Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          AOWRZ9pJT9XB3FTPgxX5LcVpMGypyBe7ZEIubbK41Sc=
Subject key identifier:   87:A6:20:EE:05:D0:60:2F:EF:80:D6:7B:D6:53:24:AC:F9:76:6A:39
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       0198530CFBB5C5D883F99F398AD52F49B5ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          1606
Signing time:             Mon 28 Jul 2025 22:00:16 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:16 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:16 +0000
Files and hashes:         1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
                          2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
                          3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
                          4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: K5ojA2CkIf+DLjA1OiuJow2WwB2tRPIrsD78zCZOgWE=)
                          5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
                          6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0c:fb:b5:c5:d8:83:f9:9f:39:8a:d5:2f:49:b5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Jul 28 22:00:16 2025 GMT
            Not After : Jul 29 22:00:16 2025 GMT
        Subject: CN=87a620ee05d0602fef80d67bd65324acf9766a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:d7:cd:fe:23:88:2e:be:16:f7:30:29:af:
                    17:5b:41:1e:d5:0f:e7:cf:ea:be:56:37:1c:f5:a5:
                    39:80:8f:e9:39:dd:f3:1f:90:83:94:72:9d:3c:66:
                    ab:df:4d:53:32:eb:ab:b5:cc:73:56:dc:85:d7:d0:
                    f2:6b:e3:ae:13:42:bb:34:b5:d8:80:5d:b3:18:7f:
                    a0:ed:4b:04:f9:1d:24:04:71:74:af:67:62:bf:00:
                    8a:0c:6c:43:41:fc:ba:af:0d:60:d8:e8:63:7e:16:
                    b7:fa:91:7c:cd:a4:20:90:a1:71:21:e5:e6:15:f3:
                    5e:6c:15:75:44:43:6e:a1:7e:57:f4:56:17:a3:c2:
                    d0:28:16:00:cd:cf:99:d8:f7:b1:21:74:96:25:2a:
                    7d:f6:d9:1c:ed:36:e8:22:71:2c:32:c4:3f:26:b2:
                    d0:84:ce:5b:58:e4:48:20:80:a3:4e:81:23:fd:61:
                    1f:a8:ee:93:9d:d0:87:64:62:04:9f:bb:29:86:9a:
                    1c:a1:9b:f1:03:ce:7e:05:3d:12:a5:29:93:9e:2f:
                    6a:cb:1a:5d:68:b0:30:82:62:31:89:5d:04:f4:a7:
                    57:3e:56:e1:8d:df:47:6b:9a:10:76:46:72:97:32:
                    04:2d:71:6a:86:88:c8:1c:f1:d1:90:c1:68:51:18:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:20:EE:05:D0:60:2F:EF:80:D6:7B:D6:53:24:AC:F9:76:6A:39
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:bb:34:e1:55:c3:d9:ac:30:3e:9a:66:b3:b2:0a:b9:68:
         70:79:b9:b8:77:d5:0d:62:fa:02:f6:f3:47:fd:b9:e7:54:e2:
         fc:bd:20:43:48:c5:c7:38:10:fc:9e:cb:42:fb:a9:75:23:3d:
         fb:82:a2:23:b1:67:14:82:6e:20:ab:62:15:10:4e:67:0f:aa:
         eb:62:42:4b:77:c7:5b:b3:1a:2b:5d:e5:43:91:ff:3c:93:0a:
         a7:8d:b2:79:84:cd:2d:8b:8a:18:80:d5:66:e7:bc:59:b7:6e:
         67:fc:00:1b:2d:e7:c3:6d:3d:d9:c1:85:94:8a:d9:c1:8e:3f:
         1e:ab:1e:04:79:c9:d7:e5:b7:fd:e2:13:09:5e:e7:b0:89:1d:
         12:e2:10:01:3f:f1:20:07:c7:4f:b9:1e:16:65:96:3f:19:39:
         c9:31:45:53:17:72:08:eb:36:10:98:33:07:2a:07:1f:06:1e:
         51:c8:a5:a2:d1:36:30:81:ad:cd:58:dc:52:cf:26:16:c2:e8:
         c0:d5:6c:54:1e:89:01:00:a0:76:80:de:65:96:8a:28:2f:70:
         ff:3d:d7:b8:79:5b:03:31:da:b3:81:10:ca:6d:53:f4:08:43:
         19:96:6a:b8:17:69:81:5b:a6:a7:72:d5:68:fb:48:96:5a:2e:
         cd:c5:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:30 2025 by rpki-client