Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File:                     1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier:          OlbEfpkn7A+USl2Kxn6KK120kVSSlqJM0xcSTAZ9GII=
Subject key identifier:   D5:BD:8B:56:86:93:DD:13:B6:21:E8:A9:79:61:58:1E:14:EE:1F:57
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer:       /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial:       01984BC132C02329BE2DBC2327BA64B289AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number:          0265
Signing time:             Sun 27 Jul 2025 12:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 12:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 12:00:09 +0000
Files and hashes:         1: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (hash: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=)
                          2: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: jfgGwtcOErUTQi3H3Pc80aPQSrLXAmi6reXJh2zH3RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:32:c0:23:29:be:2d:bc:23:27:ba:64:b2:89:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
        Validity
            Not Before: Jul 27 12:00:09 2025 GMT
            Not After : Jul 28 12:00:09 2025 GMT
        Subject: CN=d5bd8b568693dd13b621e8a97961581e14ee1f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:b2:76:a4:4a:79:45:d4:d9:52:f1:56:ac:
                    40:d9:42:a2:56:27:8d:2c:7d:8e:d8:92:3f:cf:5b:
                    52:21:de:30:9d:2a:af:d0:4d:e9:aa:c8:45:5a:de:
                    7a:94:d7:d7:e2:d5:86:16:5d:92:11:af:85:df:6f:
                    f9:d5:e6:4f:25:f1:cd:5e:70:fe:31:de:4d:42:8d:
                    a0:b9:43:3a:66:9f:8e:32:85:42:4e:ea:ac:4e:6a:
                    ab:3c:ba:dd:26:91:90:1f:4d:73:d2:38:59:a4:d2:
                    0c:c1:fc:d7:6a:2d:94:32:cf:78:23:f3:29:16:9d:
                    a6:ad:31:74:ba:3e:e3:7d:e8:c8:49:25:f1:ed:2b:
                    de:c6:40:8b:19:96:39:2d:37:f0:16:23:76:2e:e7:
                    c0:f6:31:0a:2c:d6:0b:ce:75:c4:d6:d5:53:f4:05:
                    e1:7e:66:d2:48:de:1e:d5:fc:1e:ba:d8:03:0b:79:
                    02:0b:5c:96:4a:ca:2e:35:cf:5c:0c:73:b4:22:b6:
                    3e:74:ab:b4:45:2a:9c:96:77:aa:fd:52:73:9e:57:
                    74:48:f6:9a:46:4f:fb:1f:a7:ef:80:ef:e6:44:a5:
                    47:c2:5c:32:49:ee:b9:3d:fc:98:bd:76:30:f4:5a:
                    1a:2c:0c:03:ec:15:39:52:3f:4a:97:7d:0c:c1:6f:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:8B:56:86:93:DD:13:B6:21:E8:A9:79:61:58:1E:14:EE:1F:57
            X509v3 Authority Key Identifier:
                keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:05:c6:aa:38:c8:73:2a:54:ce:9c:0f:4c:68:61:20:b8:
         09:cb:64:c7:1b:2e:10:ed:01:aa:3f:ea:f2:80:d8:d5:1c:86:
         cd:ad:bc:84:63:64:af:db:c4:19:d8:3c:84:27:1a:f1:c7:ba:
         6e:68:d2:1d:86:bd:1a:c9:17:56:8d:e4:63:16:2e:73:f4:d5:
         34:44:24:d0:c1:8f:e6:4d:14:dd:31:b4:d8:bb:33:7a:00:96:
         d4:a7:a0:92:53:58:46:88:25:87:97:2c:33:fd:d3:38:10:84:
         07:f2:d2:9c:7d:85:4a:34:38:06:0b:e0:1f:c7:8f:71:f2:39:
         f7:14:c0:aa:b5:18:7a:53:ea:76:18:87:e7:40:f5:52:7f:31:
         ad:ba:de:91:c1:12:32:f3:f2:7c:42:e3:bd:84:81:4c:a3:2e:
         85:6a:ea:77:ac:f6:b7:8e:12:84:74:0f:82:7f:23:d4:50:25:
         b3:0c:9c:66:75:15:b3:00:c6:d4:94:ea:af:75:5d:98:67:36:
         07:59:2a:56:51:3c:32:b2:c9:3c:a8:e9:7e:23:cd:38:5c:f5:
         79:38:34:60:e9:63:ed:a0:87:90:c3:51:c0:f0:7f:fc:0f:95:
         30:25:c0:01:02:1c:83:bc:87:76:b7:7c:82:32:5a:5d:9f:49:
         85:1d:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:54:01 2025 by rpki-client