Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.mft (raw, json)
Hash identifier:          WUUxm6+2MyglTw/sB/ufDfWekPvXYtdmEwspaxKWxkI=
Subject key identifier:   84:46:50:F3:53:4B:18:EF:68:6D:74:8E:09:59:E7:DB:9C:6A:37:B6
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Certificate issuer:       /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial:       0198D47443093B3236840E2B834DC696AACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:04:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:05 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:05 +0000
Files and hashes:         1: dmAUOBTDTSksdavNtF-BgZU07cE.crl (hash: H+sqSNkXAaY6GAOy8gDJEwPVDEmpuhWpR5Aiash47E4=)
                          2: zAtYgiSv3lzLdQ7BBPQ53TQsCu4.roa (hash: oWvGPGIfuR7zXnkTrpVSOOMAOW1y+zKMrxGu/T9zook=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:43:09:3b:32:36:84:0e:2b:83:4d:c6:96:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
        Validity
            Not Before: Aug 23 01:04:05 2025 GMT
            Not After : Aug 24 01:04:05 2025 GMT
        Subject: CN=844650f3534b18ef686d748e0959e7db9c6a37b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:1c:3a:c5:a8:a1:87:39:9e:ba:68:e6:03:
                    5c:b8:c8:84:1e:25:33:78:c4:40:29:93:53:bd:b6:
                    d2:d7:43:c2:de:7d:89:3f:95:bd:fd:fa:ef:58:71:
                    4a:8e:0a:e3:9f:e0:f3:46:2a:7f:5d:49:84:da:b9:
                    29:c4:ef:99:04:c7:bd:e6:97:84:7d:f3:b3:85:fc:
                    12:d0:67:e6:da:d4:40:93:c7:0e:ee:c5:ff:48:65:
                    0e:98:4c:98:91:e6:6e:93:b1:34:42:2b:97:66:db:
                    ea:17:e5:bc:0d:c3:c8:72:28:3f:88:cf:34:e6:98:
                    d5:3e:6f:d4:aa:b3:b2:79:49:c2:42:f4:83:ed:d7:
                    4e:3f:8d:ba:8d:52:73:0a:27:e3:21:72:cd:f5:f2:
                    f1:4d:d4:43:e5:9e:6c:fe:ec:5c:49:a4:73:90:ce:
                    d3:b0:20:dc:1c:4c:16:44:13:ef:74:b9:52:07:8b:
                    08:2c:41:ea:f8:08:51:2d:42:3b:46:bc:03:b1:13:
                    7a:70:18:a6:59:75:dd:b5:1c:cb:9b:76:4c:5f:f8:
                    ff:56:63:68:d0:3a:1b:27:8b:ee:c4:09:e3:77:17:
                    5f:64:ec:33:1e:86:c5:de:4c:b2:62:87:9a:37:f8:
                    78:34:7d:50:1b:71:3d:50:a1:94:23:9f:8a:c9:da:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:50:F3:53:4B:18:EF:68:6D:74:8E:09:59:E7:DB:9C:6A:37:B6
            X509v3 Authority Key Identifier:
                keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8a:2c:3b:d5:77:2c:02:85:cd:3a:b5:6c:90:f0:5d:46:7b:
         92:0a:c9:e0:ef:6b:b9:5b:26:a8:27:97:6d:4b:00:cf:37:7f:
         d5:31:cb:16:d8:4e:0e:93:64:f1:93:fd:f2:a8:8f:bc:ce:ff:
         7c:b5:8c:70:bd:15:db:3c:61:91:96:c6:85:4b:4f:58:81:e2:
         91:9b:3b:d6:c6:49:57:e8:d8:bf:01:a4:4d:33:6f:19:2d:12:
         a6:78:d8:14:c7:ce:d4:d0:d1:8c:89:10:9a:aa:0a:39:3b:dd:
         69:69:ea:41:59:5f:9b:9a:fc:79:1b:74:86:98:02:44:3b:a8:
         ec:bf:98:50:ef:b1:4a:74:59:c0:02:b0:60:c2:f1:23:3e:de:
         bc:72:c4:21:ee:31:8b:21:a7:f7:68:d4:7b:36:63:c6:0e:2e:
         6d:f3:0c:a3:d4:0e:cf:a5:5d:10:2c:8e:5b:ad:cd:55:4f:58:
         cb:38:75:e3:fe:c5:a9:9f:0d:3c:cd:c1:e8:14:d9:f8:62:6b:
         2e:5b:90:19:70:d8:4c:17:47:de:d2:65:2c:9a:e1:cb:cc:b5:
         8c:ca:f2:2b:58:7e:9c:ca:79:18:fc:f4:c3:97:4c:ac:f4:4d:
         11:ec:eb:18:d9:b2:0c:19:ca:21:d9:50:c6:79:e7:f2:21:c9:
         fb:5a:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client