Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          +kYR/mXdfWgNXKOx+YeNImp5UcOUcRhx2b3seSYQWGE=
Subject key identifier:   6F:1D:98:48:F6:C6:51:43:79:89:3C:54:CB:70:A9:0D:27:59:11:B6
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       019844E3AB259200374AF1CDC82DCA615670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 04:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:27 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: AT+KkwUvOTK9TAH0A+OR7v0fEXCMEITZpP9u6a5o+Fo=)
                          2: MFfi1uWMm7mX9pdkn5QiwF2Y_88.roa (hash: wkDFcXBuPxZO4E7KTiUs2DofbiNc9cVh0u6ybcZwLbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e3:ab:25:92:00:37:4a:f1:cd:c8:2d:ca:61:56:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Jul 26 04:00:27 2025 GMT
            Not After : Jul 27 04:00:27 2025 GMT
        Subject: CN=6f1d9848f6c6514379893c54cb70a90d275911b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:51:88:eb:bb:8b:c5:b0:6c:ed:3e:4b:e7:
                    01:b1:3b:8b:92:df:a0:73:1f:30:04:fe:c2:47:6a:
                    22:7f:c0:09:c7:b6:26:7f:bf:ec:85:37:97:a2:6e:
                    89:98:bc:33:18:50:76:b0:51:2d:bd:86:35:da:03:
                    3a:23:db:e0:53:f3:09:8b:63:a1:c8:cf:5e:0c:c2:
                    a3:aa:e2:4b:bb:3a:6c:f8:f4:36:15:36:31:5a:06:
                    53:68:78:9b:3e:3f:13:3f:9c:da:28:1c:88:9e:14:
                    da:16:62:2e:8c:15:db:d3:fd:8e:6f:52:b1:fd:f7:
                    7a:c0:fe:a6:c0:74:5c:57:e4:22:4f:7f:d3:9e:23:
                    28:94:8c:a2:7f:69:9c:07:f9:f5:71:07:2f:90:2f:
                    de:c7:87:e5:b2:ac:d5:ee:e3:3f:41:70:6d:f9:c9:
                    7c:6b:62:d8:6a:25:ef:0b:c5:c1:f6:98:b2:16:a5:
                    7c:ff:c6:18:47:83:38:f0:d1:a2:80:f3:39:be:d8:
                    9c:47:7f:f4:f5:6e:2d:d6:bb:d0:fa:7e:e9:21:3c:
                    5a:6e:41:1b:7b:3c:76:c2:71:50:e6:8e:fe:4f:db:
                    8c:23:9e:da:4a:7c:91:66:bc:6e:86:3c:1a:04:58:
                    56:21:9a:90:93:11:13:ef:10:9c:17:a6:5d:48:a7:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1D:98:48:F6:C6:51:43:79:89:3C:54:CB:70:A9:0D:27:59:11:B6
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8e:d4:f8:53:bb:9d:8b:22:21:6f:a9:ce:1b:4e:e3:6d:70:
         55:a8:d1:75:96:b2:f8:79:f0:32:2e:3b:03:35:51:24:ee:3b:
         5c:64:80:ae:63:3e:ce:e1:03:89:d0:e5:d8:dd:1e:7f:ec:e6:
         f8:13:16:04:cb:f0:15:47:9e:56:78:06:84:e0:c6:24:92:93:
         5c:7d:22:17:d6:26:90:d1:6e:a3:7d:62:70:ef:1d:9f:dd:78:
         9b:93:1b:ff:42:8f:8e:e2:2d:e1:da:86:98:f6:01:31:80:1d:
         51:74:30:ff:10:f1:a0:28:0e:94:bf:af:29:46:87:c0:93:c4:
         3f:b0:77:3e:ec:aa:7d:e2:75:bf:0a:df:b7:4e:71:c6:0a:e1:
         df:26:70:a2:32:28:18:79:aa:34:fa:1d:68:5f:26:48:22:98:
         21:41:9b:ea:5a:75:e5:fb:4f:03:b3:af:65:9d:0c:dd:4c:7a:
         aa:39:e2:b3:fa:42:8c:96:55:b2:ee:48:77:d3:df:ed:1b:ce:
         71:fc:0f:10:c3:ee:ba:07:49:ba:ab:7d:37:55:70:6f:99:56:
         d0:7d:38:de:88:b9:1a:a9:f8:5e:58:4f:84:91:e5:95:97:ac:
         53:a0:ac:cd:b7:1e:3d:33:54:89:94:00:fe:f7:ba:c2:16:fa:
         83:57:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:07:01 2025 by rpki-client