Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File:                     0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier:          9roN1TayEqeEG95hAdpeZ4Vl2M7GOtKIHrUFY/GDhbE=
Subject key identifier:   4C:D7:C7:3D:6C:9D:D2:38:B8:48:2B:A5:81:7D:F2:66:64:B7:B7:B4
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer:       /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial:       01987FE717E421A5C33B5A6D09118D60E599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number:          1628
Signing time:             Wed 06 Aug 2025 15:01:47 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:47 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:47 +0000
Files and hashes:         1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: EtEbXIDxuiGhsheHRMPjGWCcqoDW+0vwOSa6Kcu1WYA=)
                          2: 1zcJBoE5neBc0dl2FYFDEe5fu7Y.roa (hash: PawysN5ZPYfORYhXBxVk0yVneMk4E7J9CNIzG0En6lE=)
                          3: 38eNwHAcwiuiHUoqT2CWJiceCZk.roa (hash: +95TEcG6Ls7CGGIid26A7j5udBRR3S+B132Rz2Go6g4=)
                          4: KTz87Ii306kCrtBGQ5-4prHl2KE.roa (hash: 6gk/KdzORYczgKREuCN11bUc44VRINkc9GPxPIAUU0E=)
                          5: ThdvCVcdBiAo4xc9KrZRGtoVTn4.roa (hash: 5enzMSWHLd+Sp661pUbYfrfG5akCg6FvCWgHesqa67Q=)
                          6: aZdqJ17S5RRkzSS1Tb7Ov8io9M8.roa (hash: BfeCDfUov6DgJhwmZIrlwm+bQcrqsV+1Qg81n9OEaL8=)
                          7: b0zeaH6TTJoo0Ts_AFed0EeWqoM.roa (hash: 0wCRWNFXbqVei5t4ngUa94GvBqIDZfH9z8HiSKJ6vT0=)
                          8: tPRSQBHqAt__Hc0IBm-wvE7P9hw.roa (hash: kjuyUkwS8CF+Jh5frGKWkshFwtvNfieIuRX3/8igw/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e7:17:e4:21:a5:c3:3b:5a:6d:09:11:8d:60:e5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
        Validity
            Not Before: Aug  6 15:01:47 2025 GMT
            Not After : Aug  7 15:01:47 2025 GMT
        Subject: CN=4cd7c73d6c9dd238b8482ba5817df26664b7b7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:59:3a:da:96:c1:40:93:1f:7c:e9:6e:33:
                    55:24:5f:df:5a:af:91:bd:eb:ec:06:ac:a5:ec:2d:
                    76:d2:6f:24:a3:37:24:b4:fc:76:c9:e4:e8:d0:a7:
                    b6:aa:5f:19:78:9c:32:ca:cf:73:fd:29:5c:0b:a1:
                    4d:ee:d1:76:08:8c:c7:d4:4a:3a:e2:7f:a0:06:fd:
                    ce:dd:28:e4:65:f6:b4:19:33:ba:e6:33:b4:25:2d:
                    1f:19:ca:f6:34:ae:dc:4d:c0:dc:11:16:fe:c8:70:
                    05:56:d5:c9:bc:f1:84:5b:1c:d3:db:19:e4:0b:1d:
                    4a:cf:0c:16:af:2d:d2:69:31:1b:ae:91:16:08:5a:
                    90:2b:43:f8:bc:16:cc:bc:b8:d9:90:90:d6:2d:df:
                    d0:95:da:0e:79:f6:ef:55:bc:d9:e0:57:13:01:71:
                    d2:32:5e:db:77:b9:ea:b9:f1:90:10:9f:a5:3c:0a:
                    70:be:37:28:14:a6:59:a3:26:da:aa:c7:ac:90:fc:
                    52:a9:f1:46:ae:19:f1:4a:26:b3:3c:83:18:6d:78:
                    69:a2:f4:e5:6b:93:df:57:94:d6:16:01:1a:f9:94:
                    3c:86:d2:da:db:85:d0:49:c5:fd:2c:8a:3f:d8:c2:
                    13:3e:fb:95:21:e4:c6:86:43:0f:9b:4a:78:e9:d4:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:C7:3D:6C:9D:D2:38:B8:48:2B:A5:81:7D:F2:66:64:B7:B7:B4
            X509v3 Authority Key Identifier:
                keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:bd:1f:9c:26:c0:9c:c6:03:15:d5:83:6d:91:d0:49:a8:db:
         21:ec:7e:a6:90:ce:f3:e8:24:b9:8b:95:57:b7:0c:af:04:89:
         44:66:27:bb:46:c5:9a:3d:c9:77:54:d2:d7:85:63:fc:1f:f3:
         fb:2e:1f:66:6b:9a:4e:f2:a6:23:16:7f:6b:2a:cd:03:a8:53:
         02:a9:1e:12:79:a6:19:76:68:26:b0:a6:c6:9e:ac:c2:2d:2b:
         4d:75:ca:12:39:6e:06:9e:ee:59:fc:fb:3a:33:bb:f1:c4:21:
         2f:f0:93:49:37:04:df:bc:73:61:0e:99:2b:e2:e4:14:9d:9d:
         32:a8:cc:51:a6:cb:f1:66:38:1d:cd:09:c3:d3:56:32:20:79:
         da:98:e2:7f:66:99:eb:6d:ae:48:bc:13:7b:ee:80:b9:c8:a8:
         14:34:ca:45:26:9f:f0:a9:5d:22:be:a8:7e:40:3a:3a:b5:b8:
         ad:18:64:e3:3c:4a:17:3c:bc:0a:66:6b:9a:06:53:76:08:a6:
         94:1c:40:7d:8d:8b:b7:ec:b9:03:5c:e5:66:7c:45:7b:13:28:
         dd:fd:5e:1b:80:25:3e:c1:80:eb:19:87:4f:c9:0e:30:41:2c:
         26:a8:ff:19:d1:7d:6b:ea:9f:4e:85:bb:0f:79:da:bc:eb:f9:
         fe:5e:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:15 2025 by rpki-client