Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File:                     cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier:          50sdrpQ7kvgXk+7SxAyNZSvX+T+4wL+MnqSmJ3/9OVo=
Subject key identifier:   10:E4:2B:6C:78:CA:E5:AD:23:9F:42:B7:82:72:AC:1D:12:59:08:80
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer:       /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial:       019875D088E77A1D36218516E4F1F7992660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 16:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:57 +0000
Files and hashes:         1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
                          2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: ASQUE9kcfzxFpjgHH7x/PTvcN152Tnmh9OdOTzBQJco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:88:e7:7a:1d:36:21:85:16:e4:f1:f7:99:26:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
        Validity
            Not Before: Aug  4 16:00:57 2025 GMT
            Not After : Aug  5 16:00:57 2025 GMT
        Subject: CN=10e42b6c78cae5ad239f42b78272ac1d12590880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:76:68:df:05:c6:fc:37:60:e8:8c:8b:94:
                    b2:dd:83:1e:54:b2:85:78:92:70:06:a1:7e:c4:8a:
                    e3:08:ca:68:51:c2:6c:cd:c8:07:84:51:bf:1d:8d:
                    58:72:2f:64:8b:05:b8:24:6a:8a:40:d4:22:00:3a:
                    5d:d2:56:aa:83:ac:d3:61:da:d9:10:7a:38:d5:64:
                    97:db:68:d8:ac:b5:a8:c0:28:3f:98:c3:a3:48:58:
                    ee:65:0e:6c:c9:07:d9:25:de:27:53:8f:10:96:91:
                    31:d0:34:f2:37:0a:7f:ec:e1:46:e8:21:62:cb:73:
                    24:2f:1e:e4:17:eb:a0:b1:b0:47:88:85:73:4c:e4:
                    39:3c:c6:b8:52:78:85:da:b0:e7:59:7f:d7:59:ac:
                    7a:e9:b9:ee:11:d1:1c:3e:a3:85:66:c6:0c:98:11:
                    7d:ff:c1:5d:60:47:f7:69:ac:c1:5e:aa:b7:bf:ed:
                    b8:d1:b9:f0:28:ca:2d:fe:34:71:f8:3b:23:06:ea:
                    cc:c9:be:d6:90:78:6c:9f:a4:5a:a8:80:f8:d3:8e:
                    0c:11:9f:59:f2:1f:58:05:b4:ab:e9:43:34:d1:fa:
                    d8:ad:26:29:eb:8b:d1:b6:9a:85:18:39:b7:26:74:
                    26:d3:8d:02:6d:dd:1b:56:ab:83:9b:aa:da:36:60:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:2B:6C:78:CA:E5:AD:23:9F:42:B7:82:72:AC:1D:12:59:08:80
            X509v3 Authority Key Identifier:
                keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:70:f2:c5:89:93:94:43:ca:de:80:b7:d1:e7:79:82:7d:c3:
         45:18:8d:79:fc:ce:7a:3e:73:b9:d3:a6:06:f4:4b:11:8b:85:
         2f:06:dd:ab:71:4d:a5:dd:54:49:1f:1d:02:5b:50:84:56:4b:
         1b:2e:23:69:d0:91:1f:71:97:86:d9:fe:dd:30:bd:95:d7:e4:
         0c:83:25:24:a1:ee:bf:2c:8b:4c:be:39:55:6e:8c:b0:40:f0:
         05:4f:f0:0c:08:3a:bf:6e:b1:c0:dc:6b:f7:de:69:5a:8e:f1:
         ec:4f:58:91:67:d8:69:da:fc:10:35:e8:ce:a3:4a:9d:72:29:
         3e:35:98:4e:02:7f:ef:25:bf:3f:cd:90:c6:05:ea:94:b6:f8:
         96:8b:d1:a2:3d:38:83:5a:e0:b5:da:08:19:fc:27:37:ed:8c:
         db:9f:1a:0d:2e:7f:cf:7b:05:54:ee:d5:9a:f6:65:ed:bb:72:
         6b:cc:49:4b:0d:fa:21:21:c1:d1:86:f9:36:7c:ac:8f:03:0a:
         80:a5:75:ca:c0:a8:fe:27:1c:af:76:e8:2e:2c:ac:b1:d3:c8:
         f4:84:fa:8d:13:14:84:1e:fb:a8:f5:74:a7:8a:d9:53:d2:24:
         46:f3:9d:21:e4:f7:f8:8e:cc:b6:f8:81:b7:c3:4a:e6:0b:47:
         04:66:8e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:55 2025 by rpki-client