Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          0p0dbcGbAFP8lKfoarcNNVUmR4GIkrJmIvfCANZkKwY=
Subject key identifier:   D3:03:A3:0D:E3:75:6C:D6:CC:CB:45:35:43:FE:CE:64:D3:91:26:71
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       01983804BC64566EA32843CD3E464C12BC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          1480
Signing time:             Wed 23 Jul 2025 16:01:31 +0000
Manifest this update:     Wed 23 Jul 2025 16:01:31 +0000
Manifest next update:     Thu 24 Jul 2025 16:01:31 +0000
Files and hashes:         1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: SpYRY+DaMs+QtloRQdT7khnCvlxdJOAfz6mNOcXNvKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:04:bc:64:56:6e:a3:28:43:cd:3e:46:4c:12:bc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Jul 23 16:01:31 2025 GMT
            Not After : Jul 24 16:01:31 2025 GMT
        Subject: CN=d303a30de3756cd6cccb453543fece64d3912671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:94:8b:93:c8:2c:8f:82:35:52:5c:bd:c6:
                    dc:73:12:18:96:57:f6:2b:53:a3:c5:ab:19:b4:50:
                    39:7a:af:ed:e2:53:51:9e:a5:ef:26:fd:db:7c:fa:
                    3d:22:5d:17:ac:0f:24:eb:cb:77:01:8d:59:fa:d6:
                    4e:90:24:27:c0:c3:52:7e:84:2a:de:cf:24:26:72:
                    21:55:44:d7:94:2b:2e:57:15:a6:43:e4:23:20:30:
                    9b:7f:73:13:7c:af:b9:4c:12:4a:38:69:c5:5c:3f:
                    71:ad:a1:fd:e3:c6:5d:a9:e4:36:1a:04:8f:1e:9b:
                    b9:94:4c:26:f9:97:75:da:8f:16:40:7d:a0:5f:8e:
                    23:18:30:e6:dd:fe:61:1b:6e:c2:23:da:39:c2:49:
                    85:4d:d1:65:33:66:72:63:2a:37:14:f3:1e:26:20:
                    3b:6d:fe:5c:35:bf:fb:21:37:29:2c:9d:ec:d1:67:
                    72:90:95:55:a5:0b:b0:86:35:1f:9d:67:b3:f3:54:
                    49:4b:08:a8:50:03:d1:df:96:68:b2:77:97:9e:f6:
                    e0:4f:4a:69:83:dc:15:53:a1:23:b7:71:9f:10:8f:
                    f1:40:8e:76:15:7f:33:b1:70:3b:7b:e7:a6:85:c9:
                    5d:12:84:bb:b6:ee:32:c2:dc:16:ae:cc:0d:22:6f:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:A3:0D:E3:75:6C:D6:CC:CB:45:35:43:FE:CE:64:D3:91:26:71
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:eb:16:49:fc:e1:8d:90:f9:7c:87:1d:c3:38:14:ff:ae:
         7c:16:7b:31:c6:9c:0e:6a:b4:e4:3f:5d:ae:4f:9e:7c:b0:c7:
         48:e6:40:da:41:78:12:10:07:8a:9a:13:52:2d:a3:a7:11:5c:
         e7:9b:3a:3c:a2:d9:07:99:90:ad:68:e8:d8:6b:94:28:2f:6e:
         6c:1f:b9:3e:df:db:ee:c6:2f:e4:55:76:3d:38:09:c3:bd:00:
         a5:4a:67:62:f2:28:bd:39:fc:54:17:ab:83:92:16:f9:18:bf:
         b5:7a:48:25:c9:a9:4a:86:18:ea:53:e8:34:b3:76:49:18:c8:
         11:30:d5:9b:09:77:23:c5:6b:69:36:10:66:8d:42:8d:7a:64:
         0f:20:cb:e2:88:58:94:ed:50:43:a5:a8:aa:96:a0:11:64:97:
         14:21:87:80:0a:15:78:67:99:ed:27:f8:08:53:56:00:be:43:
         7d:49:7c:21:a3:e7:8c:53:94:36:ba:35:55:20:89:50:98:f1:
         cb:66:db:00:b2:c1:be:af:07:1c:f2:ca:1a:62:cb:b9:ea:07:
         66:6f:b9:88:96:10:b0:4e:47:0b:6f:4f:e8:be:9c:8c:6a:84:
         e7:42:c6:a5:a9:c4:fc:53:32:a4:fe:be:06:05:91:a3:4d:83:
         d3:bf:cf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:52 2025 by rpki-client