Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File:                     AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier:          Y6nJhKDVR2FTOdOaxR4qxv++oxqNjwCfUKqx8MgBKBs=
Subject key identifier:   24:70:86:EE:D9:AE:E7:8E:17:3E:39:4E:10:F9:7A:6A:C9:31:ED:62
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       01987418D0B065BFA6717CAFC8FE03E1A5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number:          15AA
Signing time:             Mon 04 Aug 2025 08:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:39 +0000
Files and hashes:         1: 1-V8d9umP0McsFhAezBGsGExpglU.roa (hash: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=)
                          2: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: 8HdYqb3q9wVbeknLS2oxPstwZWo5zLNdNYbCVm3d+EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:d0:b0:65:bf:a6:71:7c:af:c8:fe:03:e1:a5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: Aug  4 08:00:39 2025 GMT
            Not After : Aug  5 08:00:39 2025 GMT
        Subject: CN=247086eed9aee78e173e394e10f97a6ac931ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:2e:6c:69:63:91:84:97:22:7e:c3:7e:96:
                    87:5e:71:d0:b3:14:e2:ca:40:58:15:3a:df:5e:c7:
                    5b:7c:f9:18:bf:2f:c2:1a:36:a9:8c:a8:30:4a:ce:
                    ae:4b:e4:88:dc:7c:56:32:8b:88:c1:60:82:9e:2b:
                    6c:d5:4f:eb:3c:f9:53:f5:94:24:8f:31:de:70:1b:
                    32:d3:e6:18:06:f0:15:1f:02:4c:55:e8:dd:05:d8:
                    f4:1d:ef:85:87:86:6d:cb:38:3f:8b:d3:8a:be:1b:
                    40:df:34:22:70:dd:54:a8:59:e3:94:dd:61:b3:af:
                    0b:be:13:eb:e7:ac:9e:af:81:58:f0:85:5f:40:d0:
                    82:ac:d8:78:7e:76:f2:de:45:af:8e:69:bb:2f:59:
                    13:63:b4:56:7c:a8:88:07:ae:61:94:9b:2d:1a:14:
                    fb:59:b3:32:4b:b4:57:f7:61:73:89:4c:7b:7b:4d:
                    da:d4:ef:6b:92:e0:e4:6c:c0:0e:39:c7:49:8f:df:
                    ab:dc:39:b4:dc:b0:ed:4d:a2:27:79:0d:1f:1f:10:
                    76:ee:97:c9:f3:18:cf:ed:cf:18:05:2a:f8:69:76:
                    a3:b6:53:2d:8a:39:fe:c4:20:72:67:19:71:ea:cb:
                    6b:c3:c4:fb:b9:c6:99:dc:6b:84:5f:02:70:1a:47:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:86:EE:D9:AE:E7:8E:17:3E:39:4E:10:F9:7A:6A:C9:31:ED:62
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:bb:bc:c3:fa:b1:3e:37:9c:e1:8d:69:4f:45:fb:bd:da:ae:
         e7:1b:fb:d5:66:64:b0:17:08:e4:ca:d6:1d:bf:c3:f0:57:79:
         d0:6c:b7:b5:91:45:d2:c6:01:e5:23:38:7b:7e:ff:e9:74:57:
         3e:58:b8:7d:7f:c4:d9:6c:5e:8e:1a:69:7f:4c:e9:06:1f:7e:
         3c:2b:08:4b:73:30:ba:cb:c4:e7:1e:fb:91:9b:65:cd:c1:a0:
         95:76:d8:d1:95:96:2b:39:c9:67:70:fa:e3:fd:03:90:7b:4c:
         d1:ca:6b:a7:c2:67:9c:7e:3e:b4:ba:77:9a:e0:1d:47:81:70:
         37:71:02:85:b8:f0:9b:1f:37:ca:cc:4c:b2:f5:64:6f:ab:de:
         0a:67:8c:28:9c:9d:e5:7d:ce:0b:86:a6:cc:76:4c:30:7c:fd:
         40:a0:68:03:0c:f0:83:0c:ee:6f:a7:fd:87:17:a0:d3:e6:23:
         f3:5e:3c:9c:65:0a:6e:4a:06:87:85:db:0b:ac:01:cc:dc:a0:
         29:6b:5a:78:83:c9:1c:c0:4e:e7:f6:67:94:63:bc:14:28:92:
         8b:a4:b7:0f:dd:43:55:ea:0d:61:46:13:d4:d4:66:be:cb:eb:
         a4:80:7b:d5:20:8c:ad:54:d5:e1:89:42:1d:d7:14:24:82:5b:
         c1:b9:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:27 2025 by rpki-client