Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File:                     RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier:          /zhJ4PgULvIxndgOj/9Hq0XRRQI5a0cMQkRpZgqE/L0=
Subject key identifier:   90:CE:CD:C5:D3:9C:FE:8D:E9:9C:B9:1A:44:56:DF:C8:C8:9E:E3:2A
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer:       /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial:       01984D42BDBFB36569EEC4100463D4FD5348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 19:01:16 +0000
Manifest this update:     Sun 27 Jul 2025 19:01:16 +0000
Manifest next update:     Mon 28 Jul 2025 19:01:16 +0000
Files and hashes:         1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: NTC3Kvga7VqubE30sbnLvJoS4vaWdjlIpdcIZt2ek6E=)
                          2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:42:bd:bf:b3:65:69:ee:c4:10:04:63:d4:fd:53:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
        Validity
            Not Before: Jul 27 19:01:16 2025 GMT
            Not After : Jul 28 19:01:16 2025 GMT
        Subject: CN=90cecdc5d39cfe8de99cb91a4456dfc8c89ee32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:9c:37:86:53:e1:48:62:dd:51:d5:ea:44:
                    8b:3b:2b:31:44:6d:11:88:52:53:23:39:85:31:ee:
                    43:47:0e:4b:29:13:4c:47:b8:06:9d:e8:6d:db:4e:
                    c6:2e:c8:1b:ef:db:7b:16:41:69:e0:6e:b7:c6:49:
                    57:89:9c:44:8c:70:a8:65:20:78:1b:48:91:8c:3c:
                    40:c4:89:9e:10:1c:f7:eb:62:20:d7:ef:af:ac:8e:
                    e8:eb:33:7e:15:00:9a:4d:87:d2:8e:70:6c:e9:c6:
                    01:df:58:9f:1a:06:07:92:22:0d:f6:be:ee:c5:fc:
                    1a:c2:7c:3c:90:31:73:53:f3:dc:dc:a8:76:14:f0:
                    aa:57:63:78:08:4b:1b:d4:8d:f9:5b:7d:8f:d5:6b:
                    d2:aa:d9:3d:4d:ad:16:04:d5:6e:f5:53:f1:33:e8:
                    26:a5:42:36:01:1e:3c:be:6e:fd:1f:ed:ee:4c:b3:
                    90:a7:4b:48:cc:42:a6:37:18:59:f3:76:2d:4d:df:
                    20:77:e9:b1:f6:81:72:ce:86:c4:e7:77:ad:d2:61:
                    90:b8:1a:69:e4:61:05:12:ac:49:e8:26:e8:52:af:
                    4d:be:bd:bd:f2:13:9b:22:88:32:28:4f:85:4e:09:
                    b1:2e:45:4a:03:43:3e:4b:fb:a1:a0:19:0e:2e:39:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CE:CD:C5:D3:9C:FE:8D:E9:9C:B9:1A:44:56:DF:C8:C8:9E:E3:2A
            X509v3 Authority Key Identifier:
                keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:43:6f:cb:c4:11:7e:f1:08:19:28:1b:3d:46:94:5f:8e:82:
         ec:0c:73:45:ac:01:dc:c1:85:44:96:0d:7c:15:6e:31:5b:58:
         57:53:a4:e6:71:ee:07:03:3c:c7:4a:d5:02:7c:19:3e:c9:d4:
         3d:68:29:46:93:8f:b3:81:9d:64:fb:e8:6f:81:3a:51:b0:ac:
         76:13:78:e9:37:1c:56:52:4b:49:bf:9c:3d:07:b7:5c:ab:ee:
         59:78:f7:8d:6e:15:c6:40:75:64:40:8c:4f:48:8a:ee:9b:25:
         65:d2:0e:b1:cf:d5:33:f3:e3:18:ab:60:96:d7:54:ef:eb:be:
         f9:59:03:0b:63:66:4f:d9:5c:57:3f:0a:20:fa:34:56:93:31:
         33:4c:64:25:26:5a:28:f9:56:ab:ee:da:90:58:f2:52:fb:93:
         9d:eb:a4:01:3d:cd:6d:7c:ff:e7:d2:5f:f1:37:07:d3:aa:b4:
         d3:9d:f8:35:30:eb:0c:54:b7:5a:5b:22:db:12:73:1a:d7:f7:
         2a:b6:12:5f:2d:a4:af:fc:f6:8e:33:a5:da:81:b9:a4:66:3e:
         62:e4:10:0a:63:97:60:79:d4:7b:6d:97:46:47:89:b2:50:2e:
         63:2b:75:50:41:7d:1c:02:33:b2:3d:db:0e:d8:eb:80:68:02:
         4a:4f:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:41:16 2025 by rpki-client