Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File:                     C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier:          xgxXnzvZYPTvBgQ8wFJLEqtvdASqoJRlOXVEKfxNRUY=
Subject key identifier:   61:36:AB:84:9C:10:78:82:1E:F3:98:1D:1F:E4:ED:99:51:EB:26:C6
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer:       /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial:       0198748718487E073880C0FFE4470FF995D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 10:01:07 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:07 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:07 +0000
Files and hashes:         1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: yjmszl87rTSK8nL/bxjzlqsXVL5X+TPvd8oWWvcQjqE=)
                          2: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (hash: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:18:48:7e:07:38:80:c0:ff:e4:47:0f:f9:95:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
        Validity
            Not Before: Aug  4 10:01:07 2025 GMT
            Not After : Aug  5 10:01:07 2025 GMT
        Subject: CN=6136ab849c1078821ef3981d1fe4ed9951eb26c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:68:13:18:5b:47:ad:79:39:01:a7:bc:38:
                    0d:cf:68:fc:ef:53:02:b1:66:15:b1:0d:1e:a5:55:
                    6a:29:23:42:a6:41:d8:4e:62:36:61:a1:9e:3b:47:
                    eb:c4:a2:6e:88:ed:a1:4e:0a:6d:41:06:a5:89:ce:
                    7d:5b:fd:d0:1e:a1:87:ef:2d:43:c3:06:61:79:64:
                    31:1a:c6:9b:5f:25:b2:4c:a8:ec:75:be:18:92:44:
                    75:d7:7a:4b:ac:5d:3c:df:dd:c2:b2:83:f6:1f:45:
                    28:a4:a7:8e:cf:50:f2:0d:7a:33:f0:d7:0e:4a:2b:
                    ec:a9:d9:99:a2:fa:8c:bc:12:44:bb:2b:0c:2c:6a:
                    52:63:69:e5:f2:87:59:83:39:bb:8c:bc:24:50:12:
                    dd:05:67:ea:56:24:60:5c:8a:9d:cf:5f:1d:4b:f5:
                    5a:ac:b9:99:2d:f6:14:d9:e4:19:a4:92:95:43:c4:
                    4b:e1:a1:91:2b:5b:a9:d9:ca:08:c6:a9:12:b4:7c:
                    7c:06:88:20:62:03:43:39:c0:02:a8:b5:4d:35:53:
                    64:56:fd:d6:9f:7d:5f:8d:a8:85:ae:56:ad:05:88:
                    42:24:89:8a:15:41:33:25:64:c9:43:b4:0e:ee:27:
                    06:0c:31:0a:f1:7c:b4:1e:c4:50:ca:20:d8:5d:28:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:36:AB:84:9C:10:78:82:1E:F3:98:1D:1F:E4:ED:99:51:EB:26:C6
            X509v3 Authority Key Identifier:
                keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:90:89:38:44:8e:31:7b:63:79:ad:95:48:da:f6:da:77:
         29:ef:b0:7b:37:4e:01:56:2b:39:a3:8a:9c:3b:67:9b:73:8d:
         79:16:43:50:1b:41:ba:9b:28:e5:49:8d:f4:be:c1:7e:3c:e3:
         bc:b5:c7:3f:76:02:bb:9b:2d:88:b7:0f:8a:66:83:8a:a5:08:
         67:8e:72:38:3a:d3:4d:ff:a5:01:0c:46:7d:bb:dc:d8:4d:70:
         a7:b8:6c:9a:6d:10:f7:cc:ed:cb:1a:fa:1a:db:79:04:b1:fb:
         8c:5f:25:f8:b5:f6:79:d8:87:b7:5b:dc:0a:21:fc:91:77:ac:
         fa:1f:ce:f9:ff:7c:c9:22:15:f1:42:06:0d:9c:26:32:dc:2d:
         4f:44:94:d7:3b:7c:3c:9e:6d:d1:00:87:5f:4d:27:41:a4:2c:
         7c:8a:15:07:94:56:61:5b:86:42:1a:db:8d:75:77:33:0b:70:
         bb:c6:a2:74:e1:62:a5:9c:12:1a:33:01:75:d3:aa:f9:2d:78:
         22:5b:94:1c:1b:92:1b:37:64:c2:d3:72:9a:80:ed:7a:48:42:
         bc:e0:47:4b:5c:a3:a2:27:fe:dd:43:fa:f2:58:93:22:28:0f:
         c3:b3:57:ac:db:5c:21:55:f8:1e:19:fd:ac:f3:e1:5c:f0:24:
         8e:02:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:09 2025 by rpki-client