Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File:                     RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier:          0yEP3+3oBkT1+R1PnAHZdjfPaOJNa0NQqaEi7KhOwT4=
Subject key identifier:   E4:D2:6C:E3:17:A2:80:43:89:AE:22:01:FC:69:27:C6:F8:56:76:0A
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer:       /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial:       01987450127A29F1BEE6DF8C45DCD15C6275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 09:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:01 +0000
Files and hashes:         1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: eQjPklLnAWYD9y8O8ktnRlkDQSpwkkqmJ14dq1lAFDA=)
                          2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:12:7a:29:f1:be:e6:df:8c:45:dc:d1:5c:62:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
        Validity
            Not Before: Aug  4 09:01:01 2025 GMT
            Not After : Aug  5 09:01:01 2025 GMT
        Subject: CN=e4d26ce317a2804389ae2201fc6927c6f856760a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:0b:df:f9:82:d7:3e:20:fd:2f:af:dc:10:
                    ce:02:9b:e2:7f:39:59:1e:78:ce:a1:a1:79:57:e5:
                    46:e0:75:10:83:0f:aa:be:b7:51:a4:a8:06:44:8a:
                    95:41:fa:90:03:5e:d5:f9:e8:6e:b1:7d:7d:28:e6:
                    b0:07:48:58:1e:67:ce:bd:58:14:ec:b6:7c:99:75:
                    19:53:b4:dd:ee:ef:01:0a:24:b3:16:81:f5:ed:d4:
                    55:e2:e2:ce:71:9a:e5:74:43:9c:4f:b5:6a:a5:4e:
                    5d:7f:0b:62:ec:10:3e:9f:10:9a:e0:4b:02:27:98:
                    5b:24:a4:07:f4:cb:ee:48:f6:f6:7d:d4:68:33:2a:
                    2d:2c:d7:8c:80:8a:71:bc:13:fb:6f:f2:18:f0:8d:
                    7b:c6:09:34:95:ea:cf:44:4c:e1:92:0b:bc:3d:63:
                    33:84:6c:9c:3d:e6:67:c3:ff:51:c0:cd:97:5a:89:
                    c7:61:ca:cd:5a:5f:d7:8a:e9:98:41:c8:86:6e:cd:
                    52:2e:ec:c0:02:41:43:8e:f0:ea:80:fc:d7:ad:33:
                    0a:fe:3d:69:c6:8e:9b:31:1d:25:45:f1:68:b6:2a:
                    57:b9:3a:4a:11:62:d7:58:ca:37:6a:fc:31:92:ca:
                    f3:2f:a6:62:49:ff:d8:65:24:85:53:fe:68:4d:62:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:6C:E3:17:A2:80:43:89:AE:22:01:FC:69:27:C6:F8:56:76:0A
            X509v3 Authority Key Identifier:
                keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:71:14:78:f0:bd:a8:68:81:08:58:f8:8b:11:1a:44:8b:
         72:4d:5c:8a:d5:12:a0:18:27:eb:7e:6d:64:1c:d0:81:c4:df:
         d7:24:80:4f:af:e3:db:35:dd:2b:d5:d5:1f:15:d0:13:d2:1a:
         85:75:f6:35:f4:d9:5b:54:af:4b:a9:c0:63:52:ac:81:d1:85:
         35:5c:c4:9e:61:e6:34:e3:a1:45:d6:ef:08:1c:3d:7c:2d:84:
         34:b6:1a:3f:2b:38:59:27:06:51:32:32:97:c8:42:a5:55:ba:
         8c:83:cf:4d:b6:32:e9:72:35:98:84:ba:f2:f9:7b:18:14:a4:
         23:32:91:09:8c:a4:8a:a2:c9:ea:24:01:31:25:3d:e6:4d:0b:
         8e:95:4c:03:ec:74:48:0a:94:db:67:a6:4f:4b:f7:36:e8:fc:
         96:fa:ce:f7:6c:ce:e0:5a:75:37:ad:96:9d:02:38:b9:79:d6:
         8f:9e:0d:2d:a5:92:c3:4d:3b:76:3e:6f:f6:1c:c0:4f:d9:da:
         41:23:a2:1d:06:1b:9b:3d:2e:cc:24:91:74:b5:97:b3:59:a2:
         08:da:49:58:7f:a4:34:89:26:5c:86:2f:1e:c1:05:b2:75:21:
         05:7d:4e:d7:18:6c:64:bf:80:8d:97:c3:10:06:1e:33:57:76:
         ac:bd:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:51 2025 by rpki-client