Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File:                     mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier:          q3aDAMZYf8HK4GPwTYzXiYjgq9AWyRGrvTmf091yLlE=
Subject key identifier:   6E:C0:03:B4:11:0F:6F:41:51:74:8D:A4:BA:21:E0:C6:52:C3:CC:30
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       0197CBA787D7042165F6BCC05AB0477D47F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number:          1618
Signing time:             Wed 02 Jul 2025 15:00:43 +0000
Manifest this update:     Wed 02 Jul 2025 15:00:43 +0000
Manifest next update:     Thu 03 Jul 2025 15:00:43 +0000
Files and hashes:         1: 6cG7apJZWTaCYJhEQ2AxuGdOU6Y.roa (hash: JJCXT/6UNi9mEIWqA8v8nCsjcSMSSRjcc/zrEHMqmj0=)
                          2: 99na7wV0wOq68_7vIbCrL9gfxjs.roa (hash: 42LNXKEAxEwEc7Szkj0BiLf8pgpR4M/aL88CA0G+dmY=)
                          3: 9pMjaJdgappxiU1Tk0UMIRy3SNc.roa (hash: KKwO3btWZ5ddNVsSe6VCRqppaOicRKCDauf9ToA7uzQ=)
                          4: Y-CJ9BWh_YWzHVUZbKNnd_ulEMk.roa (hash: BJCwhTxrXzqBf9y8Xoy2MbRCCE9t2BPXgjwkWcUVlSE=)
                          5: epU58EjYpMtSgrUzd3xlkI9EhKU.roa (hash: d2WOVeDIsDjpX00onNi7gIPb75WWaXv2cOi5GanZkh8=)
                          6: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: hHh8jLE48QJm8763MwKSGKPYY/U5JfWpqJyPokiPcEk=)
                          7: u1WYY4t_FwYACCiDWBudqRhfZP4.roa (hash: QMM4/xwZq5RJk+iqnI7Hz+hYtbB8Xzmn4QnagnKtQyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:a7:87:d7:04:21:65:f6:bc:c0:5a:b0:47:7d:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jul  2 15:00:43 2025 GMT
            Not After : Jul  3 15:00:43 2025 GMT
        Subject: CN=6ec003b4110f6f4151748da4ba21e0c652c3cc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0b:c0:03:cf:33:e7:52:ae:b7:51:0b:54:ab:
                    2a:06:af:28:25:6a:81:01:33:0f:a6:92:12:30:03:
                    b0:33:63:c7:3a:03:73:95:b5:55:b0:5d:0f:da:f4:
                    47:41:f2:6d:d9:1b:3a:c7:ba:c7:f1:b2:28:7f:f0:
                    5d:06:53:94:7c:f4:9b:7e:25:c1:4d:33:2f:29:8c:
                    c5:2a:4c:11:d3:c6:66:ec:a0:1e:e2:fe:64:bf:b3:
                    a3:f0:f8:e9:89:b5:7f:61:d8:9f:47:72:2b:20:92:
                    78:ff:aa:a9:2d:c8:68:24:aa:28:88:cf:4e:ed:23:
                    25:99:ab:23:1a:50:4a:31:a7:91:ee:91:3d:e7:c0:
                    c8:13:69:6b:f4:83:0b:78:0e:82:b9:74:55:26:36:
                    a1:8f:eb:1c:29:fc:2a:c7:16:67:9a:81:74:6d:7c:
                    34:1b:11:0d:0b:ae:9d:4e:37:fc:ae:16:02:75:e6:
                    35:41:cf:f4:d6:30:ab:b3:79:fa:6a:f9:d2:78:0a:
                    4c:ae:fc:a2:0d:bb:d6:93:4f:c1:36:70:c5:69:9b:
                    e5:8a:68:4f:48:56:6a:84:d9:4d:75:aa:9f:f5:45:
                    a3:60:e4:c6:38:7a:24:77:8d:11:9a:cf:79:86:f5:
                    3d:03:b4:a6:20:91:5f:03:9b:aa:d1:b7:8c:ec:46:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C0:03:B4:11:0F:6F:41:51:74:8D:A4:BA:21:E0:C6:52:C3:CC:30
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:a3:9f:a6:d5:5d:b6:77:db:ee:47:12:9f:af:e6:c9:86:
         93:2d:e8:71:73:6a:15:ed:9f:de:0f:a6:fa:3c:5f:b8:a0:b9:
         60:6f:72:8a:b5:e9:e6:07:dc:31:39:28:fc:bc:65:2b:f1:57:
         a5:8a:06:28:f2:12:2c:3f:5d:55:bc:ae:7f:fb:65:f8:be:5a:
         ac:23:1f:07:a6:f5:d4:dc:9d:c7:a5:37:f9:27:f9:e0:e3:1e:
         51:89:db:ec:e7:f2:45:0d:8d:4e:0e:6e:84:03:4a:c9:fe:82:
         a8:04:cb:5a:41:a2:77:0c:4d:7c:42:18:f6:15:1e:26:d5:8e:
         06:89:bb:9b:24:58:ce:c8:6e:ca:c0:79:41:95:20:c4:fe:27:
         8c:22:89:4c:65:18:bf:98:2c:14:1a:dc:33:c6:f9:8b:75:10:
         6c:3c:15:9c:37:8b:53:c2:da:d9:8a:db:5a:66:17:f3:5a:8a:
         57:ce:d4:be:c1:7a:8c:0d:12:c8:8d:41:0d:82:56:de:a0:7a:
         43:ee:4d:f0:c2:7c:08:95:61:ed:ca:65:ae:8e:6c:8f:ab:b7:
         35:bc:df:0a:7b:f9:0c:23:a1:56:7b:1a:33:95:84:17:13:fb:
         9c:f8:34:17:c5:6c:e8:71:ae:15:2c:94:27:44:96:36:19:2c:
         96:3c:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:36:07 2025 by rpki-client