Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File:                     iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier:          ttB/K85MXK+9jvZPOom+H/atmjk49kjcS3S1PeTf7aQ=
Subject key identifier:   59:26:54:20:18:CE:AF:F5:0A:00:71:86:CB:63:1C:54:57:D3:68:88
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer:       /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial:       019878D1DB6874D90546F17079414A91361B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number:          1619
Signing time:             Tue 05 Aug 2025 06:01:15 +0000
Manifest this update:     Tue 05 Aug 2025 06:01:15 +0000
Manifest next update:     Wed 06 Aug 2025 06:01:15 +0000
Files and hashes:         1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
                          2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: 59dIvcgVFtM5u45MpRri1Rm7rSUaVMzJF27EkFeK44Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:78:d1:db:68:74:d9:05:46:f1:70:79:41:4a:91:36:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
        Validity
            Not Before: Aug  5 06:01:15 2025 GMT
            Not After : Aug  6 06:01:15 2025 GMT
        Subject: CN=5926542018ceaff50a007186cb631c5457d36888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:8b:4b:75:66:1b:19:de:e6:e3:94:1f:3c:
                    72:9a:52:0a:6e:85:d8:78:f8:4a:cc:70:ab:25:14:
                    d2:d4:99:a6:38:4a:b4:95:aa:f2:bc:2a:25:76:29:
                    10:fc:1b:3e:51:25:18:fd:07:e5:3b:5e:83:4b:00:
                    c9:09:83:49:92:18:33:bb:ca:1b:0f:31:ec:82:13:
                    c6:88:6f:b7:42:c9:f1:e5:8b:d3:a5:bb:fd:7a:03:
                    16:f3:a8:2e:53:4b:cb:c6:74:d9:57:d6:70:96:e1:
                    db:70:a6:e4:8c:33:f7:36:1f:a8:09:9d:0b:2a:8a:
                    fc:da:2f:b0:7e:a3:90:95:db:ff:ad:c9:c0:37:95:
                    b4:8e:16:53:24:a1:cc:4c:dd:e6:fb:96:bb:6f:bd:
                    03:ab:0f:c4:ea:6a:d1:14:83:6d:de:e7:76:7a:dd:
                    c7:ce:6c:02:72:55:d9:03:ab:d0:ae:50:bd:02:32:
                    17:b8:07:60:cf:f7:7e:55:68:c8:fd:e2:c7:72:c1:
                    f3:e7:8f:42:27:56:7f:cc:87:94:5c:24:92:6b:ff:
                    27:c8:00:17:0f:9d:be:10:68:52:14:8d:26:c6:3c:
                    a8:8c:79:a3:c1:5b:31:dd:0f:55:54:09:26:b5:28:
                    cd:3d:cb:bd:e0:37:76:8d:81:41:1b:d7:28:49:1c:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:26:54:20:18:CE:AF:F5:0A:00:71:86:CB:63:1C:54:57:D3:68:88
            X509v3 Authority Key Identifier:
                keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:67:d3:2e:b2:b0:23:33:ba:77:ba:0b:31:7e:7b:b7:35:
         3d:f3:61:7c:c4:e5:5d:28:b8:e3:75:64:73:d3:e3:d6:b1:de:
         0b:a2:7e:76:68:b9:8e:99:12:6d:e0:c1:f2:b0:c2:19:1b:19:
         b2:a3:c1:07:8c:60:98:38:01:79:a4:4e:ae:e2:a9:09:6b:e2:
         8f:43:ba:80:9c:62:67:a6:73:c5:7a:8a:60:aa:0d:cf:f8:43:
         ba:20:f8:06:dc:7e:4c:c4:a1:1f:dd:15:bd:38:08:8f:6c:e3:
         50:4c:08:05:18:10:93:37:6d:74:5b:29:0f:37:7f:11:a4:e5:
         18:78:2e:1c:25:85:82:99:2a:88:69:b8:7a:a1:11:5f:15:81:
         6f:f9:3f:c9:71:d1:02:b3:d4:28:ba:60:ea:ed:01:56:29:ab:
         51:f4:1c:6d:ac:63:fd:2a:7d:33:55:e3:58:94:b0:5b:01:bd:
         4a:5e:eb:07:fb:03:99:73:90:34:6c:0a:ae:56:e2:af:8e:03:
         87:02:55:18:a6:97:0c:68:dc:ae:b9:68:17:6b:19:99:3d:4e:
         44:b5:f1:9b:3e:54:bd:08:ef:ab:9b:46:bf:14:99:ea:59:1d:
         34:28:e9:71:31:da:98:b3:16:96:47:ea:8e:04:2c:f3:f5:8e:
         5b:29:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:32 2025 by rpki-client