Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File:                     oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier:          xOn46gT9Cbp8LRJyUPJvnqlPIhUQa7XJaVf9ASiSHSQ=
Subject key identifier:   63:AB:33:24:29:50:11:3F:C6:7A:94:B9:01:70:EE:46:3F:BA:AB:FF
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer:       /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial:       01989636FD524874CDB04CB344DDBBB944F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 23:00:42 +0000
Manifest this update:     Sun 10 Aug 2025 23:00:42 +0000
Manifest next update:     Mon 11 Aug 2025 23:00:42 +0000
Files and hashes:         1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
                          2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: 5LwJKdXM9AloCZN4qmfyIBt6gH3rwc8tc87Bj2QyFs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:36:fd:52:48:74:cd:b0:4c:b3:44:dd:bb:b9:44:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
        Validity
            Not Before: Aug 10 23:00:42 2025 GMT
            Not After : Aug 11 23:00:42 2025 GMT
        Subject: CN=63ab33242950113fc67a94b90170ee463fbaabff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:2d:6b:1d:d4:55:72:02:17:e6:55:22:05:
                    b5:e7:8c:f9:0e:ec:9b:b4:1f:17:3b:57:1c:9d:88:
                    63:56:1f:65:ee:f1:69:b9:86:25:b9:02:06:f7:5a:
                    cb:76:6a:62:99:c1:62:71:bc:81:49:e4:73:3f:35:
                    84:06:a6:96:96:d9:49:25:bf:5d:af:8b:52:83:16:
                    db:27:64:62:63:f3:0e:7d:6a:9c:88:b7:59:4a:ab:
                    9f:92:1e:a2:f8:52:ac:b5:27:e7:bd:6a:7f:e0:f9:
                    28:8f:7f:db:cf:33:4f:ad:63:62:df:be:d0:8b:ca:
                    8c:40:a5:49:50:27:15:84:3c:9d:86:53:e0:92:e8:
                    67:5f:af:f4:4a:fe:3a:9d:3c:3e:5e:c3:23:43:90:
                    ac:57:11:01:44:0f:cc:d3:45:ce:96:3e:9d:59:d8:
                    04:36:09:05:39:b6:3f:e3:9f:3f:f5:0e:a5:5c:c6:
                    72:46:a7:aa:c7:b9:6a:25:d4:9b:23:48:2a:b0:d5:
                    93:e5:ec:77:f4:73:5a:b2:4b:18:8e:4d:db:d3:95:
                    d7:64:8b:cb:d8:9f:4a:86:2a:76:33:ae:b3:d0:dd:
                    3a:b3:0d:eb:64:33:58:d1:88:86:36:b8:5e:77:d2:
                    34:dc:43:f0:aa:b9:6e:2a:69:ed:23:7c:86:fd:d1:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:33:24:29:50:11:3F:C6:7A:94:B9:01:70:EE:46:3F:BA:AB:FF
            X509v3 Authority Key Identifier:
                keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:b5:b9:f1:b2:f5:ff:29:12:2f:65:18:f1:13:cc:e0:a7:
         14:5a:68:e7:cd:5f:7b:2a:28:48:b2:1f:9a:b1:fa:90:98:25:
         23:04:e3:05:ba:82:3b:db:4a:69:a7:95:9d:35:a9:56:e5:c8:
         26:8b:7e:c6:57:36:84:c2:0a:60:db:02:ef:68:95:59:97:ed:
         92:83:6f:71:be:7d:0d:6d:d5:ea:78:f1:18:fe:50:ef:35:bd:
         cb:86:f6:19:55:83:ce:27:81:ce:63:b5:a3:53:6b:c9:e0:5f:
         d5:c7:bf:98:c1:4d:e6:64:ef:67:29:6a:80:a4:c5:91:95:2b:
         b2:11:28:95:36:39:06:27:86:d8:e4:16:f7:ae:0e:ce:f3:bc:
         9f:1a:31:38:c8:a2:34:a4:65:3d:6d:20:24:18:bd:e4:df:e1:
         3a:e3:c1:3c:13:b5:f6:96:98:c6:3a:eb:a2:62:61:3d:31:a8:
         15:cd:1f:09:fa:02:24:65:bb:b1:0c:17:2e:74:6e:17:eb:24:
         3c:84:cc:f3:41:b5:9b:2a:5d:a5:98:01:0e:ec:22:55:10:c3:
         66:f8:2c:c9:ec:ef:31:78:aa:d1:86:cd:ed:0b:6a:b2:7e:a7:
         96:d4:3b:22:e8:7b:b2:6d:51:1c:fa:1a:67:6d:99:d0:fc:0e:
         fd:46:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:19 2025 by rpki-client