Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
File:                     dpduc3A5pphnL-lSSt0zfR_1LP0.mft (raw, json)
Hash identifier:          Ah8EzmvCbYnX9fMR6Qis385lO6XQPiTkuGJXFksjxTY=
Subject key identifier:   25:3B:EB:C1:97:69:C8:1E:35:90:51:34:B7:0A:46:39:C4:3A:2B:AC
Authority key identifier: 76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD
Certificate issuer:       /CN=76976e737039a698672fe9524add337d1ff52cfd
Certificate serial:       01987418A5F91BDBA4FB4E78A5A0147769EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 08:00:28 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:28 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:28 +0000
Files and hashes:         1: Rw3BYoyXYSEo6V5vN0qo3508qkM.roa (hash: sKlzeUwowKBMHyUl3VaDBvqX0srdSepcxCjN2qsXkZI=)
                          2: dpduc3A5pphnL-lSSt0zfR_1LP0.crl (hash: Akm2IuWsaQdiLWyeUhWyJltwAKar+atoGih+laxV+fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:a5:f9:1b:db:a4:fb:4e:78:a5:a0:14:77:69:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76976e737039a698672fe9524add337d1ff52cfd
        Validity
            Not Before: Aug  4 08:00:28 2025 GMT
            Not After : Aug  5 08:00:28 2025 GMT
        Subject: CN=253bebc19769c81e35905134b70a4639c43a2bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:82:88:12:ce:b9:0d:87:e4:61:20:b5:47:
                    9f:b4:9c:64:de:54:53:dd:ce:65:5d:b2:e7:ba:77:
                    73:39:1e:d7:e9:e6:cf:53:e3:2e:8c:69:7d:40:dc:
                    90:05:51:50:66:47:87:7d:ba:21:ff:e6:3a:90:f6:
                    64:dc:44:c4:9f:37:4b:13:8e:ea:73:a7:7e:84:f8:
                    cf:2b:ea:ae:b0:9e:ed:02:ee:67:b7:58:5b:9f:14:
                    1d:89:06:8c:d7:70:e0:3d:eb:e1:cd:34:44:c9:13:
                    8d:c0:b1:1b:7b:16:7d:39:48:a4:08:bc:ce:d4:68:
                    20:4a:9a:32:11:d4:92:98:04:0a:6a:04:0e:1d:4a:
                    58:2c:80:30:41:7c:48:f4:5f:9e:07:51:84:2e:33:
                    49:50:17:53:c6:a5:83:e4:c1:14:4d:9f:08:b6:e6:
                    31:be:b7:13:7d:7f:d8:b7:fb:6a:45:8c:bb:fc:4c:
                    ed:06:f0:79:bc:53:a6:7f:66:b7:43:f2:6b:08:c7:
                    17:c2:5d:93:c0:b5:11:2f:6c:c4:52:37:b6:2c:16:
                    2c:82:1a:a0:c0:6d:47:3a:50:9d:69:ed:f4:a3:8b:
                    8c:f8:ea:95:38:a4:46:5b:dd:a2:f7:ba:a7:6b:31:
                    de:1b:ae:4d:ed:95:b4:4b:b5:da:1b:8d:9f:dc:d5:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:EB:C1:97:69:C8:1E:35:90:51:34:B7:0A:46:39:C4:3A:2B:AC
            X509v3 Authority Key Identifier:
                keyid:76:97:6E:73:70:39:A6:98:67:2F:E9:52:4A:DD:33:7D:1F:F5:2C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpduc3A5pphnL-lSSt0zfR_1LP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4771c5-26f6-4c7d-9851-f5189eb13a17/1/dpduc3A5pphnL-lSSt0zfR_1LP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:a5:6e:06:94:2b:1f:e9:c1:f7:ae:df:06:f1:34:b7:2b:
         8f:cd:a2:8b:f9:0f:7b:9d:84:8f:10:dd:c0:9a:9f:16:1a:e6:
         ee:3c:96:54:6f:74:99:c3:93:71:fc:7a:c6:79:7c:95:f2:5f:
         df:0a:b3:1f:04:49:c8:5c:2b:9f:e0:d1:d5:a2:98:b4:65:00:
         f4:22:49:9e:c4:0d:90:1d:93:a9:55:7e:34:0c:35:51:c1:11:
         e8:11:10:da:d4:24:96:4d:42:37:b2:af:bc:ab:32:41:05:d9:
         b4:69:08:26:c8:6b:e6:86:d6:78:e9:e0:ea:c8:cb:f7:30:44:
         23:7b:a3:07:ab:19:a0:ee:cb:f4:e3:c4:11:22:f9:bc:2e:87:
         70:b3:1c:cf:d7:57:b8:74:0e:f1:2e:34:92:27:99:6c:9f:c4:
         f8:03:bf:78:66:87:7b:85:de:64:4c:7b:05:7d:fa:7e:ae:7f:
         a9:0c:7f:9c:6c:5d:f5:9e:4b:5a:14:09:d2:a8:40:85:10:27:
         23:b1:3f:59:1e:c2:f3:c6:96:1f:f2:10:09:f2:d4:1f:2f:10:
         58:30:21:46:cf:9f:6e:db:5c:2b:17:64:8f:fa:c0:c7:f1:5e:
         b2:c2:b6:93:70:cc:21:18:8f:57:17:2e:d9:7e:8f:42:76:a2:
         55:4a:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:08:03 2025 by rpki-client