Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File:                     IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier:          K6/kyZnNm/KE7f96WZ7AbZZDUWY2J9EEMFH9NNIJqgc=
Subject key identifier:   26:2C:BD:A7:9F:17:79:BB:E1:94:56:C9:C5:E9:08:DA:AC:6E:08:B3
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer:       /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial:       019874BE49D85AAC115816FE1B3458DDF53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 11:01:24 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:24 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:24 +0000
Files and hashes:         1: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: dL0sJL0yPN2A3IanPv2Azp0ZzENw6jBfqYTLJPJIZjc=)
                          2: X8ZFuM8cVmkTslM54G-NHaJfImQ.roa (hash: HXWB+offeGx+RYH+8cAxZvvU8F4PwjDTMuG2VKd+Z6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:49:d8:5a:ac:11:58:16:fe:1b:34:58:dd:f5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
        Validity
            Not Before: Aug  4 11:01:24 2025 GMT
            Not After : Aug  5 11:01:24 2025 GMT
        Subject: CN=262cbda79f1779bbe19456c9c5e908daac6e08b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:e8:95:ef:f5:22:db:76:8b:58:c9:6f:8a:
                    6d:cb:40:ce:40:76:13:cc:84:7e:8c:a2:a7:d9:80:
                    8f:6a:03:e1:dc:78:5e:df:9d:d0:91:33:90:b3:3a:
                    c3:95:8f:ac:d3:5e:66:11:4b:10:2b:bd:b8:1e:aa:
                    58:b7:d8:6d:11:44:41:dc:d4:25:cf:60:d8:e2:b8:
                    4b:27:26:5c:e9:aa:98:86:17:df:0f:d3:e9:75:d5:
                    92:b4:e4:8b:35:1a:5e:01:ad:4f:9b:87:b7:24:a3:
                    44:e8:5b:c3:05:b3:00:2f:f2:46:1f:70:84:08:c9:
                    bd:9f:79:fe:f9:dd:b2:fa:86:96:e6:2c:22:67:89:
                    1e:c4:6c:26:f8:9a:3b:38:4e:df:e6:74:f9:7d:08:
                    e0:bf:77:f7:6c:7a:aa:13:6b:8c:d2:db:da:f2:10:
                    a4:ff:08:c7:44:07:d4:4f:68:fa:8b:ea:2b:a3:a6:
                    98:ed:7a:fc:62:38:34:c7:1e:ba:53:12:d1:c7:86:
                    6a:3d:1f:43:39:67:3d:d4:f1:d1:9f:cc:0e:8c:8f:
                    0a:06:e3:03:fd:75:de:89:e1:fb:4c:00:c5:66:15:
                    00:e1:eb:37:83:4f:d1:f0:23:bd:da:36:fd:d9:28:
                    6b:38:9a:70:f8:fe:a0:a6:a7:d6:e3:e8:c9:a4:a6:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2C:BD:A7:9F:17:79:BB:E1:94:56:C9:C5:E9:08:DA:AC:6E:08:B3
            X509v3 Authority Key Identifier:
                keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:0d:af:44:7e:56:be:6a:1e:7c:30:48:b4:c4:55:23:3e:
         53:e3:95:7a:b6:cc:b5:53:ea:1c:e6:bb:5f:e6:43:15:72:67:
         b2:09:c5:7b:c1:80:b1:25:85:89:19:7c:b7:20:b3:47:29:e3:
         12:90:47:13:f4:53:70:03:75:f1:01:c8:53:94:2c:ae:92:e7:
         c9:29:7c:44:f9:d0:cc:53:b5:47:8b:a2:9e:b9:a4:a5:05:3f:
         8d:72:71:26:84:5a:93:4b:eb:eb:a5:c7:ad:a4:1b:78:94:c5:
         02:a1:3a:2e:18:9b:90:aa:65:ce:d6:d9:32:b9:24:5e:d8:bc:
         0a:7f:b8:36:78:ee:75:cc:6c:38:b1:a5:48:12:2c:cc:91:bc:
         7c:a4:8e:42:9c:3d:a4:4d:71:3f:86:9a:0a:98:58:e4:a6:ac:
         8c:92:59:77:50:04:ed:82:99:f9:ee:9a:21:c9:44:79:3c:d5:
         b8:70:ed:8d:04:08:f1:0c:de:8c:25:01:5e:6d:be:fa:64:e8:
         1a:6f:15:02:db:f3:a0:b2:a0:a5:f2:b7:f1:c7:6e:7d:e3:aa:
         4c:e0:aa:5a:f9:be:79:ab:2d:3f:b2:5f:24:e0:08:0a:fc:f0:
         e0:b1:e9:38:45:86:e3:15:11:b2:62:ed:74:0f:9e:fb:b7:c8:
         28:cd:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:24 2025 by rpki-client