Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File:                     RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier:          TWuV1vE9d6Tvg5PCH+rH82vnHeHqI/azbQ3XRuiSMys=
Subject key identifier:   4B:29:4F:F2:C8:3F:77:45:E6:DA:8E:C2:9C:0C:0E:A5:27:CE:17:FD
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer:       /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial:       01989592E86D88D81D2E35C8A1D3AB1D7451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 20:01:29 +0000
Manifest this update:     Sun 10 Aug 2025 20:01:29 +0000
Manifest next update:     Mon 11 Aug 2025 20:01:29 +0000
Files and hashes:         1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: GOq/VLrus771x0ufcL3XoOOzcu3GW6+6lHgmWih4zVo=)
                          2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:e8:6d:88:d8:1d:2e:35:c8:a1:d3:ab:1d:74:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
        Validity
            Not Before: Aug 10 20:01:29 2025 GMT
            Not After : Aug 11 20:01:29 2025 GMT
        Subject: CN=4b294ff2c83f7745e6da8ec29c0c0ea527ce17fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:2f:2f:ac:a4:e9:ff:0e:81:80:11:aa:65:
                    f3:6d:b7:ed:18:0b:a8:23:b5:0d:c8:ac:09:4e:b1:
                    03:92:03:2c:a5:7c:6c:18:2d:03:fb:75:a7:2c:81:
                    26:64:95:3c:38:19:9d:97:19:fa:50:12:ab:ea:ad:
                    87:73:2a:42:d7:cc:10:ed:27:3f:8b:72:9f:2a:32:
                    1d:1c:fe:75:0f:0b:6f:4f:7d:68:7e:63:8a:56:5f:
                    a5:de:fb:b9:fc:03:9c:dd:9f:79:3e:4e:b7:9a:dc:
                    97:56:11:c9:10:fb:79:53:94:f5:bf:76:ce:48:47:
                    39:c3:00:66:93:a1:67:fe:ed:8d:6b:d9:89:08:c8:
                    3f:f5:a4:5e:85:70:35:39:01:2b:3a:35:1c:f9:7b:
                    dc:f9:dd:0e:0c:dd:0c:64:69:a4:4b:3f:1f:a6:df:
                    de:eb:d9:da:d4:0a:75:39:83:2e:43:48:bb:94:50:
                    fc:cb:59:a0:51:57:14:13:72:d9:e8:29:c4:64:29:
                    ed:1c:25:93:c6:9a:96:ef:e1:fd:c6:ad:17:f4:08:
                    18:b9:93:fa:3d:2f:04:27:4a:a4:0f:97:e2:18:9d:
                    a4:c5:10:c8:37:13:a8:a0:8b:bb:fe:a2:ef:28:0d:
                    8d:e8:ad:f6:22:35:f0:d5:81:97:25:68:d9:cd:3d:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:29:4F:F2:C8:3F:77:45:E6:DA:8E:C2:9C:0C:0E:A5:27:CE:17:FD
            X509v3 Authority Key Identifier:
                keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:28:be:ce:97:18:ca:13:dd:24:bd:fb:7f:f9:3b:05:7d:87:
         c0:70:af:87:95:12:93:0d:39:f9:5b:3e:53:03:e5:24:f7:0f:
         c9:25:fb:7e:e1:07:86:10:f3:4e:dd:c0:e2:bd:5c:d0:30:92:
         4f:32:fe:f0:34:aa:dd:53:3d:77:b3:34:78:e6:e1:9f:5c:bc:
         4c:ef:0e:fc:46:8b:dd:69:46:70:e3:fe:e4:17:86:ca:79:c8:
         ff:60:f8:ae:71:c8:ee:d4:d7:7a:84:f4:83:1c:41:96:c5:ca:
         17:7b:2c:7c:d1:ab:d6:eb:2d:3f:25:79:e5:ef:88:c4:b1:09:
         78:3e:7a:0a:3e:2e:03:ac:65:37:47:49:ea:25:07:d7:84:2f:
         fa:38:fe:2d:a2:df:89:c8:fb:b3:3c:4b:5c:37:9d:1f:ea:20:
         89:21:0f:12:f3:29:cb:24:32:7d:1d:95:47:10:d6:05:3f:59:
         97:13:89:d5:c2:58:19:4e:2f:77:30:e8:59:a1:fb:4c:86:d3:
         d1:4d:dd:e6:93:39:be:5e:95:c4:12:68:6e:b2:e3:95:5d:80:
         84:ac:42:c1:73:f6:b1:2b:2b:e3:a9:5b:9e:20:bf:2a:95:c3:
         a8:5d:70:fd:ca:9f:1c:d2:de:35:83:b4:65:ff:c1:fd:57:44:
         45:ae:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:45 2025 by rpki-client