Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File:                     733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier:          mF+TwoUgMM8j17bSZOgjiH0hfisGCMzimAyP/I0UaSw=
Subject key identifier:   70:6F:38:CC:CE:19:BE:E1:B0:B9:75:4D:DB:6B:C0:78:D5:AF:63:C2
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer:       /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial:       0198D51595915BDCDFACE16816E71B7C05BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number:          1512
Signing time:             Sat 23 Aug 2025 04:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:18 +0000
Files and hashes:         1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: 572aSWhZGjOgm2bVbNNRd15ZBMJzJRAhAkzu/eoMKAQ=)
                          2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:95:91:5b:dc:df:ac:e1:68:16:e7:1b:7c:05:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
        Validity
            Not Before: Aug 23 04:00:18 2025 GMT
            Not After : Aug 24 04:00:18 2025 GMT
        Subject: CN=706f38ccce19bee1b0b9754ddb6bc078d5af63c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:3b:60:3c:b1:34:7f:61:9e:b1:75:87:05:
                    bd:63:15:5b:2f:5e:a7:49:c6:58:38:bb:c7:66:9b:
                    bd:65:61:f7:4c:83:ec:c6:66:f2:04:4b:65:f7:a6:
                    f1:2f:61:59:5e:6b:5b:ab:d6:43:55:43:fc:ba:e1:
                    6d:d3:50:a7:5b:17:be:26:54:34:41:66:02:00:75:
                    f9:eb:c7:62:83:10:be:db:0c:16:d2:3f:ca:0b:e8:
                    9e:9d:02:2b:54:26:ae:97:d3:53:fd:7c:b5:9c:8d:
                    51:e8:07:f6:77:28:12:9a:31:96:4b:b0:b0:6f:19:
                    cc:c3:65:1e:ea:98:7d:72:c1:c8:a6:c4:37:3f:9e:
                    66:13:c5:99:4e:df:43:a1:76:23:9f:70:99:0c:d2:
                    6a:d9:cd:17:87:f9:c4:3f:3f:38:89:d0:73:0d:72:
                    23:b2:4e:f8:ab:a4:93:15:65:b0:cd:07:be:93:fc:
                    2e:72:bf:35:cf:2f:19:d9:16:93:50:10:b4:de:c9:
                    d9:2c:7d:01:79:97:dc:cf:76:46:98:a7:14:a7:d6:
                    1f:12:93:7c:5f:2c:03:b8:00:2a:6e:05:a9:e1:94:
                    03:57:cc:94:b9:d0:b6:d8:84:21:53:e2:91:d5:c8:
                    72:3d:b5:69:49:49:4c:0b:dc:10:f1:56:01:4f:47:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6F:38:CC:CE:19:BE:E1:B0:B9:75:4D:DB:6B:C0:78:D5:AF:63:C2
            X509v3 Authority Key Identifier:
                keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:1c:76:b3:49:f8:45:af:fb:68:98:49:1f:eb:a8:ba:98:
         7b:c9:6d:bb:50:c1:d9:71:48:44:50:eb:81:44:39:e4:22:23:
         8e:b9:5a:e5:cb:79:87:de:e0:a2:9a:40:5b:59:75:aa:d0:e5:
         92:98:28:37:10:f8:55:01:83:1a:98:f5:7b:f4:8d:39:8b:53:
         4c:25:fc:18:19:3d:b3:5d:58:c0:e2:92:4a:1f:63:e7:fb:5a:
         1b:72:68:b3:f7:95:7b:80:b6:05:1c:62:7b:f9:ac:e9:1d:b9:
         18:e5:c6:7f:ca:02:0f:e2:97:90:e0:f7:71:21:4a:6a:40:07:
         cc:c6:25:2d:60:32:e1:d9:05:1b:4a:16:a1:e1:67:85:50:dc:
         1e:9d:d0:5b:49:f4:45:ef:4f:1a:25:a3:36:8d:b8:2a:59:42:
         53:ec:fa:61:7c:d6:48:96:51:6a:d1:a7:72:e1:3d:94:54:22:
         5a:d9:d2:9e:b4:62:cf:86:84:6b:34:b6:1a:5e:9c:6e:ee:8d:
         33:82:55:07:4a:09:51:be:38:2d:90:93:e0:e2:fc:34:9a:99:
         ad:73:ae:41:5f:61:5e:f0:79:f1:61:53:0a:2c:36:5f:ab:a3:
         d2:6b:77:7e:aa:e5:25:13:f8:66:4d:44:24:c9:37:d8:9a:41:
         02:9e:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:43 2025 by rpki-client