Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File:                     31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier:          U0c5pwHg2/oe7MlB6U3T3ZaBtiBucvjcTHB8ernyCmo=
Subject key identifier:   B5:C2:B8:93:A4:DB:C1:4E:E2:C3:32:D2:A9:73:B4:F0:41:C3:B4:12
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer:       /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial:       019873E2D7726DD78DF04A99F5548E986216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:01:42 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:42 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:42 +0000
Files and hashes:         1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: WRuIBqLMIFA64Uf4cIyagbKglcOS0voXcUPwe4/w2Ng=)
                          2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:d7:72:6d:d7:8d:f0:4a:99:f5:54:8e:98:62:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
        Validity
            Not Before: Aug  4 07:01:42 2025 GMT
            Not After : Aug  5 07:01:42 2025 GMT
        Subject: CN=b5c2b893a4dbc14ee2c332d2a973b4f041c3b412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:ee:98:66:86:7b:07:96:b1:d3:15:66:ad:
                    1b:f5:29:27:88:91:ce:3e:e8:ad:b7:35:df:3d:2d:
                    79:7f:67:14:be:e8:c7:45:6c:37:82:0b:b0:c4:3d:
                    4e:f9:44:31:38:e5:9f:d2:8e:32:6c:61:70:62:66:
                    e0:26:d8:b9:e5:b4:23:d3:f2:ac:b6:ac:c5:0d:15:
                    43:f5:6a:f9:63:3c:84:91:9f:12:9d:15:e4:90:b4:
                    40:53:b1:8d:14:3a:b3:da:10:1f:bc:92:06:b0:a0:
                    b2:66:96:54:3d:c2:3d:f7:ea:ee:fd:78:16:de:bc:
                    77:c1:09:a7:cf:e2:57:53:bb:0f:24:ec:8d:25:55:
                    30:ef:35:e6:e6:e7:f2:47:e7:50:1d:a1:ce:24:98:
                    48:4b:89:0c:26:1a:78:e3:cc:eb:e0:77:85:4e:97:
                    c5:5d:75:46:db:0f:87:d1:b5:68:7b:e5:0e:c4:8b:
                    82:96:77:85:8c:8f:b7:a1:ea:c7:bc:80:57:b2:77:
                    5f:d3:0a:47:10:e9:2d:c2:4a:1b:b6:5c:67:27:76:
                    28:8e:20:12:99:bf:02:08:93:8f:4d:74:4e:83:00:
                    69:c9:3f:5d:97:27:43:99:fc:6d:47:e6:89:cc:ce:
                    b6:74:3e:8e:14:48:05:ef:7b:f1:84:46:96:3f:3f:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:B8:93:A4:DB:C1:4E:E2:C3:32:D2:A9:73:B4:F0:41:C3:B4:12
            X509v3 Authority Key Identifier:
                keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:30:95:4e:d4:46:47:aa:1f:a6:6a:a3:91:1e:79:a3:9a:
         4d:6b:ea:51:24:2d:55:4d:b4:ff:35:54:a4:fa:05:77:a4:bd:
         af:33:8b:39:94:0d:79:30:a1:a5:7f:6f:b7:9e:21:bf:5e:65:
         ee:50:c2:9c:ed:bb:74:44:d5:df:1e:6e:bd:77:6c:a4:98:c1:
         f2:ed:dd:39:40:b1:3a:70:64:08:06:e9:89:4f:ff:46:b0:96:
         aa:65:35:67:18:21:d6:b9:46:c3:12:a1:73:53:20:68:2b:bc:
         95:cf:6b:e0:9c:59:90:bf:16:16:29:c0:a8:99:bd:15:e7:a1:
         9f:13:c0:70:ca:10:6e:d2:a0:2b:5c:63:b2:93:38:4e:64:5b:
         50:e5:99:0b:d3:66:d2:e3:73:8e:e5:dc:9b:7f:a5:11:7a:57:
         9d:75:fc:32:74:09:9f:1c:4c:66:0f:1c:bd:98:b5:71:90:41:
         9e:40:75:65:92:d0:e2:05:4f:10:91:b3:62:39:2b:95:4b:26:
         aa:24:1d:08:81:e8:6c:2c:08:a8:73:f7:5a:3f:d0:1d:b1:ee:
         93:89:8c:ee:0d:dc:66:a1:3b:4b:d0:f3:55:b4:ec:65:42:28:
         87:42:e5:e1:e6:be:29:95:e6:92:a9:15:e4:62:54:48:b4:f4:
         32:0d:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:29 2025 by rpki-client