Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          rAhXtumcDx2kXruO7MfGKk9+YoGExaBJN8z5wV5yVQM=
Subject key identifier:   75:65:A4:7B:96:8A:C3:3D:A8:6C:AE:20:C5:1F:23:18:8B:96:15:54
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       0198D998EA4C764E6E00FAAA0440D4EFEBCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          1652
Signing time:             Sun 24 Aug 2025 01:02:13 +0000
Manifest this update:     Sun 24 Aug 2025 01:02:13 +0000
Manifest next update:     Mon 25 Aug 2025 01:02:13 +0000
Files and hashes:         1: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: voaQQxLTqErRZ+YmNHMUdm6PhsV1AZlyPItUsP95X4Q=)
                          2: 6s1rAoY1cgsZglE9s92pMrhjc5Q.roa (hash: nkfFdPk5iNJ2P8OJWCdmalFNk/kh9hrsJictlP+YVtY=)
                          3: UJ_XpDmmIDl8LNm-we0fMHDUKHo.roa (hash: HUV+zXa5m96O5QiGf90TomYx4xutIIrNWiXFbD6WTuA=)
                          4: lxKGHo-WlJ_TUWUO1hJi5BieeoA.roa (hash: lNpML036Qr1H9qQzc/sP637t+B2qAZusx8QwFjZq01c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:98:ea:4c:76:4e:6e:00:fa:aa:04:40:d4:ef:eb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: Aug 24 01:02:13 2025 GMT
            Not After : Aug 25 01:02:13 2025 GMT
        Subject: CN=7565a47b968ac33da86cae20c51f23188b961554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:90:0c:43:48:cf:61:59:47:f0:cf:a9:5d:
                    7b:52:96:36:5c:53:8f:b7:46:69:9f:e6:22:10:46:
                    8b:36:a4:36:ce:1e:9b:9e:03:86:41:81:44:c7:08:
                    b0:c1:7f:3f:3a:97:f8:86:a9:19:e6:15:06:98:da:
                    2b:95:9b:2f:f8:0d:7a:bc:c2:a2:db:4b:2e:10:ae:
                    85:b4:03:10:77:33:59:be:ea:37:da:5e:eb:35:e4:
                    a6:3b:ad:e3:6a:38:f0:02:95:54:37:d8:b5:bf:94:
                    0d:3c:d8:3d:49:80:1f:1d:dc:99:52:4e:c3:6a:9c:
                    e9:18:a4:b9:8c:9d:4f:63:1b:63:03:5b:f0:43:94:
                    2f:f1:2f:0f:bb:b0:f2:8d:92:d6:b5:9e:81:25:ea:
                    19:0c:72:68:1b:c2:00:48:4e:5b:a0:17:9a:83:d5:
                    86:66:a5:12:08:81:b1:12:66:49:18:98:90:39:d6:
                    ff:ea:c1:c2:59:00:14:3e:0a:ee:a2:8b:98:70:68:
                    dc:6e:56:b9:87:bb:18:21:c8:51:ee:77:01:10:b3:
                    36:ad:12:78:bb:9e:1c:14:38:d7:cb:93:3c:2f:2f:
                    2f:42:ce:8c:c7:c0:cd:28:f6:25:46:ea:7b:9f:76:
                    d6:24:a1:ec:33:fe:ed:6d:b0:71:af:71:20:f5:6f:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:65:A4:7B:96:8A:C3:3D:A8:6C:AE:20:C5:1F:23:18:8B:96:15:54
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:61:5f:3f:75:83:0f:c5:71:b0:df:a6:d3:2d:77:67:c6:
         12:7d:c1:85:17:70:07:59:c8:cd:10:1b:02:09:e1:86:44:98:
         97:97:09:f2:ed:cb:d5:19:7e:f2:b0:2e:17:85:d3:ba:d9:5b:
         b1:dd:3f:63:ed:74:ca:fb:95:8e:62:46:28:db:03:72:22:f5:
         3f:fe:c5:89:b2:d9:35:46:d7:85:69:c1:d0:b1:10:03:40:cf:
         e0:4e:34:02:35:44:1e:cc:7e:c5:c7:02:47:57:e2:5d:20:d0:
         46:22:3b:6e:e1:6c:b7:f1:53:84:f2:59:61:69:df:c0:3e:48:
         f2:26:f5:bf:ab:cf:37:c6:b9:83:87:58:10:38:96:7f:31:eb:
         b5:48:c3:2d:f4:62:d3:cb:5b:35:c2:94:96:a2:00:77:7a:8c:
         39:50:ec:dc:04:31:17:d5:ca:5f:a6:eb:d3:9a:fa:f2:64:c0:
         68:f2:af:7e:da:5b:b0:50:b7:3b:5c:62:df:a4:2a:c1:11:c8:
         6b:f2:51:e6:13:40:b7:75:d0:85:b6:1b:0e:20:b0:30:93:f1:
         0d:39:46:cb:4c:92:76:1b:1c:2f:0f:f1:67:77:33:d2:a4:40:
         d2:13:a9:d2:86:2d:ea:53:7c:3f:c0:f1:75:52:61:16:15:31:
         95:8d:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:09:11 2025 by rpki-client