Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          hp/PJQcH/NlQiESDmNKSgvaD4k1PZ54aX8FkInlz/vA=
Subject key identifier:   80:CE:E7:61:2F:3B:62:A5:40:D8:F0:73:75:61:4D:A0:66:5F:D8:20
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       01984AAEEA6BD01ECAE7480AD0887D956FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 07:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:33 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: Khjt/bVViYRFxeqdT7DuRvKx4egtY8nCH2nA5DZrGxA=)
                          2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:ea:6b:d0:1e:ca:e7:48:0a:d0:88:7d:95:6f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Jul 27 07:00:33 2025 GMT
            Not After : Jul 28 07:00:33 2025 GMT
        Subject: CN=80cee7612f3b62a540d8f07375614da0665fd820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:01:37:09:4c:05:82:77:56:c7:1d:eb:6d:
                    95:d2:5a:74:94:c2:12:3f:31:69:38:f2:98:76:af:
                    3c:82:0e:83:b1:6c:0a:da:ea:bc:68:33:c3:7f:e4:
                    cb:a5:37:b0:07:6a:a1:1f:36:fd:27:42:34:5c:9e:
                    20:64:26:fd:f3:60:88:c0:cc:9b:95:58:5d:bd:4a:
                    9d:7d:aa:34:f4:d0:b4:72:84:78:e6:81:20:4c:13:
                    1f:6f:7d:02:63:a8:d9:37:e0:07:d9:fd:3b:8e:58:
                    80:2b:4e:45:12:46:78:1e:3e:ee:6e:04:d9:d7:3f:
                    34:37:52:18:38:82:c8:9b:86:27:7c:0a:7b:4c:ee:
                    c5:32:4f:5f:b8:bc:d3:08:f1:f3:77:bd:30:da:73:
                    c5:b2:f6:e6:ed:65:4a:e1:aa:ea:13:74:79:76:e3:
                    c8:54:75:6e:27:8d:59:20:46:99:8d:f7:b6:43:08:
                    6f:3d:49:c0:c5:66:ec:61:39:21:98:8c:af:37:c6:
                    9c:14:ff:c4:da:70:4f:86:a2:c8:67:36:99:c0:40:
                    d3:91:8e:7e:ba:ea:21:7c:6d:e8:a8:6c:6f:1f:61:
                    f9:b7:0c:ed:09:b5:79:d2:70:99:35:46:8d:74:00:
                    ee:f4:97:da:32:8a:be:9b:29:53:90:24:2f:e5:08:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:E7:61:2F:3B:62:A5:40:D8:F0:73:75:61:4D:A0:66:5F:D8:20
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:16:e1:d4:c3:71:15:0b:47:05:fd:92:64:2b:36:0e:44:ff:
         a8:ac:b6:83:05:b1:98:0f:a0:ea:f5:80:2c:d5:e6:be:0d:62:
         2d:5f:a9:b8:03:f7:e2:95:0b:3d:cb:08:0e:df:43:0f:ee:29:
         52:b1:3e:ee:c8:a9:b9:c2:d0:9a:d4:42:7f:e8:d1:9a:d3:52:
         33:76:35:00:c4:e3:c0:1a:5b:ba:97:5c:14:49:35:e6:02:74:
         1f:f4:8e:89:fb:7b:c7:cd:10:0b:ec:9b:69:9d:01:82:8d:df:
         c5:06:ae:09:ff:27:da:2e:9b:00:9a:f4:73:96:4b:78:3a:73:
         66:48:09:6b:4e:67:fc:1f:ed:9c:62:fa:57:e6:66:db:41:5e:
         c1:35:ea:78:36:21:c7:7e:a6:d9:4d:94:25:d1:27:c3:02:5b:
         44:43:6e:ef:08:79:1b:e9:17:9a:09:b3:c1:56:62:22:8e:d3:
         4b:2e:f8:9a:26:8e:91:08:35:74:95:08:7e:d7:ed:81:33:a7:
         00:ed:15:48:03:be:1c:2a:1b:d4:ef:f3:a3:1d:db:c8:94:12:
         f6:1c:0f:4b:f7:20:5c:8e:4b:69:8a:5a:14:8b:20:e6:99:a7:
         60:67:5f:35:ce:24:97:f9:af:24:cb:c5:6c:5f:d5:cd:3b:cd:
         b9:2d:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:50 2025 by rpki-client