Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
File:                     STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json)
Hash identifier:          KAglhyap+JuBrc42/goHdzOxvSEdX+tk8AgOQ02PXYY=
Subject key identifier:   A2:28:D4:56:52:1B:60:BB:2A:02:06:C5:BD:48:56:D0:45:D8:B0:80
Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41
Certificate issuer:       /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
Certificate serial:       019873066C32AB69209D4D40B06C90B5BFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
Manifest number:          1506
Signing time:             Mon 04 Aug 2025 03:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:57 +0000
Files and hashes:         1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: PI8BTQsN5j1Emr15P/AWwrBUCEUPVivwuaUK2TUfiKQ=)
                          2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:6c:32:ab:69:20:9d:4d:40:b0:6c:90:b5:bf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941
        Validity
            Not Before: Aug  4 03:00:57 2025 GMT
            Not After : Aug  5 03:00:57 2025 GMT
        Subject: CN=a228d456521b60bb2a0206c5bd4856d045d8b080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:14:1c:68:21:a2:e6:ee:a4:11:0a:0e:a9:
                    35:0b:03:cf:87:25:bd:09:47:68:ad:7f:35:2a:8a:
                    d0:bb:58:95:e4:d0:fa:61:e4:74:c9:7d:f1:10:ff:
                    40:ce:4a:2b:76:a8:72:6b:b6:43:f5:be:c0:d9:fe:
                    28:50:2a:b3:70:7c:5c:f5:ed:3a:0a:34:bd:13:cc:
                    4e:21:7b:cd:4f:ac:16:63:a7:7d:10:2b:e2:50:5d:
                    75:05:1b:33:38:28:9e:26:c3:08:c6:a2:9d:75:ee:
                    45:d8:b7:89:46:81:80:09:c3:0e:3e:ed:5d:d6:ee:
                    6c:d6:44:9e:69:d1:b0:39:53:4b:46:1c:96:c6:79:
                    84:c3:b5:fe:d6:86:d3:f5:f0:22:47:f8:9a:c4:c9:
                    5c:36:ff:c2:bf:2f:09:a2:79:3e:6f:1d:71:29:7b:
                    c0:e4:26:10:67:80:e7:97:ee:7b:67:51:35:cd:ea:
                    7e:4a:21:5f:f1:64:e3:4c:32:1d:4c:6b:ea:aa:13:
                    d9:9b:e8:2c:6a:6d:50:4c:97:fc:9f:c3:e3:ca:2a:
                    3d:73:4f:cf:88:95:d5:3a:4c:7a:cd:fb:e4:32:34:
                    f9:aa:a8:21:fc:bf:33:5f:80:dd:00:19:71:c5:b4:
                    ad:63:d7:26:d4:b7:97:26:66:d4:44:65:3f:3f:5f:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:28:D4:56:52:1B:60:BB:2A:02:06:C5:BD:48:56:D0:45:D8:B0:80
            X509v3 Authority Key Identifier:
                keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:61:61:b1:ec:23:b8:16:d3:3f:57:b6:47:42:0f:cf:d6:7c:
         3f:06:bb:b0:ab:05:8a:85:9b:1b:74:fc:16:65:d0:79:af:b4:
         e9:04:96:70:d4:6e:30:d0:c5:08:dd:e5:63:bf:1c:92:53:23:
         fa:5b:dc:b0:24:ab:34:d8:56:ee:36:02:c8:ae:4e:55:72:73:
         e2:68:23:c6:e3:b9:ad:cb:1e:d5:86:68:9f:4d:39:ca:2f:2b:
         80:8b:22:4e:01:d2:71:3b:f1:e9:07:7f:b4:c4:02:9b:00:bd:
         87:89:1f:5a:28:2f:91:7e:23:14:bd:49:10:fc:e9:fe:f1:ed:
         e3:86:fe:6f:5b:68:cc:16:fb:e6:20:d8:5d:1e:9a:e1:6b:9d:
         ac:35:cc:31:0a:91:09:ee:ea:0f:9f:95:6e:44:fb:a8:12:7d:
         b6:4c:16:a6:d1:6c:e0:39:d5:e9:2c:b2:a3:70:e0:f0:0d:c5:
         5d:5e:4e:97:9c:d3:3d:ae:d8:28:4b:1e:a2:25:c5:dc:ab:86:
         d9:9d:c3:21:cb:a0:88:89:bf:2e:2b:2d:49:a1:2a:4a:e8:f7:
         c4:fa:0d:8f:9e:e6:bb:0d:76:2d:40:1e:e6:5e:97:17:49:fa:
         02:49:be:bc:af:43:64:55:6d:8c:fb:b3:06:4e:4b:a7:ca:28:
         1f:f3:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:15 2025 by rpki-client