Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          73DeOnzhNGt0/sutw53B7GE8DhIL3O7dJXKjL5ETfp8=
Subject key identifier:   62:B1:B8:34:F2:74:A4:25:E1:3C:72:F8:65:87:D5:3D:9C:F2:3C:FA
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       019872CF85FAD57988145D28D33EF555C561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1621
Signing time:             Mon 04 Aug 2025 02:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:59 +0000
Files and hashes:         1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
                          2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
                          3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: o03sofuzGSDG1vHhp37h4U5dR6Fzx0de3wOWmQwqy20=)
                          4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
                          5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
                          6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
                          7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
                          8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:85:fa:d5:79:88:14:5d:28:d3:3e:f5:55:c5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Aug  4 02:00:59 2025 GMT
            Not After : Aug  5 02:00:59 2025 GMT
        Subject: CN=62b1b834f274a425e13c72f86587d53d9cf23cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:92:4c:04:e0:89:fc:60:62:3b:0d:da:77:
                    23:b6:75:97:52:c7:79:79:ff:3c:9a:21:c7:41:25:
                    da:24:37:3c:21:b1:49:02:6a:13:4b:61:10:38:34:
                    49:57:de:1a:dc:83:5a:94:b4:12:f2:b5:29:e2:d2:
                    c0:c9:80:61:fd:92:dd:0e:0e:b4:2e:a7:1e:34:4b:
                    77:23:55:26:6d:a8:7c:2c:f7:2d:8f:7b:dc:39:4a:
                    7e:46:31:95:50:c6:9c:34:2b:3f:64:98:71:d1:03:
                    1a:83:87:96:90:fe:53:71:44:18:1b:56:d3:a7:30:
                    cf:5e:4b:c5:ae:dd:c7:e2:c2:6d:95:b9:26:59:c9:
                    7e:9a:82:e6:d7:9e:4a:d7:f9:8f:ac:e9:98:90:9c:
                    eb:d4:07:88:2c:59:72:e3:2f:c4:d6:a8:e5:33:d4:
                    05:4f:33:f1:55:de:73:ad:82:87:be:6e:d5:00:f1:
                    4a:dc:40:c8:1b:c0:96:8d:49:e4:9f:32:c7:ca:6e:
                    3a:1b:e8:2a:36:a7:d1:e6:b1:16:75:67:77:cb:25:
                    f7:b4:88:b4:13:ea:d1:b3:7c:df:a0:62:57:8e:7a:
                    76:f1:ec:94:1e:24:23:49:b9:4c:ac:a0:ef:a5:d3:
                    d0:11:69:ac:90:43:8c:03:a0:ad:96:87:b4:33:ad:
                    fa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B1:B8:34:F2:74:A4:25:E1:3C:72:F8:65:87:D5:3D:9C:F2:3C:FA
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:55:be:7f:6c:7a:32:ba:0b:c1:5b:ea:b2:c8:8b:57:83:a8:
         02:9d:1a:49:66:74:da:af:79:4a:34:34:d7:93:21:8b:84:df:
         7c:bc:d2:28:3e:72:f7:a1:89:c3:e0:22:b0:36:e3:61:53:5e:
         89:40:74:7d:ac:69:55:72:e9:77:9a:87:f3:8a:e9:a4:b4:60:
         da:72:c9:d1:bd:73:0f:4b:4a:37:20:18:3f:11:9b:6c:a0:6b:
         63:30:d6:bd:f7:cd:18:7a:6b:2f:07:86:24:bf:9a:a8:ea:43:
         53:18:1b:9f:d2:b1:2a:80:d4:40:35:60:03:da:e3:f7:b3:fd:
         aa:be:35:a4:bc:ef:b6:0d:77:8b:c3:c5:a9:68:4e:3e:87:01:
         4b:a2:54:1e:62:11:f5:80:e1:f7:93:3a:43:7c:2b:69:83:ae:
         63:2d:64:65:42:af:2a:a9:5f:c6:41:fe:04:2b:17:ad:8d:aa:
         97:fa:cd:3e:af:63:a8:24:fe:ed:2e:b4:cc:38:f7:c1:45:2a:
         71:64:70:3f:a2:0d:43:13:b5:34:dd:8f:ef:0b:1c:40:4f:e6:
         1f:35:06:7d:b7:f9:eb:1a:fe:fd:d0:5a:1e:12:61:20:21:f3:
         9c:b7:f4:e9:5a:10:59:33:21:fd:f8:28:f5:c3:bb:03:b9:35:
         f4:c4:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:50 2025 by rpki-client