Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          oR1A9Wy0PfvMGGT1T3qcyqwFZqaQgw6leaYzMr0cYoM=
Subject key identifier:   FF:E3:23:70:60:37:EA:32:20:8E:16:5D:40:28:F1:B9:96:18:3F:44
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       01987CE5B430DC12C909CF059753B44ADF94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          1634
Signing time:             Wed 06 Aug 2025 01:01:25 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:25 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:25 +0000
Files and hashes:         1: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=)
                          2: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=)
                          3: V9THiIVArSnZ1H4kkTxosx3Tvz4.roa (hash: lUYBTWUgXaqtzw8eN2t3fS8dCvHHrGYo2Uz5MEjddRY=)
                          4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=)
                          5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=)
                          6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=)
                          7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=)
                          8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=)
                          9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=)
                          10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: xnjmTy6PWQQFJt8mt0yGp+9iyCsb+vR9ySx11cuPzDY=)
                          11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=)
                          12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:b4:30:dc:12:c9:09:cf:05:97:53:b4:4a:df:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: Aug  6 01:01:25 2025 GMT
            Not After : Aug  7 01:01:25 2025 GMT
        Subject: CN=ffe323706037ea32208e165d4028f1b996183f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:37:49:c0:ff:ef:3e:1d:d1:fe:a9:65:7d:
                    7d:7c:f6:d7:04:d4:bd:64:a4:f8:b3:eb:e5:32:09:
                    41:6a:e4:76:b1:92:0f:15:1e:b9:80:4d:c5:8d:3d:
                    78:20:90:10:1f:3d:43:02:57:91:3a:fd:63:22:c3:
                    a4:8e:6e:ab:f3:cf:d6:cd:49:4c:a5:eb:0e:3a:c9:
                    e5:7b:4d:2c:58:17:d1:eb:b2:cc:8e:0d:c4:f9:04:
                    6a:3e:81:ca:a8:ae:e4:b0:d7:45:ae:ea:4e:db:63:
                    f1:f0:01:7b:5a:5a:21:8d:1d:d1:f5:9a:95:0d:4c:
                    cb:1c:64:b6:95:16:96:55:0d:71:68:19:fe:45:c9:
                    e3:5c:c6:bc:17:b6:a3:1c:b6:66:00:be:24:12:b8:
                    75:27:e3:ab:dc:d9:38:6e:51:59:96:53:d6:e9:d1:
                    06:8e:ab:f9:7b:bb:6e:00:30:77:fe:de:d6:2a:c5:
                    29:0b:4e:7a:56:dd:7c:bf:da:d2:e7:8d:29:f8:1f:
                    18:4f:91:18:89:d6:41:70:43:15:75:8c:c9:cc:17:
                    98:28:f0:60:65:f3:d1:a1:1a:da:6f:2a:c2:b3:e8:
                    ff:a0:6e:41:07:f6:a4:e0:69:6d:a5:6e:ba:d9:85:
                    7e:bf:a7:94:48:fb:43:37:2e:f1:f4:23:9b:a6:65:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:23:70:60:37:EA:32:20:8E:16:5D:40:28:F1:B9:96:18:3F:44
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:91:4a:d2:a3:c6:f0:6d:ee:b8:70:d9:71:51:c5:01:e9:e1:
         aa:93:1f:2d:8f:af:2a:80:51:80:6e:98:f1:51:8d:a1:76:db:
         46:ad:95:e1:83:c9:c4:75:80:7b:69:82:23:d7:40:23:0a:ea:
         a3:7a:ca:a5:d4:fa:40:b2:77:a0:51:d3:78:b9:ff:4f:a4:97:
         e7:df:f7:c0:7a:e5:4c:9c:88:0b:26:da:0b:01:26:06:27:9d:
         b6:46:5e:eb:89:66:58:cc:2e:6d:bc:56:75:d9:bd:9a:59:c4:
         8c:2f:8e:5d:b4:fa:f6:3e:a5:ce:b7:8b:db:ea:c8:e5:c4:dc:
         7b:41:1f:3c:ad:83:ff:f4:84:fe:24:1f:c8:85:2b:bf:48:42:
         6c:74:3d:fe:c9:1e:be:a8:68:ca:eb:bb:18:0a:93:d1:75:f7:
         36:fd:df:f4:4b:1a:7a:e8:13:86:b4:97:2c:66:c3:39:87:d5:
         5a:2d:f1:05:81:05:d3:e9:13:5b:bb:ac:79:17:20:14:e9:eb:
         ae:36:95:65:6b:99:67:d9:6f:65:18:e9:1e:b8:8d:2b:31:1e:
         68:3a:09:74:1c:52:63:74:0b:6d:10:90:9c:35:a1:30:97:b7:
         28:3f:2c:cf:ff:52:0a:73:23:c5:3a:66:d3:2d:8c:c0:a9:3e:
         d0:df:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:29 2025 by rpki-client