Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          RvDExJxByhANpqb3eglEsUvCThVjASkfDtDxoW3MgPg=
Subject key identifier:   D0:93:B2:87:1E:13:F5:62:9A:D4:49:B2:98:41:1A:43:12:B3:EF:3C
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       01988D6B19067A750AED5EC41ED457D42469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          1645
Signing time:             Sat 09 Aug 2025 06:01:02 +0000
Manifest this update:     Sat 09 Aug 2025 06:01:02 +0000
Manifest next update:     Sun 10 Aug 2025 06:01:02 +0000
Files and hashes:         1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
                          2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
                          3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: P5MU2gVyagkUAJPLmQTS3BEoIMfwK8mmkAE7Frq1pJg=)
                          5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:6b:19:06:7a:75:0a:ed:5e:c4:1e:d4:57:d4:24:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Aug  9 06:01:02 2025 GMT
            Not After : Aug 10 06:01:02 2025 GMT
        Subject: CN=d093b2871e13f5629ad449b298411a4312b3ef3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cd:c3:76:57:5a:47:ff:d3:1d:09:2a:a0:ff:
                    4e:05:90:6a:27:ea:9a:42:d4:2f:7a:14:df:65:ba:
                    2f:c8:4e:5a:91:08:30:1e:ce:09:67:54:83:18:0d:
                    d1:2d:34:dd:e2:43:86:35:c2:0e:00:7b:7a:eb:a1:
                    d7:91:5e:57:8c:f8:00:62:fe:c7:1b:37:58:d7:91:
                    66:fb:2d:f2:06:ce:17:25:d5:b7:0f:34:7d:2c:c4:
                    12:ab:d3:dc:a3:a9:a0:b2:b7:13:f0:da:95:4a:56:
                    d9:6f:b0:91:2f:19:6d:40:86:c3:8a:a6:3f:c2:97:
                    9e:62:5d:d5:ec:d9:9b:50:27:66:04:1f:98:8a:e2:
                    d8:b5:3b:d3:15:a6:a3:8f:d9:89:5d:ef:2a:26:b4:
                    2b:62:27:c2:33:cc:6c:e4:90:2a:35:dc:e6:38:5f:
                    bd:8a:21:5a:a1:f1:2d:65:a0:27:4f:e6:74:12:3a:
                    8b:18:9b:d4:de:3c:4e:e9:57:eb:82:67:11:0b:eb:
                    1d:e4:d9:4b:aa:80:b2:6d:98:f0:ca:d0:2f:2e:eb:
                    6f:27:0c:71:1d:b2:9d:35:03:b5:37:0d:31:aa:32:
                    90:40:cc:26:67:42:9a:69:0e:61:ac:01:7a:11:33:
                    8b:72:31:60:6e:71:a4:97:48:32:05:04:b5:b1:9f:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:B2:87:1E:13:F5:62:9A:D4:49:B2:98:41:1A:43:12:B3:EF:3C
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:f3:30:94:36:a4:32:b5:c8:e9:71:62:27:a6:cf:4a:11:
         18:8c:bb:1f:13:dc:c1:5b:14:58:62:fa:06:fa:3e:07:ee:13:
         4d:31:1e:a2:e7:41:20:71:8f:5a:c9:56:d2:6c:c9:24:54:3f:
         b2:36:32:0a:e6:25:f0:8d:e4:b8:5a:11:86:87:47:ce:3a:1f:
         ce:94:0f:3d:0a:cd:10:4f:2f:97:30:46:b3:df:6a:cd:c6:4d:
         bd:0e:92:64:b0:05:72:b1:9b:89:92:75:4b:e1:f5:4e:78:41:
         71:95:11:ae:56:30:60:99:ef:ad:c3:7c:32:1c:b3:3e:d3:f9:
         52:98:7f:6a:fa:58:a8:49:d4:a8:52:8d:23:7d:19:9b:48:3a:
         cc:bc:6f:47:b8:06:bf:0f:52:56:5c:79:3a:a0:a4:f8:83:42:
         1a:bf:23:a1:49:62:9c:1b:7d:35:b5:71:39:ce:0f:b6:c3:28:
         62:d5:bd:ff:b9:98:27:14:74:71:16:d4:30:5c:9f:d7:8f:ca:
         2f:81:cd:00:35:87:de:ae:7a:fa:00:18:89:16:98:f4:9c:52:
         ce:bd:00:83:13:a3:c4:0b:b7:8b:5f:a2:8c:1e:bc:a1:68:c6:
         b7:39:4b:26:bf:ae:5f:6e:9d:76:25:98:c3:f0:92:4c:14:b5:
         9d:5f:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:09 2025 by rpki-client