Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          jKwgY2g+1Q4d4q0xD/1gLH1bVnoo83qsR8A1DuSJuZo=
Subject key identifier:   6C:8D:3B:D3:ED:60:83:7F:1A:51:89:21:DC:9D:79:DF:49:6B:17:B1
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       01987FAFB01CB21E128F2536D50D38F36B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          1622
Signing time:             Wed 06 Aug 2025 14:01:16 +0000
Manifest this update:     Wed 06 Aug 2025 14:01:16 +0000
Manifest next update:     Thu 07 Aug 2025 14:01:16 +0000
Files and hashes:         1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
                          2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: fmOrxw4nQ9uZNAMxJox18lxzJrj+hYG0a5NmEgkmW6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:af:b0:1c:b2:1e:12:8f:25:36:d5:0d:38:f3:6b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Aug  6 14:01:16 2025 GMT
            Not After : Aug  7 14:01:16 2025 GMT
        Subject: CN=6c8d3bd3ed60837f1a518921dc9d79df496b17b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:5f:cd:c6:66:ae:25:9a:f9:77:ba:d7:e0:
                    cb:ff:53:1d:ec:2f:57:5f:c8:2e:d8:0c:f4:ee:f6:
                    80:65:0f:90:35:b2:04:78:26:3f:13:fc:1e:25:d0:
                    68:00:bf:5f:a0:a3:40:72:5d:70:ff:94:c3:a8:59:
                    30:60:12:a2:37:3d:ed:82:cf:96:12:6f:76:cc:e5:
                    74:ab:06:f2:d2:b4:96:05:6c:20:e0:1e:02:d5:ec:
                    10:6c:47:5e:b1:f4:5d:ac:f4:e5:a1:f4:f8:f9:b6:
                    ef:66:01:b7:0c:8f:25:8f:75:c7:5b:a6:97:f3:2b:
                    0a:ff:b0:45:56:25:79:ea:18:5b:df:55:e6:fc:f3:
                    9f:9f:62:1b:47:ea:eb:80:25:52:30:05:15:d3:83:
                    48:3a:d7:47:cf:86:cb:1e:14:11:bc:d9:f5:69:6e:
                    31:7f:0b:55:66:72:07:6f:9f:2d:fe:e0:7e:06:93:
                    99:4f:f0:16:0d:dd:90:03:2b:bc:c1:ec:e5:7c:1c:
                    ea:ec:27:7f:7a:ed:0a:1e:13:40:51:79:08:b2:68:
                    9e:6f:a7:e1:55:1a:75:ca:9b:c5:54:4c:a3:19:a2:
                    f6:13:37:26:20:05:d3:60:fa:73:4a:b1:e2:2c:56:
                    e3:80:08:d5:aa:6f:72:59:58:8e:b6:36:e6:24:e4:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:3B:D3:ED:60:83:7F:1A:51:89:21:DC:9D:79:DF:49:6B:17:B1
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:a9:b6:00:0a:fb:f5:68:e2:1b:c8:88:60:51:40:8f:94:
         e3:5b:a5:22:0d:c3:43:9b:4c:4e:83:d0:ce:6d:3f:49:40:95:
         dd:10:b2:a4:b4:9f:d5:ce:fa:15:cb:cc:bf:7e:c8:37:16:2b:
         83:c6:29:5d:ad:56:7c:64:2b:31:7c:15:bd:ad:ae:0c:97:19:
         21:85:c1:ba:54:95:d3:d9:83:b0:a0:bc:a1:4f:c1:ca:74:91:
         62:bd:69:77:e2:19:b7:20:0c:77:ad:e6:f5:c7:c6:d5:00:13:
         3f:8e:aa:e2:2d:62:28:56:50:aa:b8:ec:f8:52:0d:24:fe:cc:
         71:02:32:42:ce:f6:31:60:a3:14:71:65:05:e6:ba:cc:cc:62:
         4e:a0:ea:5c:34:be:05:18:d8:a3:91:0d:82:7e:e3:c6:d3:ee:
         36:f1:d7:c9:85:d7:bb:ae:a2:b4:40:f5:05:6f:4a:3a:7b:09:
         32:c3:35:92:39:4d:f7:ce:be:2b:d5:18:80:1c:3f:cc:a3:6d:
         e9:35:47:ea:7d:f6:a3:d3:76:f5:4c:3e:85:40:a4:6c:ae:df:
         db:a4:4f:90:09:59:35:46:42:e7:9a:1b:e2:a1:e3:32:4e:91:
         59:80:c2:93:b4:97:e4:c0:e6:ec:5e:2f:99:8b:dd:09:38:87:
         5a:d8:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:35 2025 by rpki-client