Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          +I73K1aNzj+SUm/1NPfqqz1DLiyW+36loh1Qz1ukRLc=
Subject key identifier:   8E:A9:ED:38:BF:A1:87:05:3E:51:B6:A5:56:0D:8C:40:04:A0:0A:38
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       0198838CBDE38FC5C26C71E865F818F1E4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 08:01:35 +0000
Manifest this update:     Thu 07 Aug 2025 08:01:35 +0000
Manifest next update:     Fri 08 Aug 2025 08:01:35 +0000
Files and hashes:         1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: VvGsxrTS4ZgKxiSzjCPghEpMK4TGhdq6V71Nzs+tq9g=)
                          2: mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa (hash: bq/vxuiDoDVFgx9I1292qiHAVq4peufKuf4SJNis0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:8c:bd:e3:8f:c5:c2:6c:71:e8:65:f8:18:f1:e4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: Aug  7 08:01:35 2025 GMT
            Not After : Aug  8 08:01:35 2025 GMT
        Subject: CN=8ea9ed38bfa187053e51b6a5560d8c4004a00a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:65:8d:11:0e:07:35:b3:6b:b4:51:8b:ed:
                    be:5f:3e:ad:4c:fd:dc:4b:d0:51:84:9e:28:25:b4:
                    0c:73:17:fd:1f:ee:5d:d2:4b:99:a4:f1:3f:87:7d:
                    bd:50:81:a6:76:73:c6:fc:77:ab:67:53:b1:95:43:
                    a5:02:97:92:81:64:2b:3e:18:37:5a:a3:bb:ed:95:
                    fe:a6:3e:68:63:6f:c4:a7:03:ed:62:ca:51:6c:86:
                    3c:da:16:1a:59:f1:dc:f0:b2:a6:a6:97:ce:dc:3f:
                    35:0c:b3:ae:af:4a:b6:07:d7:eb:c8:45:40:dc:85:
                    33:a4:66:36:18:5c:36:d6:c9:3b:7a:8e:57:49:ca:
                    ca:d9:18:64:00:f0:a8:21:73:0e:8e:1e:12:6f:fa:
                    99:fe:8a:a0:78:29:93:6c:1d:8f:2e:b5:5c:5f:af:
                    0b:b9:48:56:90:f2:9f:19:24:94:4c:36:d1:72:ff:
                    4b:89:e5:43:67:ea:17:7f:83:32:55:b4:91:c5:1a:
                    44:f2:a3:c9:88:e0:14:17:cf:84:4c:bf:46:a8:e9:
                    46:4f:2d:89:a2:35:94:b2:e1:e7:ff:7b:0d:b2:d9:
                    e0:5b:be:ef:bf:a7:30:04:f2:a6:7e:1c:d4:61:a3:
                    4d:1c:d6:5c:7a:e0:4e:70:d1:26:8b:97:b3:96:07:
                    74:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:ED:38:BF:A1:87:05:3E:51:B6:A5:56:0D:8C:40:04:A0:0A:38
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:96:8c:19:35:fd:d5:2e:04:d1:f2:54:ff:bd:ed:c7:0d:21:
         48:b0:c5:a8:b0:98:1e:3e:9e:29:95:ac:49:ff:31:49:80:b0:
         bb:a0:33:c0:56:b2:6b:55:84:a0:c3:6f:6f:6e:ba:c3:83:39:
         e5:4c:cc:b6:c8:c6:a5:8c:67:ea:5f:e2:02:b0:63:4c:b7:86:
         fa:1a:fd:2c:60:79:6b:d1:35:21:8a:74:49:66:24:0a:f3:27:
         1b:6c:96:44:94:4c:fa:c1:71:23:bc:e1:97:8f:b2:0e:2e:f6:
         27:17:6d:ad:7b:c2:eb:d2:fe:b9:aa:7f:80:6e:5c:ac:ce:cd:
         ae:4b:ab:b3:d2:c2:ac:51:49:57:f7:8d:a5:e3:1c:f6:66:9a:
         77:03:22:af:3b:b2:76:4a:b1:d4:b5:ef:d4:24:c9:ed:ec:4b:
         8c:16:8c:6e:81:1e:06:d6:7b:43:42:16:49:9f:b3:be:6b:29:
         35:9b:82:1e:1c:89:10:62:95:75:3a:be:3e:4b:30:14:bb:cd:
         4e:a4:65:01:16:45:49:77:82:41:80:05:5b:57:de:9b:50:86:
         89:70:9c:b2:1a:33:a4:c5:77:9e:c1:7f:2a:8b:c2:a1:53:cc:
         85:d2:5b:3a:fd:10:5a:47:e4:25:a6:30:c1:df:cb:05:5e:81:
         dc:20:f7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:31:09 2025 by rpki-client