Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File:                     cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier:          pPKRUa6v51QLuD5Bo1f2q8iaZiL2KseekL/oq1NdAMo=
Subject key identifier:   B9:91:35:C0:0A:E9:3E:39:91:7F:73:24:5E:EE:F9:F6:74:98:4D:C3
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer:       /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial:       0198D5F11BAE3B0152861F1C8AC25A5231A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 08:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:04 +0000
Files and hashes:         1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
                          2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: BEfIwmaIQdUPwnJfUVgv9enaXIBv6pj/IdDIGubPOtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:1b:ae:3b:01:52:86:1f:1c:8a:c2:5a:52:31:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
        Validity
            Not Before: Aug 23 08:00:04 2025 GMT
            Not After : Aug 24 08:00:04 2025 GMT
        Subject: CN=b99135c00ae93e39917f73245eeef9f674984dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:f7:fc:fa:d1:53:a2:97:c6:34:c7:5d:37:
                    3a:25:a1:af:58:68:70:51:f8:65:ae:eb:07:97:b0:
                    a9:6b:d6:3d:6f:34:bc:ee:b7:e6:ad:4c:92:6b:13:
                    81:1e:f5:4a:b0:c1:20:63:b4:0d:9c:59:8d:11:1f:
                    10:c3:49:5d:c8:a1:17:2f:fa:18:59:5b:22:d8:45:
                    30:02:9e:75:a5:d7:28:5e:f3:aa:bd:3d:6c:16:c0:
                    07:b2:06:72:66:70:d3:4d:1c:20:28:a9:1a:04:38:
                    fc:c9:40:a8:98:59:bc:da:37:6d:73:23:a7:22:72:
                    62:fb:3a:8b:7d:57:5c:cc:b6:b9:64:d8:fa:c6:09:
                    10:9c:27:20:8a:89:af:ee:98:16:e9:24:b7:77:03:
                    23:86:f4:09:d0:98:0e:fa:d0:74:af:8b:4d:38:fa:
                    a7:06:8c:66:56:a5:e3:0b:f6:ed:c2:7e:05:77:c8:
                    c4:29:5a:46:e0:ca:c4:f9:77:dd:c7:c3:ad:67:6c:
                    ce:31:92:fe:2b:4c:be:38:2d:b4:00:5e:5e:20:85:
                    2c:f7:61:da:bf:74:f8:09:82:2b:99:b9:f3:4a:d7:
                    7d:86:58:e2:08:f0:c2:f3:d0:45:59:46:d8:42:62:
                    aa:60:6a:38:16:48:38:dd:a2:3e:02:c1:da:ae:e2:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:35:C0:0A:E9:3E:39:91:7F:73:24:5E:EE:F9:F6:74:98:4D:C3
            X509v3 Authority Key Identifier:
                keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:00:6f:35:7d:c5:c4:fc:78:51:54:6e:a3:ad:fa:dc:dc:
         b0:90:ce:fe:d4:9f:8a:f6:1a:7d:8d:19:a9:93:cb:f4:bc:4a:
         d0:7d:71:bd:54:5b:96:f0:72:28:de:8e:36:0f:a5:b7:07:83:
         f9:97:d8:c9:77:c4:94:be:ac:e1:42:35:90:e4:c0:f7:c3:61:
         e5:f6:e7:05:65:95:91:b2:fa:d9:b9:06:0e:98:d3:98:f3:cd:
         cb:79:d5:ae:91:20:ec:c9:8b:13:b0:a5:dd:37:9f:28:75:86:
         c3:b3:b9:f3:44:e7:64:b8:13:c0:6c:ab:4f:ca:17:df:68:0d:
         f8:95:9f:d6:e9:6a:97:6a:38:3e:37:98:6a:91:bf:fd:c3:7f:
         21:e7:dd:9f:40:fc:91:c0:17:bb:7f:84:3a:aa:85:5d:05:02:
         09:59:4f:e7:0e:c4:3c:91:89:dd:a5:c1:1a:d6:39:49:6a:4a:
         f4:ec:0b:73:8f:16:92:3d:ca:61:ba:00:72:3c:d5:fd:1f:9a:
         3a:95:22:67:bf:9f:fa:7e:44:52:64:30:4e:c3:3f:43:5a:66:
         ca:47:f0:30:1d:f8:40:71:4d:dc:df:f0:0c:4e:2b:b2:a5:a8:
         2f:5b:ab:7f:5a:40:1e:ca:43:98:77:aa:c4:40:c5:ca:f2:0f:
         6b:07:fd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:56 2025 by rpki-client