Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File:                     59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier:          20jP6TQIwLlh4QMf3PgZlGIhK5fFznX+OOz94cGEClw=
Subject key identifier:   44:73:7A:14:B7:1E:99:F5:D5:C8:34:2F:DA:67:F7:E6:AF:2D:6F:E4
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer:       /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial:       019874190E2FCDDF6611397528D66A9E766C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number:          145C
Signing time:             Mon 04 Aug 2025 08:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:55 +0000
Files and hashes:         1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=)
                          2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: FZHOp3mZFrNC0W0TlnOKP6j55M/rvI1I8/qLYerDqzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:0e:2f:cd:df:66:11:39:75:28:d6:6a:9e:76:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
        Validity
            Not Before: Aug  4 08:00:55 2025 GMT
            Not After : Aug  5 08:00:55 2025 GMT
        Subject: CN=44737a14b71e99f5d5c8342fda67f7e6af2d6fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:6b:b2:93:91:d1:88:3f:af:b1:bb:7b:bd:
                    55:f8:68:05:c8:8f:19:cf:6f:da:91:65:56:00:b5:
                    dc:c2:ea:33:2c:a5:6a:4d:22:7d:b9:60:19:b8:d2:
                    bc:18:20:5c:c5:ca:a4:f1:a2:89:8d:4c:bc:3f:27:
                    54:87:6a:3b:33:a9:f7:29:15:96:78:b8:cf:f3:ad:
                    9d:83:9d:57:41:28:f9:a0:4b:a9:31:f2:16:d3:9d:
                    4e:20:69:90:1c:99:62:38:55:65:ca:d1:1a:bd:51:
                    46:ab:5f:48:ec:14:82:74:ed:cf:ac:00:5f:98:92:
                    84:78:75:c2:d3:06:98:44:13:96:3e:44:d7:41:29:
                    a5:8d:3d:36:2f:c3:1d:da:ce:6b:fa:8e:0c:10:c2:
                    2c:09:4f:10:33:1f:79:2a:86:29:77:1a:21:e5:30:
                    e6:42:3e:74:81:88:66:d2:dc:c2:cc:ad:15:00:be:
                    5a:17:ce:6b:12:a5:d2:75:c7:cf:5b:21:a1:80:f8:
                    af:57:45:40:45:96:d8:a1:13:9b:dc:28:7a:2e:a9:
                    8b:61:8d:05:26:b2:93:48:ec:5a:8e:13:f8:6d:7d:
                    c5:b4:6b:c7:81:79:cf:60:d5:0a:34:9d:62:5b:11:
                    fc:1e:7d:3d:85:ee:89:1c:45:d1:a3:ad:c1:44:66:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:7A:14:B7:1E:99:F5:D5:C8:34:2F:DA:67:F7:E6:AF:2D:6F:E4
            X509v3 Authority Key Identifier:
                keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:05:3f:df:cb:91:b8:f0:d4:f8:99:3b:c9:d7:ed:37:a3:
         48:72:56:41:98:35:2b:15:e4:e9:18:5d:1f:0c:72:e2:1a:e3:
         70:78:bf:48:83:d6:ca:24:9d:0e:3c:ee:32:2c:81:bc:13:72:
         6b:e8:19:e8:2a:a1:22:9f:19:07:17:c6:11:95:7b:34:c9:2a:
         34:5c:68:fa:e4:6a:e4:fc:49:a3:d9:e4:99:95:c8:2d:49:ad:
         1d:25:24:58:33:8b:ec:4a:ec:85:37:8f:32:81:9d:ed:96:8a:
         65:77:54:41:79:f5:88:47:e7:e4:97:00:36:ae:58:5d:f3:8f:
         3e:52:e8:eb:53:d1:ec:ff:5b:cc:07:2e:8f:4e:be:30:64:73:
         0b:3c:23:6d:80:c1:90:49:8a:e4:f8:5f:fe:1b:89:0b:aa:75:
         63:3c:3e:9f:b1:2a:76:f5:c1:51:a8:58:13:ec:91:b7:8a:74:
         8b:a9:38:b1:35:0f:b9:80:a6:e1:98:9b:24:de:11:98:03:d6:
         85:84:17:24:8d:66:ec:19:6a:41:a5:a7:e8:aa:7b:07:e2:7b:
         0c:2b:b7:e2:5d:50:c9:99:ec:b8:31:32:24:13:50:16:a6:ff:
         96:34:ff:9c:61:99:a9:99:50:ba:b2:d3:a9:b4:d8:c9:db:12:
         d9:8a:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:47 2025 by rpki-client