Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File:                     dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier:          ogzXYib4Mkov8GTRUwX4gM9VCC94zONbIyK4LI1NANg=
Subject key identifier:   4C:2F:D1:F7:59:62:3A:26:06:72:B1:71:BC:2C:57:36:4C:E4:C7:28
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer:       /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial:       0198737443C197C29CE1568C639E27684474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 05:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:55 +0000
Files and hashes:         1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
                          2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: bFIT/QfiEBkIngpkg5tKa+58upU9nxnqF4ImQc3gZm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:43:c1:97:c2:9c:e1:56:8c:63:9e:27:68:44:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
        Validity
            Not Before: Aug  4 05:00:55 2025 GMT
            Not After : Aug  5 05:00:55 2025 GMT
        Subject: CN=4c2fd1f759623a260672b171bc2c57364ce4c728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:c1:97:94:2e:33:bc:8b:70:03:fb:24:12:
                    f1:28:da:f2:54:f7:e0:14:09:a3:56:5f:a9:78:73:
                    96:5b:09:11:cb:4d:8a:7e:8e:6d:fa:f4:88:7a:6f:
                    0d:99:9a:e8:f0:d5:97:88:a4:ec:ec:b6:72:ee:13:
                    37:5c:66:a0:d5:43:8d:76:97:82:8a:a8:c2:59:23:
                    9c:b7:fb:71:2f:ed:dc:d9:c7:db:66:78:e6:d6:a0:
                    29:1c:04:72:56:aa:39:e3:82:7d:40:45:a2:b1:f5:
                    64:a1:0e:52:9a:3c:55:d9:de:4d:5a:6d:a9:20:ee:
                    da:d4:26:41:12:98:08:ea:4a:cc:f7:e7:bc:d3:99:
                    55:f9:29:01:19:64:a5:ea:d2:a7:0a:9e:39:c9:0d:
                    99:77:4d:43:54:be:0d:a3:2e:d5:ef:eb:75:25:a9:
                    cc:ae:49:33:e7:85:e8:50:b8:8f:56:35:c6:fc:f4:
                    e1:79:77:3c:fd:8b:40:ad:e2:3e:4c:47:c8:98:b2:
                    b4:20:0e:08:f9:07:ce:d7:53:b3:c6:0e:8c:b8:46:
                    f3:e8:fd:08:2e:12:13:b2:2b:7c:89:98:eb:2c:3a:
                    de:62:9e:08:c4:4c:27:2b:19:d0:87:51:33:85:96:
                    2d:d5:82:b4:ae:f9:b7:13:04:60:42:13:03:37:23:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:D1:F7:59:62:3A:26:06:72:B1:71:BC:2C:57:36:4C:E4:C7:28
            X509v3 Authority Key Identifier:
                keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:52:ed:98:9b:5b:f4:42:03:c8:a1:f4:74:4d:5d:b7:72:
         30:23:6f:90:a1:f4:1d:88:a6:cf:37:5a:f1:2b:fb:f4:dc:72:
         4d:30:c4:7b:e3:d2:0e:90:b8:2a:29:c9:93:15:13:51:28:42:
         2f:ce:4c:44:70:ef:24:06:45:2d:9c:7f:b9:dc:60:cf:54:69:
         a6:4b:e9:c3:85:ae:c5:98:9c:a3:d8:b7:f4:a3:90:d7:54:42:
         db:df:fe:e9:17:5d:1a:a5:08:82:b0:08:9a:2d:fa:e2:fa:3d:
         22:42:57:a4:4c:22:ba:53:d1:33:02:c3:2a:31:2c:71:46:d6:
         a5:f2:9b:65:ae:06:6a:63:c8:6a:14:b9:8a:7a:43:c4:5a:6e:
         39:7b:b9:97:e9:f1:96:76:59:41:5e:99:47:38:8a:64:63:75:
         28:d1:12:e8:ad:9f:a5:46:30:40:1e:a4:88:3c:02:fe:0d:49:
         51:4b:99:5c:fc:d2:4f:0c:a0:3c:3d:1e:ab:6e:f0:36:22:03:
         5b:af:b0:2b:7d:59:6b:24:44:16:a2:5e:bb:ba:90:54:c7:5c:
         e6:af:ae:9f:d3:da:4e:32:5a:c4:1d:d1:5a:7e:66:f6:8c:e2:
         93:03:fa:f6:cc:22:8c:46:41:47:0f:fa:ed:70:9f:53:0b:f9:
         e9:ea:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:07 2025 by rpki-client