Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          8ZjuaJrhYfqRGJVd3DL0r7rqM+XPix45gWXXvxFLpq0=
Subject key identifier:   68:5B:11:D7:DB:34:02:75:A7:BD:5D:E5:7E:36:DD:E8:58:71:0D:1C
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       01988C5854607BB95E51395A220962928270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          1555
Signing time:             Sat 09 Aug 2025 01:00:55 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:55 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:55 +0000
Files and hashes:         1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: WsusiPdshHHWxI2wbB26Ob3MHis0TIND2hbyDtM7ZWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:54:60:7b:b9:5e:51:39:5a:22:09:62:92:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: Aug  9 01:00:55 2025 GMT
            Not After : Aug 10 01:00:55 2025 GMT
        Subject: CN=685b11d7db340275a7bd5de57e36dde858710d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:eb:6b:f3:76:48:42:e6:29:55:13:5f:05:
                    aa:44:84:54:0d:20:7d:c9:cf:25:c4:69:d4:1a:2e:
                    f6:77:9d:81:f8:6c:a9:ac:22:d1:3d:60:36:3e:07:
                    19:3a:bf:6e:d9:81:4d:86:91:22:b0:c3:27:13:97:
                    8a:5f:2b:78:e1:f6:ae:5c:be:d0:d5:fe:85:ab:ff:
                    6a:78:a7:ca:ab:18:b5:b7:9b:38:82:64:cc:d4:d0:
                    85:d2:c0:53:b5:69:7d:87:0d:33:c4:ec:13:c9:69:
                    97:d8:ce:2f:0f:f3:c2:91:75:19:c4:a6:75:7e:df:
                    8e:76:62:05:2f:a6:a7:b7:3e:b5:18:57:62:fd:d4:
                    d5:90:56:cb:71:c7:42:88:d9:49:eb:b4:e5:0e:7f:
                    8a:0e:45:a8:aa:f0:e9:b0:43:2a:11:b2:20:c8:c0:
                    48:b9:a8:df:5d:c6:dc:dd:33:b2:b0:3e:41:b8:ce:
                    37:68:fe:7d:cd:69:03:4a:c3:59:85:8d:3f:f0:74:
                    23:9c:70:a4:7c:e7:9f:4e:55:89:bc:c3:54:97:46:
                    90:3c:0b:11:14:d0:0c:24:ec:a7:bc:3a:47:b8:75:
                    bc:b0:9e:c4:a7:4f:f2:af:98:e8:38:f2:ac:79:e2:
                    ba:3d:94:cb:9a:59:99:a1:ba:1a:e7:e2:76:ac:58:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:11:D7:DB:34:02:75:A7:BD:5D:E5:7E:36:DD:E8:58:71:0D:1C
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1a:1a:59:e8:ca:96:45:16:9f:4f:82:77:1d:60:1c:f0:cb:
         dd:90:6d:75:b8:89:97:a2:5a:4f:94:23:80:e6:94:f9:37:53:
         e0:b6:4a:da:ba:ae:45:eb:4e:d8:da:8f:67:45:ca:89:87:77:
         de:b5:81:f2:b0:26:6d:92:ab:94:1e:8d:9f:77:74:ef:9a:25:
         60:1f:f6:1d:01:f4:a9:ee:b2:46:7d:f1:04:7d:b6:4f:5d:1d:
         3b:6c:14:1b:c1:66:3a:44:7b:eb:9a:d7:2e:70:5e:aa:2f:54:
         0c:d9:0b:6f:25:ed:11:0c:9e:70:90:59:ba:ca:8a:0a:12:0b:
         fb:9f:4a:32:49:3f:41:f3:7c:c3:8a:10:7c:3b:75:22:b0:f1:
         64:41:44:ee:76:3e:dd:c5:42:27:e9:76:3e:66:7c:52:62:99:
         41:75:1d:9a:c0:f9:6b:34:47:02:dc:d5:24:c0:27:6c:ee:d6:
         b8:1a:4c:68:ab:65:00:06:c9:b3:a6:1f:e4:ce:10:68:fd:96:
         ae:15:36:49:35:2a:5e:8b:99:22:e0:18:0a:91:ce:23:7c:89:
         26:ff:ac:97:22:42:75:34:43:8c:22:f6:38:cc:58:e4:59:5b:
         00:0c:12:f0:bf:a3:f4:81:a3:a0:53:ce:6f:49:f5:cc:e8:3e:
         97:60:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:04 2025 by rpki-client