Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File:                     AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier:          NSENzboxQY7VIxe2fChZ+PvLHV2YwJHMWLLwICEcv3g=
Subject key identifier:   19:DC:7A:A8:A2:F3:98:B4:C5:AD:0E:C3:AD:28:BF:9C:2B:0A:2E:49
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer:       /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial:       01988EED34741D94AD002C448DEB7735DED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number:          1331
Signing time:             Sat 09 Aug 2025 13:02:46 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:46 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:46 +0000
Files and hashes:         1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: j4JoVWawCfLtd4t8Y3c0sdzaWqF6EabYqml+Z309sCs=)
                          2: n9Z7JdCiSwjT4oRDZi35t5PUbJI.roa (hash: qS+ofqB65um0Ldb5tVFufC3+3rS3esOr1eXB8SyF6xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ed:34:74:1d:94:ad:00:2c:44:8d:eb:77:35:de:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
        Validity
            Not Before: Aug  9 13:02:46 2025 GMT
            Not After : Aug 10 13:02:46 2025 GMT
        Subject: CN=19dc7aa8a2f398b4c5ad0ec3ad28bf9c2b0a2e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:51:ab:9a:74:5c:2b:06:88:fb:be:71:39:74:
                    81:1c:f0:ec:38:48:15:d4:10:ac:2b:09:d6:ee:33:
                    f7:38:32:26:bf:1e:99:d1:42:c2:b8:b6:df:ea:0b:
                    1e:b0:5d:cf:a9:7a:c6:78:30:9d:78:e6:8d:5f:1c:
                    a3:40:03:3a:94:2c:a9:17:48:fc:d3:24:0a:e1:26:
                    e3:e6:fa:a6:d0:d2:5a:3e:2a:6b:7c:22:e8:64:ee:
                    d6:1a:72:44:b6:1b:95:82:1d:43:b5:24:84:cd:ec:
                    1d:3e:c5:c3:4e:cd:2b:65:9f:44:17:ba:62:dc:42:
                    05:98:12:b6:5e:88:6f:46:45:7f:29:db:ad:c7:38:
                    16:0a:68:ff:46:c1:2c:77:8e:84:0f:79:b4:85:27:
                    d9:9a:8c:b7:bc:8a:a9:44:d2:0a:23:f2:c8:a4:15:
                    e2:80:32:f0:81:5a:78:a8:ea:35:17:f3:ad:ed:6f:
                    35:71:75:30:b4:57:42:b5:9f:93:34:2c:57:38:7c:
                    c1:e4:d4:19:a9:05:45:fa:ea:27:20:4d:a0:2e:49:
                    f8:fb:f7:68:ec:ae:83:7f:8a:b5:e7:f7:34:ca:57:
                    11:f1:ab:a1:13:7f:ae:42:21:0b:09:36:8e:16:08:
                    7c:fc:62:6c:20:b4:37:ca:cb:bb:ce:92:9b:21:e4:
                    19:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:7A:A8:A2:F3:98:B4:C5:AD:0E:C3:AD:28:BF:9C:2B:0A:2E:49
            X509v3 Authority Key Identifier:
                keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ea:9c:29:2e:a8:57:01:a9:86:1d:2e:52:42:4b:dc:b5:97:
         a6:05:d3:a1:9a:09:e0:51:f1:33:c6:bb:81:d7:43:64:2c:d2:
         29:d8:7f:07:04:a8:38:2b:e7:8c:3c:af:eb:e1:62:33:32:de:
         9b:e7:f1:c3:60:e5:50:78:a2:b2:28:87:5e:83:bf:0f:46:b9:
         b4:ef:9b:a1:a5:6a:97:69:ec:89:66:59:15:49:b6:e8:af:43:
         c8:31:1a:68:39:3b:66:ad:15:cc:da:dd:66:9d:dd:13:97:8f:
         56:d3:ae:92:e4:b5:7f:67:73:52:59:9e:d1:0d:4d:9b:ed:fa:
         b1:e6:c8:82:70:b9:91:c0:08:0b:de:99:34:cd:2b:cc:d5:44:
         ec:8e:03:b7:29:6e:de:a5:f1:1d:31:8c:fe:72:7d:fc:f4:9f:
         f9:24:91:9f:00:11:ad:0b:01:32:3b:d7:6a:65:f4:1f:da:d1:
         3f:55:61:67:2f:21:3e:77:38:67:e5:6e:3d:61:9f:b5:5e:05:
         6f:92:02:73:5e:c1:e4:b6:92:15:16:a1:12:13:1e:0c:c2:90:
         8e:4f:b1:be:1f:b1:b1:0f:36:1b:18:8b:e6:a4:9d:1c:21:17:
         60:9b:cb:45:86:5d:b1:c2:8d:4c:e5:d1:a7:6b:24:fd:3c:c8:
         e0:33:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:37 2025 by rpki-client