Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File:                     A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier:          i1eCdBgqEJ0xRJ7lHP61tNxrxRWoHu5CGcdEI9s2nio=
Subject key identifier:   D0:05:40:C6:7D:B4:90:27:9F:36:C8:45:BD:29:16:1A:CC:A3:4E:54
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer:       /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial:       019873E4041E4CFE1B94E15001B476597F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:02:59 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:59 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:59 +0000
Files and hashes:         1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: Hu/Rp48DFZw0cKB5JmlSYS2D+haV+kfBLieU7Gnz6pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e4:04:1e:4c:fe:1b:94:e1:50:01:b4:76:59:7f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
        Validity
            Not Before: Aug  4 07:02:59 2025 GMT
            Not After : Aug  5 07:02:59 2025 GMT
        Subject: CN=d00540c67db490279f36c845bd29161acca34e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:5b:e9:fb:68:4b:88:24:28:c6:92:fb:53:
                    ad:a4:c4:aa:31:56:10:8e:0d:a9:96:2e:04:b9:eb:
                    47:6d:db:ef:38:98:29:c9:e5:7d:c7:ab:70:57:ef:
                    33:53:85:8f:2b:53:dc:24:1e:40:da:f8:4e:cd:7f:
                    0c:47:31:c0:e6:b7:75:08:a9:6d:78:68:54:38:c4:
                    8c:3d:00:82:87:40:7e:66:d0:b4:9a:f5:4e:31:64:
                    29:ef:3e:6e:e3:81:0a:a7:18:5a:cb:11:a8:4e:29:
                    b3:19:22:fb:3b:0d:18:44:9c:dd:96:ed:f2:82:48:
                    a4:3a:2a:6e:d3:89:4a:a9:8d:df:e5:ec:df:a4:ac:
                    d6:42:01:e6:47:fc:1c:6d:17:8d:c2:e0:ee:d6:d6:
                    5b:a4:a3:87:41:e3:2f:0a:74:97:7b:25:60:38:c2:
                    c4:c3:6c:0b:a9:e8:a0:d1:52:34:06:ba:ff:7b:f7:
                    14:bf:df:79:44:48:48:0b:a4:56:57:65:1b:e4:b5:
                    31:41:b5:47:10:36:1f:8b:43:a8:44:60:46:b2:c2:
                    02:0e:2a:e9:5c:5f:16:0c:af:5c:83:c2:c2:32:28:
                    da:3f:6d:8c:41:d8:61:92:fe:b4:a8:ca:16:90:72:
                    a0:49:f7:0a:a0:af:32:c8:35:98:d0:ce:ae:47:70:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:05:40:C6:7D:B4:90:27:9F:36:C8:45:BD:29:16:1A:CC:A3:4E:54
            X509v3 Authority Key Identifier:
                keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ea:e7:41:66:2e:a8:e1:d9:8b:ff:19:a0:18:1c:38:24:6d:
         72:c2:d4:05:a1:ce:90:c8:33:35:25:ba:ea:2c:8a:a7:97:12:
         39:09:2b:7f:6e:ef:bd:41:af:10:31:0e:30:bc:ea:70:af:fa:
         64:2a:1e:ca:ad:28:95:f4:ae:27:61:86:c0:d4:07:31:fe:6a:
         1b:0f:a2:b5:94:59:0a:b3:77:29:53:3b:e5:8b:e8:51:b7:fc:
         de:6b:f7:31:ef:2e:1b:f4:91:e6:ef:9f:26:6c:91:66:37:17:
         da:af:cf:65:20:69:99:30:ee:f6:1c:ae:19:26:72:67:f1:0c:
         69:14:c1:1f:d7:1a:7b:a8:63:7d:8d:6f:c6:42:1b:80:d3:e3:
         84:de:0a:58:ae:77:d1:14:f1:e4:be:8d:3d:5c:4d:41:c2:af:
         ab:ae:fd:00:22:f0:1f:4b:91:38:39:23:59:c3:10:5e:39:41:
         8b:72:bd:9f:cb:9d:81:aa:3a:8e:b3:66:d7:15:4c:06:c6:d2:
         91:7c:49:3d:02:37:9a:71:2e:1d:c0:d3:f6:4d:3a:00:0f:4a:
         c1:c7:b1:f8:71:f8:d3:4d:2f:b7:95:66:57:ce:21:73:a4:17:
         31:75:a3:84:03:c8:4a:a1:a2:9a:c0:38:fe:f5:d7:40:41:9a:
         9a:59:d3:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz5AQeTP4blOFQAbR2WX8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYjBkNDUzYTFmY2U3NmRjMzQyZjE3NWVlZGNmN2EyMGFk
NWQ5MWEwHhcNMjUwODA0MDcwMjU5WhcNMjUwODA1MDcwMjU5WjAzMTEwLwYDVQQD
EyhkMDA1NDBjNjdkYjQ5MDI3OWYzNmM4NDViZDI5MTYxYWNjYTM0ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kVb6ftoS4gkKMaS+1OtpMSqMVYQ
jg2pli4EuetHbdvvOJgpyeV9x6twV+8zU4WPK1PcJB5A2vhOzX8MRzHA5rd1CKlt
eGhUOMSMPQCCh0B+ZtC0mvVOMWQp7z5u44EKpxhayxGoTimzGSL7Ow0YRJzdlu3y
gkikOipu04lKqY3f5ezfpKzWQgHmR/wcbReNwuDu1tZbpKOHQeMvCnSXeyVgOMLE
w2wLqeig0VI0Brr/e/cUv995REhIC6RWV2Ub5LUxQbVHEDYfi0OoRGBGssICDirp
XF8WDK9cg8LCMijaP22MQdhhkv60qMoWkHKgSfcKoK8yyDWY0M6uR3B45wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAFQMZ9tJAnnzbIRb0pFhrMo05UMB8GA1UdIwQY
MBaAFAOw1FOh/Odtw0Lxde7c96IK1dkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYt
YjQzMTJhNTg0NDBjLzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYtYjQzMTJhNTg0NDBj
LzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABurnQWYu
qOHZi/8ZoBgcOCRtcsLUBaHOkMgzNSW66iyKp5cSOQkrf27vvUGvEDEOMLzqcK/6
ZCoeyq0olfSuJ2GGwNQHMf5qGw+itZRZCrN3KVM75YvoUbf83mv3Me8uG/SR5u+f
JmyRZjcX2q/PZSBpmTDu9hyuGSZyZ/EMaRTBH9cae6hjfY1vxkIbgNPjhN4KWK53
0RTx5L6NPVxNQcKvq679ACLwH0uRODkjWcMQXjlBi3K9n8udgao6jrNm1xVMBsbS
kXxJPQI3mnEuHcDT9k06AA9Kwcex+HH4000vt5VmV84hc6QXMXWjhAPISqGimsA4
/vXXQEGamlnTYw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:08 2025 by rpki-client