Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          ZMrHgFnPX1uI+aivfbbFKoglpRiYXvb+iPMeLsXadds=
Subject key identifier:   16:20:C1:8E:C6:D3:42:CF:1D:5B:FB:1B:7F:28:F4:1C:22:20:8B:FD
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       0198D6987A909660660B603ADA297BEC0F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 11:02:53 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:53 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:53 +0000
Files and hashes:         1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: 5MA40ixa8Iy4A4xLDgNFnJSly4gX30WVpNz7dp8K/ck=)
                          2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
                          3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:7a:90:96:60:66:0b:60:3a:da:29:7b:ec:0f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Aug 23 11:02:53 2025 GMT
            Not After : Aug 24 11:02:53 2025 GMT
        Subject: CN=1620c18ec6d342cf1d5bfb1b7f28f41c22208bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:46:c7:e7:98:a4:99:94:2f:87:cc:d0:ca:
                    c0:7c:82:56:e5:6f:fd:0d:84:fa:e6:12:6e:af:8c:
                    9d:15:6e:8d:bb:54:7f:6b:0f:fd:e6:33:51:b0:a6:
                    7c:00:49:25:75:8b:77:89:69:9a:8b:0a:81:72:11:
                    6e:d4:c1:f7:fc:86:49:59:da:3b:21:00:6e:14:b9:
                    bc:50:eb:7a:69:da:6e:88:92:2b:fb:ee:cf:d5:db:
                    09:e4:b1:96:d4:c0:71:aa:98:2f:2e:d8:b2:50:73:
                    fd:ce:e5:74:37:8f:4c:85:18:66:a7:27:74:50:97:
                    6d:e8:bd:73:07:d9:35:4b:23:84:a9:87:92:18:23:
                    76:a1:3c:c7:e0:8a:91:7f:cb:8c:f2:09:a6:17:ea:
                    4a:f2:61:c8:bb:4a:40:4c:0f:1f:35:97:7a:dc:7e:
                    d2:9a:6a:32:06:80:9c:36:65:2c:2b:e3:50:f8:2d:
                    6c:ac:43:9e:21:43:a4:59:50:10:33:b9:bb:2e:2e:
                    4a:c7:f8:cf:ff:f3:d7:fb:73:de:c4:2f:b1:2b:42:
                    ac:7a:74:dc:14:6a:95:d2:e3:fd:dd:b8:58:f9:7b:
                    5a:44:e7:e6:df:ea:1d:09:dc:08:72:ed:16:fc:df:
                    2f:d6:38:fc:44:18:79:19:01:cf:49:6e:31:f1:4b:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:C1:8E:C6:D3:42:CF:1D:5B:FB:1B:7F:28:F4:1C:22:20:8B:FD
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:fd:18:8c:fa:17:5f:67:e7:12:22:69:e6:c2:d6:2e:cf:
         bb:ca:f7:d3:79:e1:99:a4:07:3c:5a:34:2e:40:c6:4c:b3:00:
         b7:84:81:d7:31:e7:3b:29:e1:90:04:5f:e4:b8:16:21:85:8d:
         ef:7c:cd:d6:13:bd:ad:03:07:e2:4f:69:95:9e:e3:46:fd:ad:
         2f:e8:01:38:05:03:23:96:8c:a0:94:0a:0c:91:d9:4d:39:34:
         ce:9d:d5:c6:77:44:48:ea:e8:19:7a:06:a7:7d:b2:40:4e:10:
         68:0c:b8:39:b8:34:e6:31:d4:24:74:3a:1d:e1:14:da:b4:38:
         da:6c:3b:e4:be:62:4b:09:b7:1b:6a:36:9c:4f:a3:9f:bc:b6:
         b9:a5:f2:0c:7a:30:2b:b8:02:12:94:c0:34:af:ba:32:d6:09:
         84:4b:97:99:36:7a:85:e9:07:ca:ac:da:f2:e9:b1:0c:96:3a:
         35:56:27:3c:c5:b6:45:b7:9f:1e:c0:5b:65:4e:99:ea:c6:75:
         a2:47:4a:41:92:41:c3:a6:02:a6:e6:36:94:65:1a:db:c2:b7:
         88:bf:c4:47:cb:53:a4:eb:c7:92:02:1c:71:c2:b5:1a:8f:5f:
         8b:8f:65:db:e6:4a:fa:ac:3b:95:2a:44:25:18:46:cc:b6:ee:
         7b:44:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:13:12 2025 by rpki-client