Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File:                     06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier:          AsEZlxfL0/0SUQ00GphHy+rKDYASGHsYPHPNNEZpAkY=
Subject key identifier:   32:4E:7D:3B:59:D0:BA:C5:6A:37:7B:E8:45:50:FD:D4:94:0D:15:46
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer:       /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial:       019875D22F50471A685EF9A750870E1E255E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 16:02:45 +0000
Manifest this update:     Mon 04 Aug 2025 16:02:45 +0000
Manifest next update:     Tue 05 Aug 2025 16:02:45 +0000
Files and hashes:         1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: KEMWjgWiyLbREqg3+WRGJ3tSnoQvhOcMe72zd60iCG8=)
                          2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d2:2f:50:47:1a:68:5e:f9:a7:50:87:0e:1e:25:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
        Validity
            Not Before: Aug  4 16:02:45 2025 GMT
            Not After : Aug  5 16:02:45 2025 GMT
        Subject: CN=324e7d3b59d0bac56a377be84550fdd4940d1546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:34:c4:c5:bd:d4:26:96:71:01:f6:0a:ef:
                    a5:2f:ff:90:be:c4:4a:8b:8e:96:15:39:08:51:96:
                    5a:1f:b7:39:7c:7c:1f:6f:04:b5:d2:d6:4a:b8:89:
                    cf:8e:f4:f6:e3:25:63:b0:c9:9c:84:f0:33:c9:13:
                    b6:ae:61:c5:36:b8:63:7d:89:79:9d:02:e8:10:f7:
                    2f:0b:ef:27:a5:a9:aa:48:ff:ab:e8:03:d7:3e:de:
                    8e:d3:8a:77:62:55:8c:f1:33:86:04:de:44:eb:19:
                    69:0b:fd:76:75:b5:db:dd:67:fb:21:ca:10:7e:17:
                    90:a9:07:20:ab:a8:89:ed:4a:93:e6:6a:d8:5a:d3:
                    c1:10:b4:49:a6:6c:e5:d8:34:70:b3:26:e6:ea:aa:
                    de:3f:58:c4:b8:c6:5e:29:f6:eb:9c:5a:34:09:42:
                    cf:b5:0a:b4:1b:3d:71:39:f5:71:2f:1b:ee:06:89:
                    ed:b3:8d:1f:16:3d:d3:82:77:3a:5e:3f:ec:14:2c:
                    36:03:10:53:0f:cd:0f:96:1e:b3:7d:6c:88:85:9e:
                    ce:34:0c:0a:7e:75:71:9c:f9:0d:d3:4f:75:da:48:
                    dc:46:53:e8:5f:30:f5:52:a2:7c:ca:01:6d:60:5c:
                    31:f0:3b:fc:e6:8c:be:c4:b8:7b:55:3f:4b:dd:09:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:7D:3B:59:D0:BA:C5:6A:37:7B:E8:45:50:FD:D4:94:0D:15:46
            X509v3 Authority Key Identifier:
                keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:b5:77:de:0e:55:1e:64:2a:4f:34:db:7f:66:70:17:74:
         b0:0b:98:b3:ad:d1:5f:c8:04:97:ea:6d:de:23:f0:ac:c4:96:
         ea:3f:a3:37:5a:5d:5f:05:e2:88:9d:cd:3b:5a:a6:44:3a:8c:
         da:7e:9f:d1:10:f5:e3:f0:9c:5a:86:5f:ee:b8:9f:e8:da:cd:
         4f:25:9c:0c:ba:1c:84:5e:1e:12:8d:85:6b:12:d0:16:30:d8:
         54:30:66:81:81:6c:94:a4:6e:44:20:7d:87:f2:3c:63:fa:4e:
         60:4f:e6:6c:83:06:0d:a9:48:27:d3:a0:50:d2:ac:92:fc:91:
         ab:41:e4:5c:63:a7:7c:5c:cb:6a:21:86:37:fb:aa:a4:de:e2:
         34:19:45:27:a6:87:04:66:bc:9f:9f:97:59:ba:e4:8f:6a:b3:
         ee:03:37:81:e5:8d:55:07:43:ce:0c:05:af:db:32:b1:be:1b:
         22:02:1f:0d:cc:d1:e2:95:e2:03:79:12:8c:68:1d:c2:a5:ce:
         76:70:fc:cf:e1:6d:a4:1b:2a:82:f7:3f:d2:7f:5f:92:ee:6b:
         13:fd:4a:bb:c3:76:2c:f8:64:c2:3c:d9:90:e4:b7:63:f8:c7:
         f5:45:89:50:42:00:f1:4b:c4:8e:42:92:c7:6c:2c:52:db:a6:
         e1:17:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:09:29 2025 by rpki-client