Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File:                     c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier:          zKPI4f1XpXHo9q91oCVH1NMM78Pt/D6boln7c3bCbTI=
Subject key identifier:   80:D0:B6:8A:FE:62:E6:3C:5E:3D:BA:E1:7D:AC:E0:04:81:CA:BC:68
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer:       /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial:       01987562DCEC39DFD3B647194AE222399ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 14:01:09 +0000
Manifest this update:     Mon 04 Aug 2025 14:01:09 +0000
Manifest next update:     Tue 05 Aug 2025 14:01:09 +0000
Files and hashes:         1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
                          2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: tm0cVUNQw6EEj+/vYr3hYC+uTANdsTSenqfE+eo96AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:dc:ec:39:df:d3:b6:47:19:4a:e2:22:39:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
        Validity
            Not Before: Aug  4 14:01:09 2025 GMT
            Not After : Aug  5 14:01:09 2025 GMT
        Subject: CN=80d0b68afe62e63c5e3dbae17dace00481cabc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:0e:19:0c:9d:8d:a4:03:24:cc:81:87:ad:
                    cb:fb:1b:ab:0e:ff:bb:e3:25:ba:30:f8:7d:d4:1f:
                    97:40:82:cd:b0:24:16:c0:a2:2f:67:3c:87:cd:8f:
                    13:48:c0:0a:a1:60:c9:0f:91:a0:79:5b:58:8e:d4:
                    49:9f:ce:98:ae:3e:9c:f5:f6:f2:c2:d9:d7:51:17:
                    b6:36:4b:17:95:4a:cd:b8:8f:bb:72:a8:83:0c:e2:
                    5b:29:b8:58:fc:1e:09:85:e3:6c:e2:5f:b6:94:1b:
                    7b:a1:18:12:73:b2:fa:eb:a7:bb:bc:80:f3:2b:a9:
                    4e:f6:71:b0:c3:dc:40:30:0b:f5:47:d7:f6:c3:07:
                    dd:cb:c4:af:7b:c9:d7:e4:58:cc:20:bc:8d:24:54:
                    12:7f:2b:33:ab:c1:c4:12:06:90:89:53:5b:fd:07:
                    f8:97:4d:dc:98:0e:b7:84:b0:3d:2c:4f:c0:bb:95:
                    0d:b6:e9:f0:5e:0f:fa:9d:3b:54:f6:2c:54:2a:0f:
                    41:1b:a0:d5:58:b8:96:2a:6c:59:76:af:0d:26:93:
                    d9:bf:57:9e:77:96:3b:f0:0f:6b:ed:e3:a3:08:e2:
                    33:69:1e:14:e6:83:df:f5:e0:9c:d4:17:28:4c:b2:
                    b6:e2:82:92:e5:fd:33:fc:d6:35:71:10:b2:ed:64:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D0:B6:8A:FE:62:E6:3C:5E:3D:BA:E1:7D:AC:E0:04:81:CA:BC:68
            X509v3 Authority Key Identifier:
                keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:44:6c:13:4d:cd:a4:52:4c:22:59:0d:42:12:87:be:8d:4c:
         15:ed:a6:e0:43:c4:6c:72:0f:90:24:fd:88:97:78:2e:b8:88:
         57:07:14:8a:18:b3:ba:40:65:d6:3a:c5:3e:af:9d:df:2e:63:
         b9:95:74:26:2a:a7:cc:7c:fa:fd:c5:81:c4:54:df:a1:e0:46:
         d5:e8:f4:85:25:3f:61:06:69:ec:2f:18:d9:af:bd:ac:09:bd:
         e4:6a:75:0d:cb:c1:14:2c:14:e3:e0:2b:be:bf:af:20:c9:68:
         ce:9e:f3:fa:67:d3:88:e0:fd:11:f7:1e:99:44:4e:bc:ef:d3:
         c0:87:4d:c7:15:25:54:09:af:73:41:45:9b:cb:4e:ac:81:cb:
         88:6b:e7:0e:fc:68:e7:63:79:d1:59:c4:91:5d:00:3f:65:d7:
         5f:e2:4a:5f:6a:0c:57:4c:63:81:77:2a:54:87:1c:f1:0d:ff:
         85:bb:d0:5b:42:83:ba:43:42:a9:ac:b6:46:69:54:95:09:cb:
         c8:fd:f4:60:63:d3:f9:b3:4b:95:8c:fa:af:1f:b3:a1:4b:59:
         cb:0b:18:59:1a:78:aa:1a:3b:2b:b4:27:c6:e4:c4:ef:b3:65:
         d5:fb:8d:65:81:74:02:28:57:38:15:f1:99:d2:22:f0:de:71:
         5c:c7:01:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:20:22 2025 by rpki-client