Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File:                     iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier:          5+ykgxgQf/X2yuCHsoU5kdkgx205cXey4ymcoC9rDiY=
Subject key identifier:   63:43:80:52:94:47:B4:E2:B9:4A:CF:CF:A0:D1:6A:E2:2C:CD:B0:4E
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer:       /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial:       01988EEC276B8F0DB61CBB091CBDD1814344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number:          1623
Signing time:             Sat 09 Aug 2025 13:01:37 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:37 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:37 +0000
Files and hashes:         1: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (hash: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=)
                          2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: dgfXl65mSIPCqtc3dv9l7Kq+IE+7WbxWU+O2iApEWFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:27:6b:8f:0d:b6:1c:bb:09:1c:bd:d1:81:43:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
        Validity
            Not Before: Aug  9 13:01:37 2025 GMT
            Not After : Aug 10 13:01:37 2025 GMT
        Subject: CN=634380529447b4e2b94acfcfa0d16ae22ccdb04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:bf:16:b4:29:e6:80:5f:5c:19:f2:67:66:
                    78:4d:b1:ba:56:79:a6:45:f3:9a:33:55:bb:b6:5a:
                    0c:0a:b8:09:dd:8d:5b:87:10:03:6a:c2:1d:b0:04:
                    0e:11:87:64:43:2e:51:55:6d:ef:60:ab:7f:47:20:
                    da:e0:f8:ae:7e:e7:be:67:7c:dd:73:f6:d4:cd:74:
                    70:45:cb:15:d6:f2:7f:aa:1a:88:ef:2c:e8:cd:88:
                    9c:3d:e7:ab:ad:44:48:5c:76:55:ff:fb:cf:cb:ff:
                    e0:08:29:81:d6:1d:af:b7:af:43:18:4c:5d:2b:b6:
                    32:da:a8:c5:71:a0:72:6a:bb:21:ab:97:83:b7:38:
                    f5:99:52:96:64:89:d7:0e:26:be:2d:2b:70:af:38:
                    a4:a7:7f:db:4b:44:b1:26:c2:e7:36:9e:d8:7e:9f:
                    d2:9a:70:95:26:f6:37:57:46:35:7a:9b:88:69:87:
                    ad:30:ee:e8:6b:92:f9:da:2c:cf:90:7f:be:0e:d6:
                    67:bb:56:90:51:6e:8a:af:a6:7c:ca:26:c3:ac:01:
                    e9:52:90:a6:e5:64:17:c7:30:9e:a6:87:9d:c9:f7:
                    a2:72:32:24:5d:11:68:9a:80:7f:86:be:7d:76:57:
                    33:80:dd:7a:b7:91:d2:26:86:88:5a:01:11:c7:94:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:43:80:52:94:47:B4:E2:B9:4A:CF:CF:A0:D1:6A:E2:2C:CD:B0:4E
            X509v3 Authority Key Identifier:
                keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:20:ff:79:dd:72:98:70:1e:10:07:67:0f:33:b2:a8:1d:
         a7:5c:97:6e:fd:20:b7:21:d7:a3:28:3c:cd:16:84:23:01:33:
         08:fd:53:2c:5f:07:1b:e2:f3:56:1e:7b:c0:db:68:a9:95:2c:
         09:f8:43:61:b2:33:cf:13:e5:e4:2e:bf:7e:53:ae:5f:2c:0a:
         e3:87:b5:78:6e:3c:41:23:66:3d:b9:02:b9:4b:73:03:c0:84:
         69:e9:20:51:dd:85:05:f0:14:73:5e:97:dc:09:6e:5a:b3:4b:
         22:f9:f5:81:94:ad:88:53:ce:c1:f2:01:34:61:0d:b3:37:ad:
         e0:f4:76:99:ad:42:97:df:07:a6:80:da:79:6f:37:5e:42:68:
         bc:bf:53:a4:13:aa:31:0d:5a:1f:43:32:04:6e:45:58:85:9f:
         70:d2:43:ab:5c:9a:3d:c6:8e:27:0b:58:1f:e1:33:65:62:ea:
         43:25:38:90:c7:57:75:76:19:6b:3d:02:df:0c:d1:ff:19:da:
         79:e7:a9:00:8f:e8:ca:fd:0d:a1:fd:d4:1c:f8:67:22:31:37:
         a7:0f:0e:cd:97:20:2a:07:8a:68:89:af:58:12:f0:35:76:97:
         f7:a7:41:2c:00:02:a8:4a:bd:fe:22:29:22:2e:85:18:8e:60:
         b5:a9:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:36:24 2025 by rpki-client