Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          ATBWHb+gvM36CC8HD9cG3vXRrpbQIPt4TPobq6VlI9k=
Subject key identifier:   BF:8F:5C:F0:B8:94:8E:00:77:D8:A9:01:E8:40:57:0E:8B:D3:21:52
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       01987DF87F705803EA7C864084D82BE0330E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          1570
Signing time:             Wed 06 Aug 2025 06:01:34 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:34 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:34 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: jcyAM7x9qdKnGorNq+plRjq9ol/GrbG+wrjF4vyjemE=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:7f:70:58:03:ea:7c:86:40:84:d8:2b:e0:33:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Aug  6 06:01:34 2025 GMT
            Not After : Aug  7 06:01:34 2025 GMT
        Subject: CN=bf8f5cf0b8948e0077d8a901e840570e8bd32152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:e4:cf:99:ef:de:93:29:b1:5e:95:c3:bd:
                    e9:9b:71:fc:df:1e:ec:86:50:fc:c0:68:03:94:91:
                    59:3c:e6:86:29:4d:53:1f:a8:86:a1:25:22:0c:93:
                    00:c8:7f:e8:46:c2:61:35:20:7c:c4:0a:b0:06:b2:
                    32:11:44:32:d1:6a:3c:ab:69:f6:01:91:36:07:33:
                    05:6e:54:7a:59:80:73:96:23:0d:52:4c:fe:80:1f:
                    e5:15:d1:57:ae:e8:1f:b0:90:6c:2d:0a:aa:6e:c4:
                    2e:94:b4:7c:e7:d3:09:78:aa:c3:c4:c7:75:53:15:
                    60:d7:11:70:ad:68:a4:ec:58:66:de:af:1a:fa:c9:
                    bf:51:6b:e0:af:b0:98:93:6a:cb:85:94:1b:b0:a0:
                    46:3e:20:26:ec:08:99:51:dc:74:de:fd:53:53:1a:
                    1e:dd:b8:08:ad:73:2a:6d:f4:a3:07:a3:3f:69:c7:
                    e6:66:9b:56:c5:fc:b4:9b:e3:bf:e2:7f:26:95:86:
                    33:9a:6a:ae:ad:21:79:bd:fd:f1:4d:79:13:7f:30:
                    a7:7e:71:5e:65:45:4b:fc:8e:f6:5a:7e:09:47:ca:
                    55:7a:10:77:79:18:ac:c6:62:76:5e:98:dd:29:35:
                    a2:85:3c:4c:96:3d:fb:0e:bf:45:f2:2d:bc:59:ab:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:5C:F0:B8:94:8E:00:77:D8:A9:01:E8:40:57:0E:8B:D3:21:52
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:5c:ca:dd:b2:90:ad:91:7c:67:eb:5b:d4:3c:08:48:c6:
         19:ca:74:79:d5:92:d8:48:0c:cc:de:34:b9:18:5f:8b:fb:bb:
         9f:bb:13:63:0d:14:04:97:66:6a:27:7f:ef:f4:1b:db:2f:c4:
         56:6c:a6:6e:2b:18:12:5e:95:0e:a7:7a:c0:26:04:16:60:68:
         00:66:9d:19:3c:69:42:fe:29:31:a2:72:46:21:be:17:6e:de:
         fb:59:37:13:a2:32:9f:47:01:03:41:bd:80:ef:66:ec:18:74:
         25:7e:85:42:d7:08:07:70:ee:3b:16:dd:85:c2:55:33:65:e1:
         7e:8b:9b:49:68:29:7a:69:f3:b4:d3:da:5f:09:86:6f:af:fa:
         39:00:98:61:79:b6:fb:53:d0:c3:fb:18:42:9d:05:a8:40:3c:
         09:82:2f:5a:d0:2b:46:de:e4:b7:ba:97:d5:6b:81:0c:39:30:
         4e:d3:22:54:66:dc:ca:11:cf:bd:e7:34:50:7f:5f:46:0e:61:
         74:80:7e:e2:51:7a:59:96:3e:73:fe:7a:0c:5e:4e:8f:bf:f2:
         4a:6e:97:0e:62:e8:af:c1:f8:51:7f:b2:a0:32:82:cb:18:eb:
         4e:79:a7:26:90:60:76:7f:89:77:27:36:d4:a3:b5:58:a9:80:
         eb:ae:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:18 2025 by rpki-client