Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File:                     TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier:          tUQsEXKKs1aXi7phL5mhMm/kbDIK9+xoaGoOwnt63jM=
Subject key identifier:   E2:0B:66:A0:4D:AD:25:61:36:C2:4D:96:26:C4:4F:0B:6E:2E:38:59
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer:       /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial:       01988F22436323A693A789BFAC978082E42B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number:          1600
Signing time:             Sat 09 Aug 2025 14:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 14:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 14:00:43 +0000
Files and hashes:         1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
                          2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: QmBbCL3UZNVkzZjeIYoSKaXARKkhBXfMeUCt2YezBSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:22:43:63:23:a6:93:a7:89:bf:ac:97:80:82:e4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
        Validity
            Not Before: Aug  9 14:00:43 2025 GMT
            Not After : Aug 10 14:00:43 2025 GMT
        Subject: CN=e20b66a04dad256136c24d9626c44f0b6e2e3859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a4:dd:d5:9b:68:0b:58:4c:e3:0c:3e:15:25:
                    e3:33:99:64:1e:c3:15:15:d2:44:db:45:b3:f3:eb:
                    67:42:32:46:bb:3f:e3:20:84:dd:11:b9:f5:e4:18:
                    ad:11:a3:b8:6f:4c:bd:80:c7:1c:a1:a3:4d:c5:b9:
                    53:00:f8:f4:7d:8d:3b:4e:aa:74:a3:5d:f6:f7:fc:
                    fd:bd:f0:10:4b:ed:a6:52:af:9a:7b:66:46:6c:d0:
                    07:28:35:e6:8b:38:0d:88:58:26:86:d0:be:95:33:
                    a8:43:8a:f7:19:19:ef:ba:c2:0b:ba:2c:c3:68:e9:
                    34:f5:5f:a0:11:43:c7:dc:a8:29:78:f8:b2:48:39:
                    98:24:80:4b:3e:60:75:35:f9:92:8f:99:59:74:a9:
                    00:5c:52:63:9a:74:e7:6e:fd:b1:6b:7f:f6:41:ef:
                    dd:62:06:f1:6e:63:37:ef:73:6d:f6:c4:81:15:6b:
                    35:07:8d:60:fc:e8:72:f0:f2:ab:ca:df:a8:75:e2:
                    2c:ab:a2:1b:3d:19:b9:46:9f:9b:7c:18:15:72:f9:
                    1f:c6:cd:82:95:f4:0a:fe:c6:c4:23:35:b5:de:42:
                    dd:04:0b:d6:6b:45:1b:08:5e:66:d1:33:5c:2b:9a:
                    55:93:39:51:4b:00:68:bf:38:9b:c6:86:eb:f9:73:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0B:66:A0:4D:AD:25:61:36:C2:4D:96:26:C4:4F:0B:6E:2E:38:59
            X509v3 Authority Key Identifier:
                keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:31:b6:33:86:63:67:59:0e:66:ec:a7:1c:12:c4:82:f7:
         7d:2e:81:d6:70:ee:0d:67:eb:54:fe:0c:72:ea:12:83:fb:27:
         a5:14:05:14:9c:69:6f:d6:64:13:ac:3a:ca:14:b0:d9:b5:da:
         46:d0:6c:80:7e:f1:b4:0d:3d:b0:8a:bc:92:49:9c:85:8b:0d:
         77:9b:47:f7:c0:6b:d4:c6:7b:bf:e4:cc:29:6f:b2:8f:20:72:
         b3:c6:bf:ff:2c:83:e6:60:eb:ba:2f:50:66:be:47:da:e1:53:
         ad:d0:8d:8a:66:ed:bd:d0:4f:cf:16:8a:c9:b5:01:8b:f6:10:
         3a:4b:86:50:84:21:75:c7:27:78:e6:ca:ad:20:c4:c9:45:f8:
         79:fb:cc:c4:87:4e:c7:02:ce:18:14:51:cc:48:52:0a:1d:4e:
         9e:17:5e:62:df:7c:94:db:c2:e2:ec:81:d3:e4:45:99:16:19:
         a4:be:8e:33:70:18:0e:8d:48:92:3e:41:2a:8e:be:90:00:2d:
         a8:ca:84:7f:db:f5:20:da:4f:c7:97:46:19:1f:d0:55:50:df:
         a8:ec:fb:a3:3c:7e:77:b6:cd:20:b4:1b:fd:f4:24:73:7c:7b:
         1a:cb:8f:85:b7:d8:2e:21:ec:5b:61:90:ea:e7:d2:a2:2c:8a:
         82:89:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:36:26 2025 by rpki-client