Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          OIowlbNER/BaVFVE7DmrGo7dOyW3lbvBrQ+SQFyO5RQ=
Subject key identifier:   DB:C0:60:64:57:E2:81:54:A1:EB:00:74:FE:88:CC:0C:D3:74:55:D0
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       01989223D9FA530CD049181CB0BE712A30A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 04:01:19 +0000
Manifest this update:     Sun 10 Aug 2025 04:01:19 +0000
Manifest next update:     Mon 11 Aug 2025 04:01:19 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: 9v+PrCcPxiRUrsil4R8W/SyDQg/BBVxWjxYS7utnCnM=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:d9:fa:53:0c:d0:49:18:1c:b0:be:71:2a:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Aug 10 04:01:19 2025 GMT
            Not After : Aug 11 04:01:19 2025 GMT
        Subject: CN=dbc0606457e28154a1eb0074fe88cc0cd37455d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:de:77:a9:05:7c:d3:e0:9e:a7:33:25:39:
                    1c:cc:6f:32:3f:b4:1f:27:21:ce:f8:ad:81:9c:6e:
                    44:88:60:c2:e6:5a:d3:51:6a:5a:30:95:ee:f0:a0:
                    ea:94:95:a4:ba:f6:e9:11:b1:01:47:16:e1:6a:ac:
                    d2:e0:96:dc:69:dc:a4:b6:3c:27:7d:f5:2e:81:26:
                    d4:4c:37:29:77:c6:a5:4c:e7:6d:89:50:90:00:4e:
                    a9:40:3e:97:8a:1e:d1:7e:5f:96:7b:b9:25:3f:6d:
                    70:6d:12:00:c5:0a:a0:31:7f:01:68:e5:e3:a2:57:
                    69:d0:ee:bb:f7:44:84:d2:ff:30:1b:fe:93:0a:9b:
                    45:78:e0:e6:8a:2b:59:39:51:4f:74:a4:dd:d6:f0:
                    e4:92:59:80:e3:48:40:b0:61:b2:f0:13:8d:8d:3f:
                    08:b6:f4:ea:3d:ba:01:eb:2c:34:bd:96:5a:01:bb:
                    1f:fd:86:82:cb:b3:4f:60:23:8a:83:05:b3:49:3f:
                    90:41:d0:20:34:ce:18:fb:2e:ef:e5:69:5a:a6:fe:
                    de:9e:cc:10:f5:95:c5:c6:eb:f9:5d:69:4d:cf:61:
                    e8:24:11:c3:5b:34:86:d6:22:4b:c5:3c:51:99:d4:
                    28:cf:39:c3:93:16:e9:63:01:ab:cb:13:7e:3b:e3:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C0:60:64:57:E2:81:54:A1:EB:00:74:FE:88:CC:0C:D3:74:55:D0
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b1:00:f4:22:3d:42:f7:9d:8d:40:5d:b7:31:bd:f3:bc:c1:
         db:96:54:2c:28:83:79:63:e7:3d:8b:51:ba:22:b6:5f:33:55:
         7f:03:cc:ba:ea:8d:cb:bd:ca:76:31:50:14:68:58:28:df:1d:
         f2:6f:a2:74:5b:b2:37:f6:bf:5f:92:93:30:26:04:cb:9c:48:
         a3:e9:a3:46:c3:de:4f:02:9f:8d:e1:ca:c9:41:9e:53:1f:4b:
         be:f1:7a:37:63:3e:e3:d6:2f:27:01:9f:a2:85:c3:3f:af:ce:
         12:5c:ed:95:88:c5:f9:7e:a1:61:7b:25:cc:d9:76:2f:50:73:
         68:39:c6:5d:3e:a8:bc:95:56:a7:b3:31:38:c2:b4:ae:2e:17:
         6a:b9:2a:aa:62:61:97:78:9d:57:c3:a2:26:d5:78:16:ec:db:
         25:81:29:96:71:93:79:c5:f3:71:95:f0:eb:98:cb:3a:80:c4:
         45:34:cf:07:6e:85:4c:a4:69:42:21:29:7c:bd:3a:a0:87:e3:
         e6:5c:90:9c:42:12:be:ad:ee:2d:70:9e:09:d6:50:56:31:b4:
         61:8f:0b:c4:51:42:06:2d:9d:5f:d2:e4:a7:d7:ae:48:ee:ab:
         b4:12:13:c3:1c:ad:83:81:30:3a:a8:78:01:04:7c:bf:44:53:
         fb:99:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:45 2025 by rpki-client