Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File:                     dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier:          jHPQhXykZD38suUsGujsZrGUfq8PB90zuJJwUd08NJU=
Subject key identifier:   42:3F:D5:90:FA:70:ED:E2:C6:EA:1B:98:20:91:B3:D4:36:D4:6E:C2
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer:       /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial:       0198D5F1B14ADFE24C3CAFDB4875BE5A962D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 08:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:43 +0000
Files and hashes:         1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
                          2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: 4rgxSf79Xe3NA9ptbd9sNcnc20I2JpBIH5+Q+baNX0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:b1:4a:df:e2:4c:3c:af:db:48:75:be:5a:96:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
        Validity
            Not Before: Aug 23 08:00:43 2025 GMT
            Not After : Aug 24 08:00:43 2025 GMT
        Subject: CN=423fd590fa70ede2c6ea1b982091b3d436d46ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:ca:2f:41:50:e4:4c:16:36:4a:dc:c5:da:
                    de:6d:90:3f:ff:46:85:8b:a3:8c:41:ad:cb:9b:9d:
                    8a:ff:14:4c:f4:31:b1:7b:b5:66:5f:10:a5:5b:af:
                    43:72:21:6b:b0:ea:13:91:2a:95:e8:fe:02:72:17:
                    1d:e5:c4:33:03:4b:d9:60:66:4c:39:bf:4a:d2:04:
                    5b:7b:3f:f9:02:8b:ba:a2:39:1e:d1:88:90:fc:f4:
                    76:0a:6b:ec:78:ab:95:8e:df:ed:22:98:4f:a5:59:
                    7d:f1:cb:31:b2:cf:b1:79:d3:d2:6f:eb:13:55:a7:
                    f4:ba:13:43:2c:b0:56:c5:8d:a8:de:de:bc:87:b8:
                    92:e7:17:e7:a5:c0:19:4f:cf:a1:c9:a4:e7:74:cd:
                    f1:0d:a7:9a:18:19:73:78:32:50:e0:62:f9:86:cb:
                    44:22:be:42:01:73:6a:3c:d4:b5:94:d0:d4:92:1b:
                    b0:03:1b:da:64:92:e4:35:62:0e:65:bc:84:1f:ff:
                    f0:95:ee:02:e8:92:94:e3:c9:17:df:6c:42:fd:e8:
                    a6:04:1a:11:9c:9d:b7:ad:35:ac:67:1b:b5:12:c1:
                    86:64:5d:44:39:4b:30:67:ee:93:21:da:1a:68:d8:
                    9c:a8:f0:06:fc:07:81:fd:6f:98:8e:11:a2:a0:8b:
                    c4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3F:D5:90:FA:70:ED:E2:C6:EA:1B:98:20:91:B3:D4:36:D4:6E:C2
            X509v3 Authority Key Identifier:
                keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c0:0f:1a:79:77:a8:d0:3e:23:1b:55:10:8f:bb:68:75:e4:
         3b:ae:bf:73:c0:52:6f:70:47:1f:61:cd:46:0d:4a:97:79:72:
         76:4f:c7:df:39:c3:8c:f8:84:0c:86:a1:bf:4f:0d:09:38:3a:
         09:64:ac:3a:67:f0:d1:f2:60:5a:5c:eb:05:fc:53:cb:98:9a:
         81:8d:41:0e:84:00:6d:d8:0e:f6:46:9f:ed:08:21:7a:92:72:
         ae:35:cb:5b:88:41:dc:51:7c:17:1d:dd:18:67:c5:f9:a9:25:
         dd:17:06:ed:e1:e2:0f:ac:4d:cb:42:5b:e8:a9:d0:0d:37:3b:
         e8:83:b3:0e:66:c4:7a:aa:10:f4:dc:ea:d2:6e:84:70:bc:03:
         a3:5a:0e:c4:87:c8:f9:01:c6:77:00:71:c1:2f:6c:23:d5:87:
         2d:16:02:3a:8d:1f:ce:2e:c0:a5:4d:66:b9:6c:20:17:14:3d:
         a6:3c:9c:67:6c:08:31:90:c3:dc:bb:5a:71:82:80:30:e2:ce:
         bc:4d:97:62:86:c7:ca:62:22:a3:6f:d0:de:cd:ac:f5:57:a8:
         7d:85:75:af:3c:49:21:8a:55:76:bf:98:c8:c4:51:55:b6:a0:
         ce:87:ff:77:ed:ec:09:dd:11:2b:27:81:58:ad:35:fc:fc:0e:
         37:09:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:38 2025 by rpki-client