:42:a7:fe:8f:56:00:72:ca:fb:
         af:87:37:87:6a:ba:f2:86:56:dd:08:29:53:95:f8:5b:77:6c:
         f9:36:ce:a5:9f:ec:04:e7:49:d9:5a:75:69:c0:0b:31:46:32:
         c4:6c:ed:09:82:37:af:39:8e:2a:fd:29:c8:46:28:09:8f:14:
         61:43:00:64:e7:49:f2:8e:90:7d:15:45:d0:1f:5f:39:c6:7c:
         b6:a4:7d:c9:58:8f:a0:bc:e1:c3:da:70:6f:af:a0:16:bc:31:
         71:62:ed:93:45:37:f8:b3:fd:95:12:08:cf:70:80:b2:af:df:
         2f:7c:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:39 2025 by rpki-client