Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
File:                     eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json)
Hash identifier:          t+qRJ8Mw3nnpsOZfW1w+KpetyZAjUV3SIjvhvorILJw=
Subject key identifier:   09:2B:8B:51:4F:C2:EF:4B:BB:7D:A6:C5:1A:79:36:B6:B0:1F:5E:29
Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE
Certificate issuer:       /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
Certificate serial:       0198D4A7A527EFC30BED9456A0FB3C9E17EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
Manifest number:          1173
Signing time:             Sat 23 Aug 2025 02:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:13 +0000
Files and hashes:         1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: wbFQqeP2kwrW7VlAUN6G4PLI6OXa4T8WbqxbCNkLrPg=)
                          2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:a5:27:ef:c3:0b:ed:94:56:a0:fb:3c:9e:17:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce
        Validity
            Not Before: Aug 23 02:00:13 2025 GMT
            Not After : Aug 24 02:00:13 2025 GMT
        Subject: CN=092b8b514fc2ef4bbb7da6c51a7936b6b01f5e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:1f:19:71:5b:fc:cb:25:e0:d6:62:2d:5f:
                    91:84:de:d0:8f:3c:38:f1:8f:14:69:6f:e4:f4:14:
                    ee:54:a6:da:32:36:de:32:bb:48:3c:e1:80:c1:e4:
                    49:8f:f0:2f:d3:2c:8d:27:55:11:8d:21:6e:f3:c1:
                    f1:f4:fd:7f:98:82:3f:29:74:a3:3e:4b:80:75:bc:
                    47:77:e6:fd:ab:71:83:6f:09:16:31:a0:64:2a:96:
                    bb:44:69:de:cb:75:fe:8d:af:8d:e4:00:cd:f4:26:
                    25:80:63:ea:99:55:45:52:21:2e:29:63:cc:e2:a9:
                    6e:fa:6b:69:67:e4:00:99:5d:79:19:49:d3:d2:d9:
                    27:b9:13:38:20:0c:5a:e9:8e:c0:bd:13:82:a5:db:
                    e0:3a:d5:57:69:35:79:2b:8c:0a:36:0f:0f:72:1a:
                    10:61:c8:a8:31:ea:56:66:ac:c4:de:0b:4d:fb:82:
                    8e:69:3f:2d:a4:41:73:f9:83:63:8c:cf:b3:1d:83:
                    0f:12:4c:95:d0:5f:f5:ed:1e:6a:97:f8:19:93:22:
                    d7:f1:72:dd:55:0c:32:13:6c:0e:3b:a8:1d:d5:53:
                    2e:c3:dc:92:f8:f9:44:03:a9:88:ed:8f:6d:1f:84:
                    e5:d9:d8:44:71:23:b6:dd:50:c2:2d:83:5a:47:25:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:8B:51:4F:C2:EF:4B:BB:7D:A6:C5:1A:79:36:B6:B0:1F:5E:29
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:df:3c:7e:d5:ef:e7:d5:ce:03:89:b0:7d:1c:15:6c:15:f3:
         ff:f8:92:7c:cc:e6:21:b3:d0:b8:e7:b5:15:63:28:c4:76:5f:
         bf:83:0f:91:45:70:a2:bd:92:12:43:0a:9d:f6:ec:05:cf:4a:
         cf:53:f3:69:0c:0d:3f:ec:ed:66:96:57:1a:6e:f2:76:2b:de:
         52:3c:9f:b6:98:a0:1e:da:fb:07:f0:b3:81:e5:bb:02:66:b9:
         bd:6f:cb:d8:6e:81:b5:c4:b8:f9:04:e8:ab:2e:a4:14:2c:70:
         99:01:24:9b:ac:84:25:48:2e:1b:a4:c4:0f:d9:5a:81:09:2d:
         37:96:1b:f1:7e:68:78:08:24:7a:a8:91:d6:c4:7a:00:79:ab:
         4f:fc:48:54:45:cf:14:4a:42:db:8a:b2:18:b8:dc:14:d7:5c:
         cc:ac:7e:2f:12:aa:3c:98:63:0c:0a:83:df:d3:7f:a6:d2:d9:
         35:44:84:fe:b5:0b:f8:ce:67:1c:1a:b0:a1:3f:74:59:2f:1b:
         65:8a:63:26:df:07:02:40:4e:0f:3e:69:46:3c:bf:30:d3:de:
         9c:e2:57:7b:43:b5:6c:1b:e7:9d:0a:67:af:ed:8a:ee:1b:23:
         24:aa:06:fb:5d:f0:a8:49:78:93:74:80:5e:77:5d:cd:47:b5:
         76:e9:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:56 2025 by rpki-client