Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File:                     debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier:          LShebtnhjHbzMvOSTliw7sj5l9E48nL2ulBf20kppFI=
Subject key identifier:   D8:27:DC:2D:11:DF:88:A6:CF:1B:52:CF:33:99:05:E9:4F:25:E5:89
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer:       /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial:       0198D6CDB806D945F06347836BF4518E2D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 12:01:02 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:02 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:02 +0000
Files and hashes:         1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
                          2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: nDnKIeF2HoUYinTwH+InII9VPJiF5/gGS/B/8IiYNuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:b8:06:d9:45:f0:63:47:83:6b:f4:51:8e:2d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
        Validity
            Not Before: Aug 23 12:01:02 2025 GMT
            Not After : Aug 24 12:01:02 2025 GMT
        Subject: CN=d827dc2d11df88a6cf1b52cf339905e94f25e589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:27:38:63:76:b0:be:34:d5:97:cf:b1:a9:
                    ed:2d:f9:fa:39:7a:69:47:10:94:0d:d9:6e:2a:8d:
                    b7:75:6e:99:a1:fe:57:98:05:35:c3:29:ed:81:58:
                    5f:32:71:2e:91:10:98:e1:76:df:bd:1b:32:af:39:
                    cf:54:8d:ba:0a:8a:b9:38:ab:4a:87:bb:f1:c3:44:
                    08:3a:7f:b6:c2:d5:7e:64:6c:8e:eb:a5:4f:a6:b6:
                    19:81:cf:74:ee:2f:75:1d:33:d6:46:10:cf:e0:aa:
                    f1:d7:06:82:ef:16:db:7f:92:76:22:26:74:2b:04:
                    b3:9c:de:1d:0d:42:ff:33:ea:e6:fc:6d:ea:19:53:
                    5e:5d:7a:ba:72:38:e4:2b:ac:9c:f9:5c:d1:b6:2f:
                    19:c3:1e:24:0e:be:74:70:10:c2:12:4f:41:fd:15:
                    dd:ed:a9:74:ea:dc:21:43:19:ec:35:09:36:22:b9:
                    5f:c2:28:cd:fa:d7:4e:f3:a2:40:76:24:4d:fc:98:
                    e8:ad:72:00:76:0a:6b:ca:a7:33:65:f5:5b:c8:4c:
                    f4:90:1a:57:62:54:35:f1:01:c9:94:44:6e:b5:81:
                    7b:34:a1:cc:28:ca:ac:f4:ee:e9:44:8b:4a:58:fa:
                    cd:de:96:e0:d4:47:f0:3f:78:19:83:16:29:95:ba:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:27:DC:2D:11:DF:88:A6:CF:1B:52:CF:33:99:05:E9:4F:25:E5:89
            X509v3 Authority Key Identifier:
                keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:a2:ce:0a:12:e7:03:7e:b5:a9:f5:3e:b3:28:64:2b:e2:59:
         65:1f:63:03:db:63:dc:34:fc:bb:c8:ae:ef:ba:03:29:97:0c:
         98:ad:65:6c:25:73:7d:14:eb:e6:dd:74:51:66:6b:37:f0:f6:
         69:6d:bd:f0:9c:18:83:c3:10:ef:77:fe:fd:9c:35:f8:91:f5:
         e7:4c:67:fd:16:80:55:42:50:5b:e7:15:6f:ba:c4:ed:fc:ac:
         55:79:08:cd:06:59:2d:d0:84:68:60:bc:d2:1a:bd:19:b0:81:
         f5:08:04:80:0e:ed:30:1a:1c:7e:be:d0:a3:41:3e:70:03:44:
         d6:b3:8e:85:fd:4d:1a:77:49:26:32:d7:fa:1c:b2:3f:42:eb:
         8e:8e:86:e6:62:2d:f5:aa:3d:b6:97:68:1f:8a:16:4f:7b:59:
         d0:89:47:5c:1b:3e:ca:71:4d:c6:1c:7e:f6:0e:1a:9d:f5:6c:
         7d:a2:5c:95:0e:68:e8:5c:67:99:18:87:96:81:6b:1c:18:d0:
         dd:f9:60:dd:1d:45:69:12:4d:f3:81:2e:c6:fd:21:09:e2:49:
         bb:ff:14:b6:3a:d8:8e:b8:f7:f8:12:c8:bc:b1:61:3d:a7:fe:
         9c:bb:bf:90:1a:da:09:f0:b1:4a:9d:2e:7a:46:3b:f4:99:4c:
         95:b9:ed:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:58:06 2025 by rpki-client