Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File:                     MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier:          /iZP++/4Kqs0YPwYDf2pKPy9XcfK6WRRjTFSkMq+8jU=
Subject key identifier:   60:6A:DD:7C:A2:80:9D:51:23:30:6B:77:0B:0D:FF:06:C7:59:41:E0
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer:       /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial:       0198906C307694D045F3FAAB3A6AB78450C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 20:01:05 +0000
Manifest this update:     Sat 09 Aug 2025 20:01:05 +0000
Manifest next update:     Sun 10 Aug 2025 20:01:05 +0000
Files and hashes:         1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=)
                          2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=)
                          3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: C5RCfhKnjv5KTuweIlDGu2bxQICYWSHm0o0xA14ZsGQ=)
                          4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6c:30:76:94:d0:45:f3:fa:ab:3a:6a:b7:84:50:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
        Validity
            Not Before: Aug  9 20:01:05 2025 GMT
            Not After : Aug 10 20:01:05 2025 GMT
        Subject: CN=606add7ca2809d5123306b770b0dff06c75941e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:54:6f:72:63:40:d0:e1:c4:b0:cc:25:cf:
                    ea:95:68:a7:69:f8:6c:f5:9d:17:fe:c9:02:20:bd:
                    31:6b:66:75:44:90:7a:88:db:93:6d:a6:09:55:cc:
                    29:d0:19:cf:5c:bf:96:74:bd:cb:f6:9e:06:7c:5c:
                    2f:ce:ff:06:ac:89:79:eb:d9:c4:e6:84:c6:e0:0b:
                    1c:29:af:b4:47:7e:12:20:1a:41:1a:4d:2b:ec:78:
                    0e:85:79:f5:bb:36:9c:71:71:62:9a:cc:e8:38:a9:
                    f4:42:ee:ac:dc:00:7f:06:33:41:d8:ef:52:7c:e2:
                    d8:80:5d:6e:7a:c1:b7:13:e8:01:43:cc:05:05:11:
                    bc:fe:cb:ce:9d:bf:23:e9:e0:2d:ed:8d:50:c9:65:
                    cb:f3:91:c8:a7:26:f0:e1:34:c4:8b:bb:06:41:35:
                    a1:f4:16:d0:3a:ef:78:a7:90:c3:e3:c2:97:c7:ae:
                    d0:f3:bc:84:ed:25:55:1e:13:eb:c2:9e:da:5d:16:
                    32:8e:4c:e4:3f:74:ce:0b:77:f5:c8:bb:22:29:d4:
                    5a:3e:b6:fa:49:a4:ea:b8:bc:88:6a:e9:b5:47:1e:
                    5b:bf:5f:e1:cc:ea:86:8c:64:b5:19:ba:00:af:d2:
                    bb:c8:9b:56:a6:83:0e:f4:ab:21:04:28:37:5f:b0:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6A:DD:7C:A2:80:9D:51:23:30:6B:77:0B:0D:FF:06:C7:59:41:E0
            X509v3 Authority Key Identifier:
                keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:6d:c5:19:83:e9:88:20:6f:55:c4:a4:e4:86:c6:4c:e9:
         bc:c3:9f:9d:7a:e9:2d:94:b6:d3:c6:6f:14:8b:ba:fb:1a:e5:
         3b:fd:89:fc:6f:61:0b:56:f9:4b:45:ac:65:1a:39:f4:78:32:
         3d:36:42:8b:fb:5b:b3:49:da:56:f6:ad:ab:d8:7a:62:6b:c9:
         c0:9c:23:65:8b:4c:58:a1:d5:62:0f:71:90:f8:b2:97:9e:1c:
         82:12:37:8d:ff:14:df:6a:d2:9d:cb:d3:79:9a:a3:0f:76:62:
         fa:e6:5d:bc:d5:32:bb:58:d8:5e:b8:53:a0:f1:c9:8a:78:44:
         5c:ab:e4:97:1a:21:eb:19:e5:98:2a:b5:f4:89:2d:56:4e:de:
         17:fb:a1:80:5d:6e:d6:c4:ef:d5:67:55:9c:0b:1b:a0:bb:46:
         88:8e:ac:b4:6f:41:59:7f:b8:b6:15:9c:0e:7b:17:77:f6:a8:
         24:7d:57:85:51:2f:01:68:93:51:89:75:8f:09:cc:35:2c:5f:
         17:74:84:23:ba:d1:56:d2:bb:4d:69:46:d9:da:09:73:aa:0f:
         35:1b:b7:04:fd:ae:99:dc:e4:57:7f:92:5c:9e:02:2e:cf:48:
         6a:29:4b:44:56:f7:1c:8a:e8:cc:4a:97:33:2a:ba:2c:c7:fa:
         7e:50:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:01:00 2025 by rpki-client