Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File:                     I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier:          gt6Hb+nGynI9ZoafUkhr6W9ko9iVuiGo+25FrCJUyoY=
Subject key identifier:   77:23:E5:4D:A4:05:8D:ED:43:9A:01:48:F0:5C:39:8D:3E:BC:37:00
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer:       /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial:       0198A04CFD32433261587A96A4D254AF5555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number:          1630
Signing time:             Tue 12 Aug 2025 22:00:56 +0000
Manifest this update:     Tue 12 Aug 2025 22:00:56 +0000
Manifest next update:     Wed 13 Aug 2025 22:00:56 +0000
Files and hashes:         1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: ZsllU3i3vBGN5lq8anc12d2j/9Jo3EK9d90Z08Xe1MI=)
                          2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4c:fd:32:43:32:61:58:7a:96:a4:d2:54:af:55:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
        Validity
            Not Before: Aug 12 22:00:56 2025 GMT
            Not After : Aug 13 22:00:56 2025 GMT
        Subject: CN=7723e54da4058ded439a0148f05c398d3ebc3700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:99:f3:ed:45:a0:6b:32:28:03:84:5d:3d:
                    03:2f:cf:c1:2d:3e:19:5a:e9:eb:2f:a0:e8:0d:13:
                    2c:77:fc:09:8d:99:f5:0a:cb:f1:24:dc:e7:a4:5c:
                    04:e6:f7:ad:7b:bf:27:49:38:dc:57:11:81:c3:d3:
                    43:50:67:18:63:c7:f1:54:2c:e9:30:5c:4e:22:78:
                    5e:e8:fe:dd:18:e3:80:72:d2:f4:b2:03:0f:db:c2:
                    da:7a:31:3e:70:05:26:16:48:17:d9:f3:4f:2e:52:
                    a6:dc:4e:b9:39:5f:37:83:8d:a9:f2:12:d3:f4:7c:
                    ba:f2:3f:08:44:c4:df:00:58:a9:5b:55:3a:d4:33:
                    01:a8:5a:58:2c:7e:40:52:52:c7:e5:f8:01:01:8e:
                    c4:b3:0c:88:98:92:fb:15:03:c2:4b:b4:87:2b:4d:
                    aa:c3:9f:1a:3d:be:1e:a3:2f:3f:30:eb:6f:0b:85:
                    ab:c1:17:0d:84:f2:f1:83:5d:52:a6:23:9d:c4:bd:
                    11:02:10:af:7a:cc:40:9a:ae:ec:8f:2b:ec:dd:08:
                    16:ca:d3:29:86:3e:60:05:b0:89:75:5a:78:28:27:
                    93:b5:9c:f3:b9:bf:e9:f1:3b:cd:62:16:ae:33:b7:
                    6d:0c:33:aa:73:90:04:1d:9f:e1:19:fe:2b:4f:ce:
                    16:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:23:E5:4D:A4:05:8D:ED:43:9A:01:48:F0:5C:39:8D:3E:BC:37:00
            X509v3 Authority Key Identifier:
                keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:e0:ed:f8:db:0f:0d:89:5b:ac:2f:12:a8:40:8a:4a:c3:
         79:1b:18:c3:61:d5:6b:ba:7b:1d:d3:9e:e3:1c:fe:78:9c:4f:
         9e:45:ba:d2:fa:2c:7d:ec:ab:22:66:64:6a:f6:6d:b9:a6:eb:
         46:68:6e:60:f7:60:34:55:b2:ff:7b:89:ec:01:40:82:c4:52:
         cc:51:c9:26:bf:69:a7:a0:e0:fe:5b:96:45:8d:11:03:c2:dd:
         dc:53:2f:1f:8e:60:da:be:85:f0:13:fb:1b:76:c2:76:54:b9:
         a5:37:c6:72:0e:dd:18:b1:97:33:71:65:72:8d:69:b2:30:34:
         29:b7:75:4a:5d:69:07:7e:1e:7e:b7:93:ed:73:35:95:b6:ae:
         31:fa:4f:9f:59:78:c4:3f:e2:d2:68:84:8e:78:3a:45:7b:58:
         7c:e5:f6:0a:27:dc:65:22:f4:f3:8b:b6:49:36:45:a6:fb:c6:
         b7:03:a4:f1:11:dd:18:90:20:8c:02:6f:8d:fa:33:19:d0:48:
         23:23:ec:aa:20:c8:90:74:e7:58:4e:d8:b2:1e:c2:25:e3:d3:
         d4:2e:bf:cb:fa:21:71:7a:76:5a:16:c1:52:6a:82:95:2b:7b:
         49:b2:99:72:a6:1b:0a:22:73:f9:f0:4e:3a:fc:e1:c0:b1:be:
         4d:8c:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:40 2025 by rpki-client