Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File:                     IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier:          qQe6JQY0MNUoRNwLU4jg8r66Ns+VCWULayAENypn7A4=
Subject key identifier:   50:8D:71:C1:44:D2:47:6C:38:68:76:28:E9:4C:86:24:16:A4:A9:B2
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer:       /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial:       019851FAF5EB5181E77DF150FC4C1469F680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number:          1603
Signing time:             Mon 28 Jul 2025 17:00:58 +0000
Manifest this update:     Mon 28 Jul 2025 17:00:58 +0000
Manifest next update:     Tue 29 Jul 2025 17:00:58 +0000
Files and hashes:         1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
                          2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: f9GQVPtHKuRvWmWTMdrDThElfwoF6Ruj8PjwviIWpDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:fa:f5:eb:51:81:e7:7d:f1:50:fc:4c:14:69:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
        Validity
            Not Before: Jul 28 17:00:58 2025 GMT
            Not After : Jul 29 17:00:58 2025 GMT
        Subject: CN=508d71c144d2476c38687628e94c862416a4a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:e7:7e:7b:1a:c4:54:27:7c:3a:51:a6:e4:
                    81:0d:2c:5c:91:36:d5:8f:89:99:c6:42:a3:de:dc:
                    42:80:e7:c3:60:3c:e2:31:31:d0:07:4a:65:a3:5f:
                    3f:e6:a9:48:89:8c:76:7c:a6:70:7e:ec:8a:67:9f:
                    11:0a:4e:8e:71:72:e1:b6:da:44:f5:a7:a8:bd:7a:
                    50:c6:d1:24:32:e8:df:a7:81:9f:4a:62:8c:30:92:
                    60:7e:48:78:15:f2:25:3a:5e:e2:b5:3d:2f:6e:4c:
                    c5:0c:87:31:55:d5:f1:7a:0c:d1:d5:66:40:9f:51:
                    44:5e:4b:26:a0:43:87:80:21:d7:be:23:c7:44:b4:
                    86:6d:a7:55:5b:65:c0:4e:a2:6a:11:64:8a:20:11:
                    94:08:f8:0b:4b:46:e6:3d:26:ec:30:ab:a4:3d:c1:
                    24:68:72:3c:45:85:a6:e4:55:26:0d:39:57:73:b6:
                    65:85:76:63:d7:ce:a6:3c:c0:bf:06:5f:95:85:b6:
                    28:ce:fa:e5:61:7c:5f:c1:bc:1e:ad:a2:0d:41:82:
                    d5:77:f5:92:f0:40:48:7b:71:36:26:86:ea:f6:ca:
                    3e:b8:47:e5:b8:0c:78:44:ae:75:56:ab:b9:42:a4:
                    86:1b:bd:9c:d6:48:d8:2f:c2:82:52:39:6e:f5:3f:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:71:C1:44:D2:47:6C:38:68:76:28:E9:4C:86:24:16:A4:A9:B2
            X509v3 Authority Key Identifier:
                keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c6:91:d2:23:da:d8:b8:2e:08:65:f0:8e:5c:31:82:38:d9:
         54:91:f1:b2:eb:dd:92:00:1c:e3:69:25:46:a1:88:16:ee:16:
         27:67:a2:7c:8d:91:63:fc:67:1f:95:3a:79:28:d8:15:fd:4b:
         81:72:77:ad:ef:df:40:b3:2a:47:6d:28:14:e2:7f:cc:03:d0:
         6e:13:bd:5a:be:46:cd:06:6e:6d:7b:1b:c1:f9:7f:47:87:5e:
         8c:dc:6f:e7:42:96:ce:2e:6f:28:45:f8:63:8e:3c:a6:95:fa:
         2f:ed:d3:9a:9e:4b:15:25:bc:ac:c1:35:a8:98:57:4b:67:d9:
         cd:9e:0f:e1:97:80:04:df:99:c8:5d:ee:dd:0b:11:e1:bb:39:
         53:8e:6d:80:15:49:d9:d4:83:cb:f2:b2:56:83:7c:0e:f6:7f:
         92:14:42:a2:d0:4c:e0:b9:a9:8f:64:59:5e:c5:52:db:d3:b6:
         85:e3:95:e0:a2:8a:56:b5:ad:60:38:cd:40:74:49:4d:95:96:
         98:bd:38:33:b7:0f:b0:74:f1:9a:f4:87:38:7c:7a:f4:50:89:
         e6:d1:17:02:4c:94:13:0a:10:4a:d8:29:df:38:81:b3:c3:ce:
         3e:72:ce:79:2f:f8:67:20:30:4b:3a:aa:d7:35:d0:5f:0e:e6:
         28:31:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:07:03 2025 by rpki-client