Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File:                     M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier:          s/RAkLtAqrPOvLme0SKVvWB/bgIDj5LmMMQD7PcJVoY=
Subject key identifier:   08:90:A8:CE:C6:D5:F7:D6:9F:EC:8D:BB:F7:0A:2C:43:0F:2B:2E:46
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer:       /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial:       019873E3D45CCFF307708ACCC28DE1D2F909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 07:02:47 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:47 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:47 +0000
Files and hashes:         1: 2vNXSPhqGzkcVvfumaqzoQwZMt0.roa (hash: eL4GW0LkIf6gTx0hvW09DQfbQa9hDU0uyvNBC0IgCZw=)
                          2: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: DqyB8pklFd7er6ag6QG+mybBLQgDkzlQwy0Ic6jmGtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:d4:5c:cf:f3:07:70:8a:cc:c2:8d:e1:d2:f9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
        Validity
            Not Before: Aug  4 07:02:47 2025 GMT
            Not After : Aug  5 07:02:47 2025 GMT
        Subject: CN=0890a8cec6d5f7d69fec8dbbf70a2c430f2b2e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:18:47:18:28:b3:8e:9c:93:47:81:ca:46:
                    0a:50:31:c4:f3:4d:f2:6c:64:81:10:78:7d:64:3d:
                    3e:da:55:36:41:2a:6e:2d:53:8f:80:77:67:2f:0c:
                    1e:ff:75:a3:47:17:06:9f:7c:c3:b8:c5:d4:6c:80:
                    7c:9c:c0:83:b8:38:b3:8b:bc:76:bc:57:1f:76:72:
                    c0:63:f6:1b:76:46:37:37:52:28:25:74:27:09:62:
                    ba:5f:8c:b9:31:56:4d:95:dc:be:ce:d1:4e:52:3b:
                    37:2a:4a:28:74:46:25:8d:d9:37:51:3f:62:71:ef:
                    23:0c:6d:b7:64:23:62:89:c6:1d:37:9d:2e:03:68:
                    9d:af:b9:ef:fa:f9:c0:f8:e0:89:0f:ac:1c:95:60:
                    9b:d3:26:a3:44:43:ee:c3:41:72:97:7a:a2:ff:ac:
                    92:97:93:08:b3:48:57:0a:4b:06:c0:c6:db:6f:07:
                    bc:e5:2e:12:8d:91:65:14:50:92:38:09:72:d8:21:
                    96:1e:4c:23:a5:0c:e8:28:7e:59:48:a8:a6:50:1c:
                    21:0d:3c:a9:20:69:eb:03:c4:05:4f:eb:18:11:26:
                    95:9d:bc:91:ed:32:aa:45:d3:f6:a6:c7:50:fd:f5:
                    c8:4d:c5:f7:22:db:64:af:a3:c6:a7:a1:01:01:03:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:90:A8:CE:C6:D5:F7:D6:9F:EC:8D:BB:F7:0A:2C:43:0F:2B:2E:46
            X509v3 Authority Key Identifier:
                keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:63:71:ea:5d:f0:cf:ce:d2:34:36:b1:88:cb:72:03:c3:7b:
         de:cb:23:90:09:f2:9f:f9:84:e5:dc:77:3b:24:38:2f:2e:bd:
         7f:74:55:b1:37:aa:27:a5:38:f7:4f:4f:f9:51:0e:f6:4e:cd:
         c8:72:70:41:04:8f:53:00:82:1b:0b:4f:e2:99:35:2b:1e:68:
         4a:8d:dd:99:2e:c3:db:a7:0d:54:7f:6f:0c:d4:8e:34:4b:25:
         8f:07:66:5c:dd:63:8c:80:fc:dd:2c:f4:9a:3f:c2:16:b5:05:
         e2:b1:c9:e0:ec:36:4a:f9:82:00:f2:a1:c9:5d:2a:63:30:7e:
         2d:7b:ba:00:1d:79:83:ab:6e:18:d8:3b:a7:cd:d4:45:a0:ae:
         9e:a8:00:c6:de:f8:34:5a:a4:6e:0c:b2:fa:03:f1:4b:8e:11:
         c9:d2:d1:b6:e7:d2:f1:01:be:7c:12:b7:82:41:53:49:b3:b9:
         a6:16:3a:e4:00:8d:db:df:cd:3b:0c:d4:5d:5a:38:85:33:4a:
         fd:52:9b:6c:27:41:74:fb:6b:cf:31:79:aa:84:72:87:d8:c6:
         29:4f:b2:c4:0c:87:6a:c3:f8:8c:65:1e:81:88:4b:ab:f8:42:
         8c:e1:b1:74:43:c5:bc:2a:70:f7:77:0b:fb:e7:20:3d:16:76:
         11:a5:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:35 2025 by rpki-client