Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
File:                     goZyzXNrV-Hj38fdc2872KYWuoE.mft (raw, json)
Hash identifier:          Uj7woxFhxzA8fSJa2VcGkVjVNRM5hwtwY+8rtl/FqZ0=
Subject key identifier:   BE:80:C4:9E:EA:25:3D:D7:F6:A7:D0:75:0E:B1:86:F6:69:A4:7C:EE
Authority key identifier: 82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81
Certificate issuer:       /CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
Certificate serial:       01984A7825832EEB263F28C3F55B0CADF130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 06:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:44 +0000
Files and hashes:         1: f-v99B7kzDMwcYPXZ1yHUB7PuHk.roa (hash: PLEFeVBVmPy00pfwBVn43bz19/5DH4Ktxjb7rCdDKxc=)
                          2: goZyzXNrV-Hj38fdc2872KYWuoE.crl (hash: gzkhz17sq1iC7mUfJSA18vV20Jtq577MhN89FPTmMCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:25:83:2e:eb:26:3f:28:c3:f5:5b:0c:ad:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828672cd736b57e1e3dfc7dd736f3bd8a616ba81
        Validity
            Not Before: Jul 27 06:00:44 2025 GMT
            Not After : Jul 28 06:00:44 2025 GMT
        Subject: CN=be80c49eea253dd7f6a7d0750eb186f669a47cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:6a:44:fe:d7:06:e5:08:10:b3:d1:58:ef:
                    55:55:88:a6:11:89:45:3c:b3:d7:02:81:ad:a5:a5:
                    51:9d:62:58:4c:d4:c7:75:b4:2d:e8:5c:81:1d:f0:
                    bf:92:58:86:67:13:10:8d:6d:c3:bf:72:d5:0b:62:
                    20:d1:37:91:5d:cb:c2:2a:23:34:4a:cd:62:30:10:
                    9b:0f:9c:3e:0b:90:d5:c9:21:3d:f4:75:c8:a3:60:
                    8a:9e:1b:d3:91:fd:48:f2:f9:1f:6e:81:30:f1:12:
                    dc:2c:5d:dc:33:d9:48:d8:9f:8c:60:46:e3:70:96:
                    73:7e:27:ae:ac:8f:b5:17:67:d1:e8:21:25:de:ac:
                    40:0b:f2:7e:af:53:1d:52:f4:5f:e1:f3:ae:11:49:
                    1a:22:0a:4d:8b:0c:d6:4e:63:27:ec:a1:28:1f:6c:
                    c6:32:ff:3d:94:f4:1f:8e:be:92:01:2e:a4:f0:19:
                    a3:f9:3d:c0:03:a3:d4:54:49:e9:24:c0:79:fe:e9:
                    96:7c:78:a3:50:31:be:f4:78:11:3c:f8:a6:70:65:
                    3f:84:1a:10:fc:8f:1c:12:57:5d:a5:33:0e:02:8a:
                    07:e2:88:b5:84:eb:2a:79:d1:f4:5d:bd:62:c7:d6:
                    16:91:f2:6f:e3:43:a8:d3:f3:4e:fe:6d:eb:aa:c0:
                    b1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:C4:9E:EA:25:3D:D7:F6:A7:D0:75:0E:B1:86:F6:69:A4:7C:EE
            X509v3 Authority Key Identifier:
                keyid:82:86:72:CD:73:6B:57:E1:E3:DF:C7:DD:73:6F:3B:D8:A6:16:BA:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goZyzXNrV-Hj38fdc2872KYWuoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/54bb50-01be-4ec6-9418-eee7fae5c037/1/goZyzXNrV-Hj38fdc2872KYWuoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:98:a2:32:ba:44:d8:04:8e:4b:bc:17:e8:89:79:c6:65:fc:
         2c:1f:af:12:66:74:72:f5:06:6f:3d:67:52:03:36:02:7a:fb:
         6a:7f:3c:c5:8d:51:e9:ea:ef:e2:9b:8d:89:e9:d0:c8:1f:0e:
         ea:6f:cf:2b:4b:7e:fd:9d:03:ed:a8:6e:69:11:42:70:fa:11:
         1d:c7:d7:b6:ad:1e:3f:eb:b0:bb:2e:ee:29:9d:90:88:51:88:
         6e:66:58:93:51:18:4b:d6:9a:18:f7:90:0c:99:58:db:9c:03:
         c5:ee:6d:da:8d:3c:2e:18:5e:22:7b:6f:b7:ed:21:94:b9:cf:
         66:98:c1:f2:97:1f:d0:b1:92:11:15:b1:55:e0:03:15:85:2e:
         0c:86:e4:86:ea:ce:30:62:14:1c:fe:5e:8b:5f:d5:52:bc:59:
         29:9e:6e:0f:34:75:01:71:f9:43:80:b4:88:8c:b8:0a:3d:a4:
         34:0c:f8:b7:ff:05:e7:7f:80:c2:3c:66:3c:c1:0f:89:a8:9b:
         08:aa:87:35:6b:ae:ec:b0:9b:99:17:31:07:4d:ec:f6:fb:15:
         fa:c9:68:d7:9f:d4:0f:d4:30:fc:da:a6:b8:cb:63:f7:8f:7d:
         5e:f9:29:d5:59:88:02:af:e5:50:33:d2:41:62:33:88:bb:ae:
         36:b7:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:07 2025 by rpki-client