Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File:                     pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier:          o6fTzMtzaGW2zvB7w74c3rUNccWk4xWHubdyboFZIps=
Subject key identifier:   57:56:7F:06:A4:9C:13:E9:2F:B8:64:1C:67:95:9D:43:DF:7F:F4:F8
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer:       /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial:       01988920771A9402E7E55BFB12B8C7F216E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number:          1624
Signing time:             Fri 08 Aug 2025 10:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:02 +0000
Files and hashes:         1: SMwI-Rnmis2eePW_F_GRyzsQVwc.roa (hash: tdRLxodAQZWX8dKW9xJOxhOQI+ocU2apdjVD9eeaSWc=)
                          2: jHM5InJQV_3L354P4EcDRlzLqQg.roa (hash: YagEFBVsay86X4xOyFCoWFnHQNGB7P3cKZT9Ojcer8U=)
                          3: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (hash: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=)
                          4: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: EVqt/2102x5YDV5uUnBHJAyyi4dOZkz9Ij9GAWIDFD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:20:77:1a:94:02:e7:e5:5b:fb:12:b8:c7:f2:16:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
        Validity
            Not Before: Aug  8 10:01:02 2025 GMT
            Not After : Aug  9 10:01:02 2025 GMT
        Subject: CN=57567f06a49c13e92fb8641c67959d43df7ff4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:42:53:43:54:13:09:76:64:cb:79:b5:97:
                    3f:82:36:50:fc:ac:96:fd:c6:e7:f3:02:80:9c:e8:
                    c3:ca:85:0b:00:56:d1:1b:fe:ab:1d:ba:18:dc:b7:
                    e0:d6:c2:80:5e:fa:6f:c5:b2:2c:1a:ab:01:7e:85:
                    48:45:e4:f3:a5:32:a1:36:14:f3:85:9a:75:58:ee:
                    5f:8b:a0:16:7a:a9:49:52:f7:79:7b:2c:5c:05:55:
                    45:4b:1f:6e:8a:0a:9f:83:8e:af:81:90:11:e5:f4:
                    99:a0:50:8b:90:4d:8f:18:6b:d5:d2:b8:49:7e:a4:
                    e5:8e:f3:49:94:bd:69:29:bf:2c:c5:72:6a:d3:a2:
                    77:7e:ef:70:bc:14:47:aa:28:b7:ca:20:96:48:0a:
                    23:87:24:4c:b2:66:80:d0:91:e8:7c:90:d7:9a:c8:
                    a5:c7:2a:07:26:7b:59:eb:90:e7:65:91:aa:cb:b1:
                    e2:0a:0e:c8:4d:a2:19:1d:ab:7d:1c:a3:dd:b6:7a:
                    8a:5c:2e:4f:d8:5a:89:f9:ba:ce:dc:9a:2d:72:e4:
                    06:0b:ec:f8:ef:e0:10:71:6e:70:a9:c1:36:bd:6e:
                    88:33:25:2c:10:a2:ae:12:fe:b1:27:20:36:66:66:
                    00:0e:04:fd:d2:6d:ec:c9:c7:64:79:02:3f:72:e1:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:7F:06:A4:9C:13:E9:2F:B8:64:1C:67:95:9D:43:DF:7F:F4:F8
            X509v3 Authority Key Identifier:
                keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:a6:97:c5:44:c2:32:1b:9a:17:58:08:98:9d:95:2e:7a:
         49:12:13:a1:bf:a0:91:6e:2c:45:16:a9:39:0e:16:aa:7b:07:
         84:97:bd:68:77:41:bd:d1:24:2f:45:90:6f:e9:af:71:f4:cf:
         04:08:17:53:15:63:89:97:a1:71:21:e2:c9:05:25:f7:f2:37:
         b7:1e:93:8a:8b:a3:74:f3:3b:f1:1d:7f:0a:be:46:cc:0b:e0:
         45:9d:fb:67:99:91:7e:61:82:cd:79:85:bf:75:d3:7c:7e:94:
         ab:35:02:1f:6d:97:09:23:b7:1b:bd:46:4e:42:c4:bc:79:c2:
         60:6e:c8:0f:62:7f:8a:39:a3:23:51:6d:e7:f2:d4:fa:fe:09:
         1c:0b:ab:7b:c9:6e:60:df:a1:e4:64:c6:8f:f3:bc:2b:01:d2:
         e0:9e:af:0e:73:c5:74:83:d2:06:21:89:40:a1:d4:22:cf:35:
         f8:ec:c5:ca:74:d6:66:cd:87:d7:e7:e7:0c:3e:1b:71:26:bf:
         33:3b:87:64:b8:d9:f7:04:cc:52:54:59:c2:bb:3d:3a:22:a3:
         17:69:a4:1c:25:a0:79:45:52:ac:17:d9:92:00:0a:68:92:e5:
         1e:e3:53:4d:57:25:c3:34:28:35:14:c0:06:0c:2f:f6:85:1a:
         b7:2e:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:03 2025 by rpki-client