Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
File:                     1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft (raw, json)
Hash identifier:          aNhyHOy6lOvoxJ/j5FJiqrwJ0M7JhjXJtMDrQwJT/ys=
Subject key identifier:   3A:62:AF:AA:67:44:12:BB:41:7B:28:45:A5:F3:89:B1:F8:4A:C7:0B
Authority key identifier: D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27
Certificate issuer:       /CN=d59d3b8b044f1d35ff27190b7575f30806b11327
Certificate serial:       019875D02E6C65F31E6B86CFD2A3E4B79344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
Manifest number:          1169
Signing time:             Mon 04 Aug 2025 16:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:34 +0000
Files and hashes:         1: 1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl (hash: d8jzf9wBHoeU4ItrlrNd1i047nUnDLNLuvTaedwO3xw=)
                          2: EZ-qAG3dRSrRRx3mKhOOsjfisSg.roa (hash: x2Dmi+4smxCxvQZjFz/Vf1NND+S31iKqxyrBOvRmF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:2e:6c:65:f3:1e:6b:86:cf:d2:a3:e4:b7:93:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d59d3b8b044f1d35ff27190b7575f30806b11327
        Validity
            Not Before: Aug  4 16:00:34 2025 GMT
            Not After : Aug  5 16:00:34 2025 GMT
        Subject: CN=3a62afaa674412bb417b2845a5f389b1f84ac70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:6a:4a:51:45:39:d0:8f:5d:f3:19:76:39:
                    fd:64:67:a8:d5:86:90:b3:39:93:f7:9b:a0:36:ef:
                    6f:68:66:f4:2b:06:77:1a:11:1e:82:8e:58:58:1c:
                    20:2d:ae:67:89:5e:d2:96:07:63:cf:13:7a:2c:7b:
                    f6:8e:f3:72:dc:07:9f:f8:b8:9f:60:d7:1b:d0:af:
                    82:42:1f:a0:d7:dc:58:3e:c6:d0:94:78:74:73:31:
                    d2:e0:c5:b4:11:ed:af:f5:28:d0:84:7b:8f:fa:24:
                    49:98:72:de:6b:e1:bc:20:77:50:3a:68:fd:89:72:
                    19:7a:38:f4:7e:a8:6c:1c:ac:e6:13:f0:0f:60:51:
                    e6:c3:0f:31:15:ba:19:ba:91:19:45:97:e8:f5:4d:
                    70:fa:04:3e:0d:ea:93:5f:25:5e:12:e4:3b:57:b1:
                    fc:66:17:97:d3:54:fb:65:06:6f:c3:fe:03:b5:98:
                    cb:68:4b:27:35:01:6e:4d:20:bf:a7:c1:4f:9e:7b:
                    fc:9c:4e:24:00:f3:c8:91:7e:95:9a:6e:0d:5e:ac:
                    e3:be:40:85:cb:68:63:eb:04:5b:74:70:64:12:94:
                    c1:a0:d3:ba:cb:90:25:34:b0:98:9f:b0:db:05:ca:
                    bd:59:db:a0:36:83:3f:9a:9c:63:62:1e:ea:a7:69:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:AF:AA:67:44:12:BB:41:7B:28:45:A5:F3:89:B1:F8:4A:C7:0B
            X509v3 Authority Key Identifier:
                keyid:D5:9D:3B:8B:04:4F:1D:35:FF:27:19:0B:75:75:F3:08:06:B1:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z07iwRPHTX_JxkLdXXzCAaxEyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f943e9-e03b-4d7b-8c89-5b3732f48081/1/1Z07iwRPHTX_JxkLdXXzCAaxEyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:66:33:91:f3:f5:fb:76:05:eb:68:f4:48:c4:ad:73:a8:ff:
         05:2a:fc:d0:f3:5f:d6:2f:e8:70:d8:87:0c:ad:69:00:a9:34:
         0b:ee:9f:f1:70:0e:78:5c:f7:25:ed:1e:a3:96:2c:6b:46:25:
         8c:ea:06:3b:e3:8e:a0:3b:9c:a2:cc:69:b5:c2:b7:9a:5b:67:
         6c:1b:ae:8a:50:f8:88:b2:b9:bf:80:b5:1c:ce:63:49:b1:59:
         9e:63:92:85:3e:21:62:6d:2b:27:de:18:cc:3d:ba:0e:43:cb:
         dd:46:a2:36:4c:8a:3a:00:84:f4:fa:f3:ff:23:44:9a:11:01:
         91:c3:11:db:23:29:2a:f9:7c:de:6f:ef:01:60:99:82:a7:5f:
         42:cc:ca:2f:2a:50:27:b3:da:f2:4a:e0:e4:e7:03:c8:39:16:
         6b:3e:0b:fe:e4:8b:bb:2c:3b:fe:83:09:df:61:d6:ca:72:46:
         ab:91:06:5c:37:dc:13:17:98:2f:43:c2:ca:8a:63:86:3b:cc:
         b9:b4:16:77:8c:85:af:6d:30:22:57:a6:62:86:82:af:5a:72:
         74:5e:59:d9:26:db:bb:33:ea:de:de:94:ac:64:9c:7e:10:50:
         be:0f:91:4c:6f:a1:d2:5a:73:77:0a:03:5a:a8:f2:be:f0:f1:
         e7:85:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:54 2025 by rpki-client