Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          Fi2hTtKGIbBbOVNLbVn1WyCd/fxn0s24QmVraa/ikKU=
Subject key identifier:   C7:6F:02:4B:5E:BE:58:DB:AB:52:DA:C3:09:8C:FB:21:ED:F9:54:60
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       0198D5F128E325DD0CE762647E39224B93A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0594
Signing time:             Sat 23 Aug 2025 08:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:08 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: dN/G5s2JmWHkqodLCk03njUsC2sbxAN10g6NoOfRIxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:28:e3:25:dd:0c:e7:62:64:7e:39:22:4b:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Aug 23 08:00:08 2025 GMT
            Not After : Aug 24 08:00:08 2025 GMT
        Subject: CN=c76f024b5ebe58dbab52dac3098cfb21edf95460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:a2:b0:90:97:d1:4b:8f:60:cf:d2:b9:bd:
                    f3:0e:11:f6:1e:df:d7:66:a1:8a:7c:61:ae:33:dc:
                    e1:46:ee:ba:3b:be:65:64:95:44:e1:ce:1a:42:bb:
                    8e:ba:10:79:99:a4:75:64:58:87:8f:cd:b1:5d:b8:
                    e6:67:c5:da:d5:a1:b6:a6:87:e6:4d:17:2e:75:b3:
                    e3:bf:af:95:7b:a2:e1:fd:0f:f0:85:1c:82:9a:2e:
                    e2:b8:ac:f5:5e:88:b8:e9:d0:d8:3e:bc:4b:76:1f:
                    f7:d4:d0:b2:75:18:68:f2:54:d7:8a:f1:0e:f8:c8:
                    8a:c0:8c:23:55:1b:2f:2a:5e:a8:56:23:3e:13:b4:
                    b6:8b:db:86:10:45:74:9a:26:46:5d:ca:77:4e:83:
                    8b:aa:0c:69:f2:2a:06:ed:06:82:03:5d:70:ca:c4:
                    92:2e:cc:1e:f5:73:ab:13:68:0a:7a:f9:3f:47:be:
                    af:a2:30:c6:9a:6a:5e:db:c3:d9:f9:be:6b:55:72:
                    8f:9b:20:06:27:6b:f3:5c:00:9e:4d:0e:81:8b:b4:
                    dd:e2:6d:40:af:98:d2:0b:10:ec:1c:0e:35:51:c0:
                    6f:b5:c8:d2:3f:4e:63:13:51:26:17:ff:45:19:86:
                    39:d7:67:a2:77:aa:94:7c:e9:c6:c0:1e:ff:fd:52:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:02:4B:5E:BE:58:DB:AB:52:DA:C3:09:8C:FB:21:ED:F9:54:60
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b8:45:18:31:81:c2:18:40:ca:29:89:e6:ff:9a:d6:39:fc:
         13:b0:d7:1a:58:b6:c4:55:4e:4e:f2:63:5a:7e:cc:ca:22:59:
         36:3f:7b:c5:8a:2d:a1:03:e6:f4:ad:b8:98:58:70:8e:36:aa:
         60:f4:eb:c2:2c:41:66:00:fd:0b:2e:53:1b:d4:7e:84:2e:6e:
         19:09:7e:8c:96:c4:69:99:36:1a:4b:c3:c7:c5:54:e2:e9:d7:
         b6:a9:aa:d7:01:25:60:72:f6:eb:62:56:86:22:05:fb:ef:a2:
         5d:b3:7d:45:38:ea:88:f5:1c:5b:76:b9:f7:48:f0:bc:73:65:
         71:61:21:b3:90:38:f0:f8:03:47:cf:75:47:4d:da:9d:64:73:
         c8:b7:5b:1a:b2:b5:38:ee:35:fb:b3:6f:6c:3d:2e:78:37:60:
         51:1f:5d:11:35:79:d8:76:aa:6c:dd:33:15:30:f2:48:4e:b9:
         fe:94:8b:2e:49:15:20:f6:fb:e1:38:70:66:9b:57:32:03:f9:
         58:d2:78:dd:21:45:59:60:0b:62:86:0a:0d:71:47:b1:a4:26:
         a0:39:44:76:02:5c:c2:c5:05:35:9c:6f:e8:ec:cb:d6:e8:6f:
         2d:2d:3f:66:24:c0:ed:ad:41:ed:3e:f4:78:ca:86:e8:ee:42:
         41:85:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:07 2025 by rpki-client