Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File:                     ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier:          2N9hn9wqiaJIloyBZJxRE0JZpQqzAvzcI76gDqgYGAE=
Subject key identifier:   EE:CC:1B:EB:24:55:30:58:1F:BA:0B:B7:54:D9:DE:BD:35:96:09:9C
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer:       /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial:       0198D4E028EDD58B9836C70A24963B0AB626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 03:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:56 +0000
Files and hashes:         1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: JiiHGvdlkEGYCiWMV42xeyenR8u6qM55JY77FrMJNZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:28:ed:d5:8b:98:36:c7:0a:24:96:3b:0a:b6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
        Validity
            Not Before: Aug 23 03:01:56 2025 GMT
            Not After : Aug 24 03:01:56 2025 GMT
        Subject: CN=eecc1beb245530581fba0bb754d9debd3596099c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:d7:41:a2:33:c5:ac:ac:d6:50:34:eb:07:
                    26:c4:1b:aa:74:b6:fe:77:73:da:5a:72:1f:04:27:
                    b3:95:22:7d:73:e1:ad:55:43:97:81:6b:77:16:d6:
                    40:77:82:d4:62:08:c9:ea:cf:e5:65:c9:6d:59:b0:
                    94:d8:f8:2a:9f:f9:79:e0:96:8f:c5:a2:86:6f:91:
                    6f:7c:ea:5a:83:ae:5b:f0:30:c8:4f:a7:79:6a:25:
                    34:c1:69:69:32:de:05:fd:30:37:c5:67:12:8f:22:
                    05:d4:5c:49:1e:c5:6d:3a:4a:6f:d9:98:34:44:a9:
                    fa:d0:40:0c:e8:bb:ef:38:e2:c9:3c:bd:f0:f0:06:
                    ef:80:d2:85:74:ea:46:7e:51:7d:38:7b:6e:8c:53:
                    86:54:c3:12:1f:55:87:0a:b4:34:73:bd:e6:18:07:
                    f4:8f:64:2b:79:e4:13:63:0c:66:da:24:af:2c:1e:
                    fb:06:82:b4:8c:d8:53:ce:ca:e0:0a:15:68:81:18:
                    7d:6c:c6:cd:a6:c6:0a:20:5e:b5:07:47:e1:35:39:
                    59:39:6e:2e:0d:11:dc:9b:b6:e0:48:2b:8d:5a:d5:
                    c9:ae:d9:b1:6b:10:6d:ba:ae:86:9a:da:23:0f:58:
                    e9:9b:b7:70:7c:c0:6c:9a:cd:4c:f4:9a:89:cf:fa:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CC:1B:EB:24:55:30:58:1F:BA:0B:B7:54:D9:DE:BD:35:96:09:9C
            X509v3 Authority Key Identifier:
                keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d3:b3:ce:b3:f3:38:cd:5f:37:5b:0a:f9:36:aa:23:c0:5d:
         c2:df:1a:33:e1:28:b1:48:ae:61:d9:a3:b4:a0:3d:80:8b:d2:
         15:3a:bc:f7:6f:e4:f5:84:76:9b:9e:59:ac:5c:a3:5a:e6:9e:
         11:92:52:ce:ad:c7:20:e7:ec:07:9c:5b:1e:f4:df:a1:50:92:
         9a:55:60:a2:76:34:34:81:7a:4f:50:d2:be:78:8f:b1:e4:99:
         0c:7d:be:d3:6f:8f:58:93:f0:b4:78:7c:c0:c5:0f:1d:79:8d:
         19:a0:d9:05:31:20:af:05:4c:5d:47:83:d1:56:ca:29:25:e5:
         13:0d:16:d2:9c:7c:f1:d4:b3:8d:d5:1b:47:6c:4d:d4:d1:91:
         f8:50:b8:dc:2f:a8:08:79:4c:cc:e5:fb:81:91:cb:e6:0a:a9:
         d0:b1:21:89:da:82:3f:d8:75:7d:43:36:0c:6d:4e:c9:da:58:
         72:55:05:4d:83:b6:b3:18:f3:57:f6:ab:25:2b:f7:5b:dc:fe:
         cd:6b:51:f3:69:6f:a7:dd:83:f1:97:41:3f:a4:49:52:72:22:
         84:15:8f:a2:e7:67:8b:a0:78:a9:dd:aa:91:65:f1:ae:0b:92:
         fb:3b:cf:8e:3a:bc:d4:42:0e:1e:fd:9d:a1:1b:f9:a7:e3:5e:
         0c:6d:bf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:21 2025 by rpki-client