Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File:                     1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier:          QVRhntVmyMfvztF7hedZQWQISrfDzt9W+3swRLwBcNI=
Subject key identifier:   6D:71:BB:FF:9F:46:95:E4:BD:C8:E6:AC:50:A1:58:63:8D:48:95:F4
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer:       /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial:       0198D5F152B43A2CCAD6938CEDA9DB5284AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 08:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:18 +0000
Files and hashes:         1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: mOlcSLPqCTyLv7g6n/yicT1U0IcoQ5KUbdCGm0WXVA0=)
                          2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:52:b4:3a:2c:ca:d6:93:8c:ed:a9:db:52:84:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
        Validity
            Not Before: Aug 23 08:00:18 2025 GMT
            Not After : Aug 24 08:00:18 2025 GMT
        Subject: CN=6d71bbff9f4695e4bdc8e6ac50a158638d4895f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:66:8b:aa:9c:81:73:b8:a6:2b:f8:7d:28:
                    f4:37:46:dc:24:d9:51:1b:bb:41:40:68:1c:e8:84:
                    dc:03:63:bc:88:c0:34:19:48:8a:2b:49:64:39:93:
                    8c:0f:9c:bc:94:1c:27:fd:33:1c:01:bd:c0:0c:7f:
                    0e:4a:90:1f:59:55:4e:a1:15:18:47:16:bd:db:b8:
                    37:22:b9:ed:e5:90:bf:fb:64:c3:e4:7a:d8:ca:90:
                    7c:61:57:3a:c2:c0:df:6d:d4:db:15:43:7b:9d:19:
                    d1:cb:be:79:70:0a:60:b2:4b:a6:5e:5e:65:c0:15:
                    48:f0:8b:eb:b0:a4:c1:53:7e:2c:7f:f3:09:e9:7a:
                    c1:3c:78:4f:94:18:22:f5:d7:70:26:26:b6:d2:2b:
                    8b:a4:c2:b6:aa:44:1e:07:2f:f3:6a:04:21:ec:4b:
                    1d:a6:0b:ba:a7:63:19:c9:d2:b3:61:0b:44:20:51:
                    45:a6:16:86:74:d0:40:52:b0:72:40:0f:8f:25:f2:
                    65:ca:2f:6b:72:f9:21:61:51:78:c4:ba:ee:7d:92:
                    c8:6d:5b:71:4c:e4:f4:ba:f8:9f:b4:d8:87:83:ed:
                    10:e6:38:d9:f5:3a:5a:59:f4:a1:a3:00:34:1a:6b:
                    c3:b9:44:79:08:46:c2:7f:2e:2e:ce:13:22:3b:e4:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:BB:FF:9F:46:95:E4:BD:C8:E6:AC:50:A1:58:63:8D:48:95:F4
            X509v3 Authority Key Identifier:
                keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:86:9d:25:ce:a9:7a:57:16:87:cc:74:a3:cb:c3:f8:19:e6:
         62:8d:ca:df:50:eb:3f:56:9c:19:14:ed:f8:a6:a8:40:d4:df:
         92:aa:4d:78:04:5b:ab:55:18:dd:6d:85:8f:eb:56:93:8e:b3:
         33:cf:d8:08:13:61:2c:85:1c:36:09:65:b6:59:b7:87:a5:a2:
         8c:71:db:c1:61:c4:3c:7d:34:99:0f:fb:81:52:79:91:7f:e2:
         01:f9:9b:48:84:6d:94:b7:e4:b5:52:df:8e:82:7b:3e:5b:3d:
         3e:49:32:17:2a:fc:2d:79:ba:3b:ee:9c:75:e8:c1:8f:c1:a1:
         f3:51:b7:29:36:17:98:02:f4:e3:2f:05:cc:a7:d8:02:c5:e4:
         7d:0c:b2:45:24:d1:98:67:0f:fc:e0:4c:c9:4a:f8:95:88:9b:
         06:91:d1:a6:84:66:94:20:e6:e4:cc:98:6e:b2:13:52:84:09:
         41:a3:8d:e9:ab:37:78:d0:c3:43:da:6d:c4:07:fc:a0:c9:9e:
         7e:aa:d0:00:df:60:af:09:c6:9d:ff:7a:17:b2:46:88:26:e5:
         e3:92:e1:0f:bc:a9:a7:4e:0f:23:01:48:2d:b9:19:ef:8c:10:
         c4:9b:a9:0c:b6:06:ee:24:c7:87:38:67:8c:33:43:37:fe:c6:
         32:4c:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:28 2025 by rpki-client