Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File:                     rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier:          YOVSn1w1HEPLwBPkgKdl/QD0F1J0vTxVcyA/Ks2Ez2k=
Subject key identifier:   88:94:B8:88:5E:AB:04:8F:36:2F:72:5C:8A:BD:00:5C:EC:CA:E5:69
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer:       /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial:       01987450685BA87EADC1C207C073DF6DCF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 09:01:23 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:23 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:23 +0000
Files and hashes:         1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
                          2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: ve/HGaROo1wM4goYPYYBlHy/rKVbfWNNn1JtJWamxsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:68:5b:a8:7e:ad:c1:c2:07:c0:73:df:6d:cf:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
        Validity
            Not Before: Aug  4 09:01:23 2025 GMT
            Not After : Aug  5 09:01:23 2025 GMT
        Subject: CN=8894b8885eab048f362f725c8abd005ceccae569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:72:eb:d0:a1:46:da:32:00:b1:89:3f:00:
                    8a:97:17:68:ce:c2:d2:3a:05:c9:05:c8:fb:3e:a5:
                    a9:b8:1b:09:99:3c:08:ac:2b:15:d9:ad:ca:e4:3f:
                    f8:94:ac:7f:e5:93:93:ec:fe:22:08:bb:af:39:ca:
                    67:e0:5d:b9:96:a9:c4:bf:63:b0:79:92:d3:8f:63:
                    1d:f4:bb:c6:0b:24:0d:72:e0:f7:ff:80:07:54:5e:
                    e0:6b:39:db:60:f1:72:2d:cd:ee:37:0f:18:cd:29:
                    3e:5d:fd:4e:25:13:bc:30:12:5b:15:ce:82:06:f6:
                    ad:17:30:1e:c1:3b:a3:be:f3:22:5c:71:af:f6:37:
                    d9:57:21:b1:91:89:3f:47:49:8a:20:ef:04:b9:67:
                    42:a0:75:a8:6d:10:e6:42:08:30:ec:ac:fd:40:2c:
                    0c:83:3d:13:f5:03:1b:76:62:0f:32:69:b9:eb:43:
                    b2:da:bd:63:2c:74:1b:a5:0a:8b:66:3b:5b:75:33:
                    cf:8e:7c:dd:d1:ef:90:3c:83:a2:d0:01:98:b9:68:
                    65:1b:98:66:4e:01:45:ce:4f:53:49:34:1c:a3:f2:
                    74:f0:8d:07:e0:aa:51:a6:97:85:e7:b1:22:4b:6d:
                    9d:a4:c0:e0:1f:6c:a8:9d:7e:f7:04:73:dc:2a:7f:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:B8:88:5E:AB:04:8F:36:2F:72:5C:8A:BD:00:5C:EC:CA:E5:69
            X509v3 Authority Key Identifier:
                keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b1:7a:5d:fc:57:da:da:47:bd:98:5b:e7:bc:09:e9:aa:f1:
         6c:ea:8f:c8:98:1f:dc:4a:55:6f:b1:23:21:93:19:66:28:84:
         fb:3d:c8:c7:fe:1c:a4:21:5d:b4:a8:fc:6e:a8:26:66:a8:87:
         35:97:c0:95:b4:29:1d:11:11:a0:3b:36:c0:2f:09:48:a4:ae:
         05:91:b7:10:99:65:28:0a:70:48:6b:81:f2:83:3d:b1:8a:af:
         94:2b:70:04:8b:0c:1b:34:fc:53:ec:af:3b:68:26:c0:5c:83:
         44:78:85:cd:05:37:a6:4c:22:63:e3:4b:6e:ac:c2:70:aa:69:
         ae:f2:69:17:c7:4f:45:a9:c8:d3:a9:57:3a:d7:6f:77:82:b9:
         2f:7d:6a:af:f9:2d:37:18:ee:8c:d7:f0:b7:f7:d6:a2:63:93:
         f8:0d:d9:37:4c:98:24:19:40:8c:ff:9b:32:3b:8f:50:2a:5f:
         c0:52:60:9f:bf:1f:ed:ee:de:fe:16:1a:8d:7c:30:7e:37:e3:
         42:d6:3c:4a:ad:87:24:1c:bb:82:70:a2:9f:3c:d4:7e:cb:cf:
         c4:70:b4:0a:48:cd:a0:85:63:73:eb:c6:c6:93:8e:50:07:63:
         11:ba:30:ba:b8:45:b2:8d:5e:e6:d6:d7:17:22:41:4a:01:b1:
         55:ce:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:12 2025 by rpki-client