Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
File:                     EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json)
Hash identifier:          Vw7r1nLoWIpC0nWXzhF7cDImaU0a5lbqRtAeXkSLr1g=
Subject key identifier:   52:C5:C5:63:CF:93:B6:EB:51:01:B1:57:1C:DD:8B:DA:A3:7A:C9:05
Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6
Certificate issuer:       /CN=10515090f850e337eb3b118a157e4e39083b77a6
Certificate serial:       019873E3433FACAAD19D85D5896AFECE84B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 07:02:10 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:10 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:10 +0000
Files and hashes:         1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: i2EiDXy31aA5Hq/cKRGSL/+5BeOToNPXayt0Ds1oj/4=)
                          2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:43:3f:ac:aa:d1:9d:85:d5:89:6a:fe:ce:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6
        Validity
            Not Before: Aug  4 07:02:10 2025 GMT
            Not After : Aug  5 07:02:10 2025 GMT
        Subject: CN=52c5c563cf93b6eb5101b1571cdd8bdaa37ac905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:e3:f3:bf:c5:d3:bf:90:60:76:f2:98:f3:
                    f3:88:67:ec:71:47:6f:3d:d8:e1:80:c0:5f:dc:33:
                    68:0e:6b:af:84:19:60:73:cb:ed:d4:24:ab:0e:a5:
                    56:ea:6c:45:3c:88:01:a0:41:41:19:e8:4d:f4:52:
                    25:77:ab:12:e6:ad:5e:3c:ee:43:0c:99:e2:ea:89:
                    3f:22:95:4a:2a:7a:c0:e1:0e:dd:5f:bf:35:d3:83:
                    cd:4b:82:3c:b0:64:55:c7:47:71:47:f2:1c:45:69:
                    51:64:fc:24:e4:c7:60:cc:b1:c6:b3:7a:5d:5e:6f:
                    f4:fe:85:2a:e6:99:de:c4:25:fa:5a:cc:69:b2:37:
                    3c:a5:02:ea:75:f1:3b:c0:3b:24:16:b5:da:8a:fb:
                    93:98:3b:e8:d6:41:37:09:4a:e2:7f:8e:ff:80:df:
                    62:e3:72:7d:4b:2b:da:da:19:3e:e8:70:e7:eb:63:
                    bb:22:fd:19:01:a5:e0:49:4f:ba:5f:9a:6b:b5:2a:
                    71:f8:41:5b:6d:0b:dd:eb:99:fd:a4:1b:38:90:11:
                    4e:8a:3e:74:ca:9c:a2:24:33:32:5a:83:ba:fa:6f:
                    4b:f3:75:15:f7:00:45:76:36:79:32:fc:d1:81:ff:
                    53:b5:49:80:80:3d:40:1b:3c:51:6d:06:f4:5a:1c:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:C5:63:CF:93:B6:EB:51:01:B1:57:1C:DD:8B:DA:A3:7A:C9:05
            X509v3 Authority Key Identifier:
                keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:c5:04:f3:14:ab:15:d7:e9:02:b8:02:86:0a:bb:3b:46:
         77:c8:27:bd:2e:d0:14:aa:c7:c1:80:7b:2f:8a:92:03:43:d9:
         50:fb:0e:7c:f3:06:92:08:21:01:39:07:8a:3c:f4:1f:63:3e:
         4b:61:d4:f3:1b:b3:03:a3:f3:a4:f7:a8:3b:92:03:95:1d:26:
         93:64:2d:5e:27:c6:db:57:12:82:e3:b2:50:33:79:2a:81:dc:
         67:02:bb:7f:64:06:00:91:8b:bd:37:54:a9:55:89:63:3a:75:
         f2:5f:29:11:54:a2:ec:71:65:ce:ae:74:6d:d2:68:9b:76:9b:
         d5:f3:e5:c4:e6:b7:5f:1a:2e:63:e3:03:9b:3d:d5:80:9c:a3:
         5b:36:15:d4:21:cb:f8:9f:d1:91:80:37:9b:02:46:4e:17:ea:
         dd:4f:cc:eb:81:e9:e1:fd:95:1f:fa:ad:6f:f5:d3:30:a2:6f:
         fc:21:25:5a:38:31:64:23:54:38:37:57:f4:30:14:af:e9:a8:
         99:17:d6:46:18:31:2f:1b:e5:db:0a:1c:5b:32:70:aa:11:bc:
         bf:30:d4:64:85:ff:7e:84:42:fe:a2:51:12:db:be:23:e0:95:
         9d:d8:70:34:50:f3:41:4d:67:f1:8a:34:b4:18:51:55:0c:78:
         9a:5c:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:27 2025 by rpki-client