Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File:                     63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier:          Sr30/BgOiwMvFBOcVGZs1RtBdTQYJJtL4wNaxsNGXew=
Subject key identifier:   D5:4F:1A:2A:3F:E2:B1:31:93:B1:B5:C2:D1:97:CC:25:89:AC:6C:99
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer:       /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial:       0198D4A80CBB67F4730EB43CCA2D668D1F7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 02:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:39 +0000
Files and hashes:         1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: J+WDDoMFxlv/UKFVJlm3qL0A6sJuZFm1DPnSVIMFCKc=)
                          2: Hped2Nzw9BDgcMc7ThR7ZTJVfxo.roa (hash: EKotSeR3NXVLufe9gjVtCFUvkJNJlOJcwE3m9ndLGj4=)
                          3: hEjknnJNpRTS-Fn_xua20G61iFo.roa (hash: KjipElk/Xw3oiobuJ6dReVGkdCa06cXee6pklMf/SxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:0c:bb:67:f4:73:0e:b4:3c:ca:2d:66:8d:1f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
        Validity
            Not Before: Aug 23 02:00:39 2025 GMT
            Not After : Aug 24 02:00:39 2025 GMT
        Subject: CN=d54f1a2a3fe2b13193b1b5c2d197cc2589ac6c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:09:bd:ff:5b:ca:ad:42:99:c2:fb:70:0d:
                    9c:06:3a:71:4c:29:6c:03:dc:48:05:d0:10:0b:b1:
                    b7:22:f9:d0:ff:2e:43:7e:51:e4:38:e6:69:22:ee:
                    a9:5b:6d:1d:d9:a1:e0:2d:ba:0f:82:18:c4:01:00:
                    ec:b2:45:7b:a1:bc:52:11:ed:ec:cd:07:d6:e4:ec:
                    07:53:69:0b:fb:2e:f3:50:ea:0e:80:eb:b2:29:04:
                    ad:f0:e8:8b:3b:0c:e3:55:42:3e:25:72:eb:4f:d0:
                    4a:b4:fa:bb:d6:bb:32:b8:28:cc:ed:2a:47:46:25:
                    e7:4b:19:0b:a1:fd:50:ee:0a:b7:9f:1b:2c:4d:a6:
                    1c:05:0b:02:af:e1:b8:fb:c7:ed:6f:91:06:10:36:
                    fb:b7:0f:a9:00:29:63:bc:6d:06:d5:ba:80:03:ad:
                    36:ba:dd:4a:a1:4c:20:77:1a:75:8b:6b:0c:7d:49:
                    f6:cf:e9:4a:2a:6b:1c:ec:df:b2:6d:8b:1c:58:12:
                    bf:66:1a:05:7a:7f:df:f1:23:19:e7:62:62:2a:c3:
                    d2:bd:c8:4e:e9:d0:81:94:d6:72:ef:27:2e:c2:da:
                    91:0e:77:8f:39:f7:4b:7e:b6:96:72:f5:92:25:0d:
                    90:11:57:c8:51:78:9e:bd:34:fd:9e:63:cd:a3:13:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4F:1A:2A:3F:E2:B1:31:93:B1:B5:C2:D1:97:CC:25:89:AC:6C:99
            X509v3 Authority Key Identifier:
                keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3e:1a:67:38:c0:8c:3b:c8:47:0a:41:e7:a8:65:37:a6:5b:
         dc:1b:e1:eb:3e:f6:aa:19:15:d9:9d:cf:c1:28:53:d9:24:c7:
         4b:44:9b:4b:ca:10:1c:b3:02:9c:e4:63:00:0c:14:83:16:7b:
         12:75:df:0a:dd:68:23:e0:37:53:1f:87:81:16:b6:23:50:1d:
         72:0c:28:5b:2d:7f:30:40:59:42:80:d0:fc:d1:c0:a7:d3:f5:
         e6:d6:2d:a6:0d:26:9c:6d:e4:f6:14:d1:33:b0:81:f2:91:92:
         24:3b:74:81:f1:d2:cb:41:1e:ff:d6:6d:06:f7:1f:5f:63:c4:
         f4:b2:32:d5:46:47:9b:86:f6:c0:28:bd:9e:e6:6a:bc:9e:83:
         f5:24:36:38:80:03:3b:e7:ef:1b:9c:42:40:a2:cd:e6:b1:98:
         1c:6c:0f:42:11:dc:7b:b8:cb:b9:65:11:3f:0a:b4:2a:36:23:
         45:39:40:b1:1a:1b:4d:24:7b:ae:d6:26:92:58:68:7c:24:b9:
         fd:c7:2e:bf:01:77:86:95:d0:cf:bc:68:44:84:24:ab:e4:e1:
         47:12:7c:02:94:00:1d:e4:96:6a:d9:5c:46:8c:aa:c3:d8:8d:
         79:65:8c:d9:11:38:b0:75:ea:36:99:06:d6:7b:37:90:73:9f:
         22:09:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:11 2025 by rpki-client