Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
File:                     IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json)
Hash identifier:          hYi8cbFU8SPVBHRwGbSUl7Rt/SPTaBJuQL/O5sGAlu0=
Subject key identifier:   25:90:C3:11:42:F5:87:BC:13:17:65:69:82:86:C4:6E:8A:80:71:D6
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Certificate issuer:       /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial:       019893DB077FF7462D0BFD10A73B273C53D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
Manifest number:          0450
Signing time:             Sun 10 Aug 2025 12:01:01 +0000
Manifest this update:     Sun 10 Aug 2025 12:01:01 +0000
Manifest next update:     Mon 11 Aug 2025 12:01:01 +0000
Files and hashes:         1: 4qvZpbHlQrEVGaculmgT9y6fbp0.roa (hash: tCJqK90XfNlOzC+CJIY2YiVu1YRsdGe0qc+sYvxZZ4k=)
                          2: GCeJWQXp53i0_T9Els2HFdD580c.roa (hash: F4jM2A6o7cg7dalyRSsXPRHMxAUn8dJXwNlkzBZKjRk=)
                          3: Gx7WZJ-NdyF04pUk4gdMYoHuQzk.roa (hash: t6M0KFjILBRmG74F5TahE0UmVDYYLhcbj+iOGjxmViM=)
                          4: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: 8qd0R/kswh2IZvnS0q8oI/gxJ9HBGMVVFcaJHa+/yKE=)
                          5: P8uTVptxd-UGzkymXhOkvbitcEU.roa (hash: 61AnrtiCoFhbr8PK6p0Fhr8c0CNn0nd06ZAGuQwz1l8=)
                          6: PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa (hash: 8P5RiewFjkqd/eRXG3pkKovd5qsr2E75hTvmlDKbDK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:db:07:7f:f7:46:2d:0b:fd:10:a7:3b:27:3c:53:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
        Validity
            Not Before: Aug 10 12:01:01 2025 GMT
            Not After : Aug 11 12:01:01 2025 GMT
        Subject: CN=2590c31142f587bc131765698286c46e8a8071d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:91:05:15:bb:f6:92:21:fa:71:87:4d:ef:
                    e2:e9:00:55:5f:dc:54:1e:33:ba:2a:4c:27:4d:9a:
                    cd:29:7f:94:10:aa:63:0d:39:2b:23:90:32:bb:90:
                    d4:9a:de:b2:de:2e:b2:df:bc:87:4e:b3:86:9d:5b:
                    d5:ba:62:13:9f:29:38:9a:14:05:db:84:30:1d:5e:
                    43:2d:59:8e:ab:75:02:97:0d:e0:6e:6c:a5:3e:83:
                    7c:a5:63:8a:a3:2b:69:d8:41:41:8f:44:4f:13:6b:
                    b6:04:1d:8e:51:24:a1:61:61:60:c2:39:9f:98:fd:
                    39:f5:2f:7c:73:11:09:ce:a4:93:fd:06:33:e4:c6:
                    0b:e5:fa:44:de:9c:3a:3e:b8:f8:6c:e7:1c:f5:d6:
                    3c:1b:8a:7b:ea:87:50:d1:67:03:81:25:46:a5:c2:
                    56:f9:3c:d2:8b:b9:26:f5:d9:8a:6b:88:4e:df:de:
                    e1:31:e8:05:80:dd:a6:3c:dc:80:b3:4f:a3:42:2b:
                    28:49:be:31:a2:e9:7b:75:d8:cb:3b:e0:f0:af:ec:
                    c3:90:e0:f3:da:22:94:09:ca:60:47:5a:13:bb:1b:
                    6b:2c:d6:6a:c5:79:73:af:a0:61:45:97:71:3d:a7:
                    cb:15:ba:7a:d9:9c:41:4e:80:7a:bc:52:99:b5:e2:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:90:C3:11:42:F5:87:BC:13:17:65:69:82:86:C4:6E:8A:80:71:D6
            X509v3 Authority Key Identifier:
                keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:a9:ff:a1:40:f8:50:92:ce:57:a8:40:41:20:c6:bb:4c:
         6e:05:67:79:2f:77:d0:db:d9:34:49:56:80:8f:2b:ee:bb:30:
         e3:6c:66:55:68:6a:db:30:56:0f:0f:57:74:54:df:c3:30:11:
         b5:90:c2:6e:37:3d:3c:79:f1:d8:8b:b2:52:8a:0e:6b:d7:ce:
         6b:ba:c1:40:73:c2:ad:d3:28:2f:62:20:9a:9f:8d:a5:3e:de:
         30:b3:55:80:81:39:6f:e2:bf:ce:44:37:4c:0b:f4:00:af:9c:
         3c:64:7e:fc:64:84:3a:6a:6e:5a:c8:84:84:de:29:65:1a:47:
         77:e9:e6:56:c0:59:48:f8:59:3c:fb:be:a1:63:1c:44:21:1e:
         1d:b8:78:14:c8:08:a2:6a:11:b1:c3:46:3d:17:d6:fb:b5:ed:
         47:59:05:21:ca:6d:de:9d:89:32:d9:f3:8d:51:2f:ca:be:38:
         8b:85:e1:e1:f3:fe:7e:0b:a1:78:30:04:a2:2e:70:60:9b:b8:
         a9:25:bc:d3:9f:6b:50:c2:fe:ad:99:94:18:19:65:c3:fc:0c:
         c7:f4:af:8d:e7:3e:0b:3b:c9:64:08:e2:50:c7:6a:4d:2c:8f:
         5f:fa:cb:5c:ea:08:6c:3f:80:38:c5:12:e7:ef:da:6b:29:83:
         e9:80:99:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:59:25 2025 by rpki-client