Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          ViBhHa49w02WfiYecDOwlOQbwqhXenBDKpfHCGZSG8s=
Subject key identifier:   54:FF:0D:88:E3:65:42:5B:F5:67:FE:8A:CE:B8:3F:B1:D8:E5:4F:42
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       0198D4E068631E3FB19BA2F8E682006F28FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 03:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:13 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: hxfn57SHR3VTOCvw/82wVk+sO4fPytYDtqNn/3vD4AY=)
                          2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:68:63:1e:3f:b1:9b:a2:f8:e6:82:00:6f:28:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Aug 23 03:02:13 2025 GMT
            Not After : Aug 24 03:02:13 2025 GMT
        Subject: CN=54ff0d88e365425bf567fe8aceb83fb1d8e54f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:5e:06:02:fc:89:8c:43:6a:31:f5:a6:c6:
                    27:43:2c:ce:44:4e:15:99:4f:ef:ca:40:04:64:16:
                    e4:f0:f8:52:d7:6a:dd:eb:fe:10:ad:61:ee:56:19:
                    c4:89:0c:55:06:9e:01:f1:76:13:d1:3c:85:c8:78:
                    34:13:fb:de:ea:db:9e:5f:ab:96:cb:00:28:fb:e1:
                    c1:60:98:97:c3:b5:a7:46:69:b0:8c:23:f6:39:0c:
                    02:24:fd:f4:93:08:ef:a4:54:fa:3c:43:f5:5d:bd:
                    3b:3e:f5:39:aa:ff:88:bd:1d:74:c9:e1:da:2e:a3:
                    1f:37:db:90:74:14:5a:fe:b5:f4:57:23:d2:b0:b3:
                    f5:87:6f:a7:35:9b:a4:b2:bb:93:39:6a:30:4c:b2:
                    08:9d:b1:21:7a:8e:ee:46:a4:27:5e:43:64:9a:28:
                    b1:85:1d:88:24:51:71:3a:87:85:e3:e0:75:9c:2e:
                    e8:d2:af:ef:25:ed:bf:91:12:56:c1:79:31:79:23:
                    6c:ac:fd:00:58:7b:8b:a5:5d:66:bf:4a:4d:65:dc:
                    6a:da:76:d6:ea:68:96:0d:09:ed:df:b2:65:ef:65:
                    9b:1e:49:bc:cd:5b:29:c8:d0:4e:d0:66:2c:9e:94:
                    19:46:94:2b:28:cf:23:03:d5:fc:62:9c:8a:88:8a:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FF:0D:88:E3:65:42:5B:F5:67:FE:8A:CE:B8:3F:B1:D8:E5:4F:42
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:48:90:31:d0:bf:49:0d:dc:43:1e:99:e8:b3:17:b7:6a:79:
         ff:c0:35:65:7f:50:7f:4b:79:0a:75:d1:f6:ee:a3:5a:8d:1e:
         10:7c:16:13:84:cb:15:ad:50:d9:3b:54:d9:c5:38:92:e4:74:
         66:c3:16:6e:25:99:28:41:68:ad:ba:0b:57:42:4b:df:b8:a0:
         0e:cf:9f:55:e9:0e:2c:f4:fc:5e:59:b1:9c:65:46:4f:78:fd:
         4d:2d:0d:20:50:62:e1:25:9f:3b:02:d6:f1:17:bc:e2:84:ee:
         26:0a:78:08:ba:35:a7:c7:0c:43:e6:3b:a9:49:37:07:74:c4:
         28:6b:a8:0e:83:eb:08:bf:89:99:4a:e0:28:4e:71:a3:6c:c4:
         ea:ff:06:8f:85:39:d9:49:ce:5b:c4:be:21:93:92:d9:da:65:
         0b:db:7f:1f:19:e9:cc:a8:30:bf:7c:f0:63:40:13:ae:7b:c6:
         8a:e0:90:66:89:bd:6e:5b:2b:20:5c:64:a8:cc:10:51:9e:ae:
         0b:98:d2:d0:5e:90:93:a7:e7:a3:af:b3:45:84:02:eb:d3:98:
         d2:a3:56:d3:a8:54:c5:59:f9:80:bb:ef:b5:08:a3:b2:5e:9b:
         eb:02:ac:2e:c5:c9:a5:4d:dd:a1:30:b5:b3:b4:87:75:ed:bf:
         eb:d6:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:33 2025 by rpki-client