Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File:                     IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier:          3Wwr2U2/nGiI3GX6u18Yd6bBAMytwdCjHqMoxbZheB4=
Subject key identifier:   05:E3:1E:B8:77:17:A5:14:22:72:07:CE:E6:58:C0:C2:47:35:EF:84
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer:       /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial:       0198D5F138928E949F32A473BB62A94B9F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 08:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:12 +0000
Files and hashes:         1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
                          2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: QMzyo4ODKYnQuqHHd2qL16imedu/TUzI74Bcoa4xhhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:38:92:8e:94:9f:32:a4:73:bb:62:a9:4b:9f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
        Validity
            Not Before: Aug 23 08:00:12 2025 GMT
            Not After : Aug 24 08:00:12 2025 GMT
        Subject: CN=05e31eb87717a514227207cee658c0c24735ef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:22:57:8e:0c:ad:e1:0e:c8:64:f2:8f:db:
                    c0:a6:58:5d:6f:11:bb:85:ce:e8:1f:1e:98:e3:7f:
                    d1:3a:cc:a2:60:cf:7d:d6:3b:f8:ba:90:09:f5:0f:
                    a4:8b:4e:68:af:5f:5b:1a:e0:db:fd:b8:1e:38:e6:
                    ff:e1:ba:e1:1c:29:1e:f7:18:fa:4b:50:aa:a8:8c:
                    d4:c6:66:88:ba:ee:6d:6f:0c:c7:3e:69:19:fd:4e:
                    27:1b:ca:9d:f8:6f:d1:66:15:ce:c4:97:75:c2:03:
                    97:da:21:03:c3:a9:bd:bf:d2:16:7e:6b:fa:42:c4:
                    dc:36:a8:66:5b:a4:42:0c:82:56:12:23:dc:20:da:
                    fd:53:5d:f8:a1:b0:7c:6a:d2:90:44:93:f8:0d:96:
                    ef:ac:9e:23:9c:2f:27:a5:52:14:40:ff:d2:10:f9:
                    90:9e:db:8a:8c:aa:83:4a:fa:7e:b1:96:ec:8c:19:
                    b4:86:b5:22:27:df:71:0b:48:ca:87:3c:38:f2:85:
                    48:d7:6c:06:96:2c:a8:f3:da:e3:45:63:ac:93:f2:
                    94:f2:b1:e6:cf:a1:d7:7a:0b:34:26:4f:a6:25:9a:
                    e3:a1:ed:4d:a1:1c:66:82:e5:0a:3d:7f:d8:1e:c9:
                    38:dc:1f:1a:da:43:b8:c2:fb:ab:bc:ad:e9:e9:99:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:1E:B8:77:17:A5:14:22:72:07:CE:E6:58:C0:C2:47:35:EF:84
            X509v3 Authority Key Identifier:
                keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:24:d2:ae:34:54:4b:da:c3:17:36:d2:d0:51:b1:d5:a8:e2:
         b6:1b:3b:71:37:ce:03:8e:23:28:ba:5c:cb:58:88:7e:c0:45:
         00:38:a7:ed:f5:9c:6a:24:c2:d7:d2:5e:71:c3:e1:96:96:eb:
         a9:e3:11:6d:43:26:51:2c:02:6c:ec:cf:45:5f:b7:d6:91:44:
         db:65:bd:eb:5f:dc:02:f1:b1:c4:6f:6a:99:03:05:7b:30:ae:
         da:e6:16:0a:81:7c:fc:fd:bf:99:47:90:4b:1b:ef:2d:9e:c3:
         8a:2c:c5:15:fe:96:9c:3d:2c:06:14:b0:df:e1:a8:47:71:77:
         37:f1:a2:84:a7:d0:e5:ad:c1:42:6a:f6:08:93:af:3a:82:05:
         08:71:da:04:3b:b1:49:7a:45:b9:15:74:72:6d:3d:47:13:49:
         4d:5a:90:54:de:36:41:62:93:79:b0:a5:49:f4:2e:a6:3b:c3:
         66:3b:d8:f5:1c:a3:25:3c:6b:e3:95:b0:81:97:f9:59:1a:3f:
         10:58:98:26:70:36:51:85:ae:5a:03:8b:70:02:47:b2:85:01:
         07:5a:34:08:64:d9:83:41:cb:31:0c:4f:da:92:f0:58:74:c5:
         ed:42:66:49:60:51:61:a5:0e:17:10:97:d9:10:e8:f3:44:3e:
         ed:58:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:34 2025 by rpki-client