Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          hpfh/es6uy6lJx3uHw6LfRDaeO5P4h/UFiAaOjlKzds=
Subject key identifier:   5A:3A:DE:5A:37:8D:E9:73:52:C2:D1:CA:6C:F7:ED:E8:4A:0D:2A:A4
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       0198892012206A3A0AB4A827171D4A3FD625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 10:00:37 +0000
Manifest this update:     Fri 08 Aug 2025 10:00:37 +0000
Manifest next update:     Sat 09 Aug 2025 10:00:37 +0000
Files and hashes:         1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: LF4yN/R+ry0wVrt9aSmRISL1JJwYRPdusMEMaBNZYjE=)
                          2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:20:12:20:6a:3a:0a:b4:a8:27:17:1d:4a:3f:d6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Aug  8 10:00:37 2025 GMT
            Not After : Aug  9 10:00:37 2025 GMT
        Subject: CN=5a3ade5a378de97352c2d1ca6cf7ede84a0d2aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:4f:4c:9c:91:ef:cc:9f:23:30:5b:29:52:
                    c5:6f:22:86:50:ba:bb:11:c6:c8:71:94:e3:28:b3:
                    c4:59:a8:c7:c5:d2:9e:1b:f3:cd:bf:cf:45:8e:57:
                    89:e5:78:62:a4:6c:c4:67:46:54:ab:73:e2:bb:bd:
                    19:83:ca:a8:f6:e8:61:3d:01:0a:69:2f:b8:27:27:
                    8a:68:d4:c0:46:05:45:39:fe:2e:86:cd:7e:2e:f8:
                    38:24:49:22:a3:f3:e8:62:3c:e7:20:d5:b2:f0:c1:
                    c0:ce:89:9f:b5:3d:dd:39:af:b1:79:ab:06:63:11:
                    c7:9d:e5:c7:16:ed:5d:db:03:dd:5d:9b:e4:cf:09:
                    08:7d:33:c6:15:9e:92:c7:6a:2d:9e:4a:30:8f:f7:
                    a0:91:7d:11:0f:c0:15:5c:f5:be:c0:2f:10:df:6b:
                    c0:b8:7e:22:5d:d9:83:4d:fc:a6:86:af:37:be:24:
                    11:66:9d:0b:e6:bf:a7:65:55:8e:8a:58:c1:dd:b8:
                    32:f7:be:a6:46:b6:c1:f5:a6:6d:af:b1:d5:71:3b:
                    a5:c2:99:e0:f1:a9:09:de:fd:4f:f6:27:40:9b:27:
                    ca:bc:e9:38:15:0d:64:c5:b0:6a:62:c6:d3:60:db:
                    c7:3c:a9:ea:7a:de:20:32:50:a4:95:ce:f9:82:a4:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:DE:5A:37:8D:E9:73:52:C2:D1:CA:6C:F7:ED:E8:4A:0D:2A:A4
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:0a:a1:22:94:c1:95:ae:bc:a6:a1:b0:fc:45:c7:d2:b9:f0:
         4d:2b:27:cd:ab:52:ed:18:37:40:9a:ec:b9:cc:f8:80:4b:e7:
         12:58:a3:14:64:8a:46:fb:89:e2:00:ee:6b:ad:e3:3e:46:5e:
         76:99:a1:50:78:f8:94:22:c6:88:e1:4f:c7:03:de:42:0a:bf:
         ca:e5:a2:c1:74:9b:7b:e7:e6:e2:39:d7:ec:d5:f9:e0:53:ae:
         70:58:b3:22:1f:ae:43:49:a6:e6:9d:e4:a9:63:ee:eb:88:9c:
         48:43:78:7f:39:5e:2f:b4:d3:30:90:b9:84:ca:53:b4:84:8a:
         ec:fa:45:0d:83:2a:c5:e2:8f:d8:8d:3c:ea:a5:51:38:74:c4:
         d3:f9:94:d6:4d:b2:84:e7:9d:c7:8f:4c:79:1c:1d:18:36:53:
         b9:94:2d:86:bd:d9:3d:e4:4e:87:e4:28:88:3c:6e:41:e1:ea:
         e9:3f:c8:88:6c:eb:a5:e5:9f:60:52:f0:cc:1e:17:fa:83:92:
         4b:67:64:cd:93:90:81:3e:1b:08:4c:68:b5:8d:2f:3e:d5:12:
         74:ca:1a:d4:d7:24:8b:9f:21:0f:9b:3a:24:7b:71:6f:c4:62:
         03:8c:b3:67:a0:76:57:eb:a0:e5:3a:75:5f:ac:d2:01:f5:0a:
         29:b8:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:54:34 2025 by rpki-client