Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File:                     I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier:          laKOjtTubLbkrN4SaLnkru6u2PnR/0DVCGcS9+kMVos=
Subject key identifier:   81:58:F1:74:E5:90:59:C2:85:B6:DD:18:B3:E4:80:16:16:5E:0B:8F
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer:       /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial:       019847E48053715EF44C6BD3F7F7F63743DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 18:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:14 +0000
Files and hashes:         1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: hvCRUyJRV8ZBjZYJ1QEhlq1W025pTT358euuzUck/Mw=)
                          2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
                          3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:80:53:71:5e:f4:4c:6b:d3:f7:f7:f6:37:43:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
        Validity
            Not Before: Jul 26 18:00:14 2025 GMT
            Not After : Jul 27 18:00:14 2025 GMT
        Subject: CN=8158f174e59059c285b6dd18b3e48016165e0b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:ef:00:7c:fb:ec:9f:b0:a0:28:81:94:8c:
                    f1:cf:2c:4b:91:32:15:18:b0:10:65:5a:d2:2d:a0:
                    ef:e9:1f:d8:c0:e3:a6:d0:59:3d:86:e8:51:de:c8:
                    a2:08:b9:3f:91:f1:ef:da:ec:2e:1b:37:8e:30:c7:
                    7d:0c:21:ca:b4:5a:48:3b:86:0d:bf:77:4c:40:5f:
                    dc:04:c1:83:4f:8f:82:be:80:82:20:fe:4a:c0:f2:
                    76:41:48:7f:16:2e:7b:90:00:f6:e4:6f:f2:0b:30:
                    dc:a9:f1:5f:0e:65:89:f4:a5:7a:51:d2:f2:74:8a:
                    99:8c:a9:c2:54:dd:e5:f9:03:48:c7:40:d8:56:cc:
                    9b:25:8f:34:ef:fd:45:ff:42:df:d4:c4:ae:29:d5:
                    28:bc:eb:30:5f:69:9e:b3:ec:dd:5d:38:bd:dd:61:
                    17:e2:38:89:fe:d2:c8:86:b2:28:de:b0:cd:f0:81:
                    c9:b2:63:59:9f:d8:67:51:38:4b:b3:93:b4:df:79:
                    26:16:c3:05:0c:3a:9c:e7:77:19:be:2a:51:01:29:
                    f4:b6:56:4a:29:8d:88:b6:3e:be:38:7c:c5:35:7c:
                    09:99:fc:cd:d1:11:6f:8b:c9:0e:f7:7c:03:cf:01:
                    2a:46:2e:01:39:f3:4d:82:8b:cb:d5:b6:e8:bc:b8:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:F1:74:E5:90:59:C2:85:B6:DD:18:B3:E4:80:16:16:5E:0B:8F
            X509v3 Authority Key Identifier:
                keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:79:63:28:6c:ad:2d:12:e1:7c:f1:83:b2:24:c5:93:33:1d:
         76:9e:de:8e:b5:54:0a:11:df:5d:58:99:00:97:2b:88:9f:47:
         13:5a:a6:9e:db:cb:3f:52:85:16:7a:ae:f7:4f:96:aa:4d:19:
         4b:9c:ac:a1:97:47:04:61:31:8c:97:03:a4:cd:1c:93:d9:e9:
         18:42:8b:4e:31:72:5b:73:79:dd:4a:a5:ce:89:82:25:00:a3:
         64:6a:cf:7b:ba:6e:47:0e:a4:36:27:4c:d7:df:d0:b6:64:14:
         4f:4f:cd:40:96:1c:6e:03:6d:1a:ae:45:7e:d4:bf:0f:f6:03:
         e3:8b:4a:f0:f1:b4:97:22:ca:b0:2f:2c:7b:53:b4:6d:f5:97:
         7c:e5:e7:6e:80:0f:ff:d8:32:19:c5:db:c9:4d:4b:b4:55:91:
         21:e5:da:25:6f:8c:f3:01:fa:72:d3:b9:42:97:80:ac:60:0a:
         80:f1:eb:eb:51:69:e2:74:c5:ca:35:1a:42:2f:db:25:29:b9:
         6c:1d:19:a6:7f:b7:d1:01:4b:df:d6:22:ef:b4:d4:5b:07:ae:
         73:fd:fc:c0:94:e8:06:06:f3:da:66:cb:3f:62:6c:55:c4:0a:
         8d:58:61:01:98:83:83:ba:0b:c9:c3:56:04:f8:f1:4a:22:bc:
         40:fa:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:27 2025 by rpki-client