Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File:                     rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier:          gO9CYNKzzTK1h889xXiacRHOlCz6HqPB0L1x53OPyMU=
Subject key identifier:   EF:07:4F:4C:69:68:22:89:6B:B9:F9:77:9E:47:02:25:EA:70:B8:81
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer:       /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial:       0198567C61804FA2222D42B72A9E995BFDCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number:          1605
Signing time:             Tue 29 Jul 2025 14:00:48 +0000
Manifest this update:     Tue 29 Jul 2025 14:00:48 +0000
Manifest next update:     Wed 30 Jul 2025 14:00:48 +0000
Files and hashes:         1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=)
                          2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: 6uwhoQxbwXEwtIvNu8sgVqbAZpFIW33n9NHl+KJ076M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:56:7c:61:80:4f:a2:22:2d:42:b7:2a:9e:99:5b:fd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
        Validity
            Not Before: Jul 29 14:00:48 2025 GMT
            Not After : Jul 30 14:00:48 2025 GMT
        Subject: CN=ef074f4c696822896bb9f9779e470225ea70b881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:bf:40:c7:3d:0e:d2:7a:14:ec:10:ed:bb:
                    b4:52:54:e0:3e:7c:21:2a:ef:a3:df:28:29:03:dd:
                    4c:23:12:a5:95:9c:c4:5b:ac:cb:c3:3e:ae:6b:8c:
                    65:60:29:56:70:00:e1:13:f9:47:55:13:61:9c:62:
                    23:3f:55:b6:a5:8d:cc:ce:5a:f3:6a:70:db:b4:82:
                    09:c3:97:84:bc:a9:db:9d:e1:a1:f7:6a:da:aa:54:
                    ba:d8:48:2c:5a:f3:c1:8a:08:51:ba:d8:1a:cb:ff:
                    8c:a8:88:88:70:4c:98:12:02:33:30:91:27:d5:bc:
                    8d:1a:c6:96:32:10:13:10:06:4d:70:d1:24:22:bb:
                    bb:1d:41:6d:dd:0a:61:50:e2:90:7f:b6:0b:0e:f6:
                    89:e2:35:ef:32:15:77:40:e2:7b:e0:b0:59:f4:26:
                    fa:8a:4c:b9:73:c0:a9:87:c5:d6:84:22:75:d9:fb:
                    29:e8:de:46:76:4b:e7:e9:9d:fa:f3:92:3b:b0:fc:
                    37:7a:68:17:51:3d:be:1d:18:e4:97:a7:06:5c:5e:
                    b1:68:8c:ca:84:5d:45:bc:c2:ff:bb:c7:4e:95:e9:
                    56:5e:ea:93:37:e0:65:f4:f8:45:df:4a:85:46:9c:
                    6a:35:41:be:fd:1e:ef:ac:34:b0:61:3d:a0:10:7c:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:07:4F:4C:69:68:22:89:6B:B9:F9:77:9E:47:02:25:EA:70:B8:81
            X509v3 Authority Key Identifier:
                keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:48:28:70:ad:51:90:b1:31:76:92:c7:a9:cf:7d:be:1c:
         80:f2:b6:ce:13:30:e4:d9:49:7e:58:2c:2b:25:2b:82:3e:dc:
         91:f3:68:3f:af:98:47:82:9c:6a:ed:c4:62:91:d1:ad:67:65:
         94:40:15:74:d0:9a:e5:41:9e:fa:9f:80:0d:a8:f6:da:42:06:
         dc:78:1b:91:ab:0a:62:b6:be:20:6d:3d:cc:99:3d:26:b2:82:
         fe:c4:2b:16:55:1a:e6:6a:46:66:f3:4b:21:61:e3:31:44:a1:
         bf:35:75:91:e3:9d:b6:1f:59:b3:40:39:f1:b9:79:bc:e5:18:
         d5:03:36:01:56:e0:43:e4:6f:af:2b:39:10:e1:54:33:d5:91:
         47:d3:38:1a:85:5d:e8:48:63:42:f8:5c:8a:3a:50:93:60:35:
         0d:e7:f5:76:64:14:f4:f1:d0:d4:68:71:d7:e9:aa:62:f4:78:
         50:ca:36:a0:cf:3e:f3:e3:ca:25:cf:00:02:3b:40:ed:70:09:
         e8:87:75:71:d9:c1:b1:2e:89:d7:45:86:df:f3:92:2d:c0:df:
         04:4c:09:49:07:81:a9:03:b7:d7:32:28:d9:bc:37:12:e2:2f:
         8b:02:58:99:ee:b1:31:6d:ba:a0:6b:c3:27:8f:d8:b3:1d:c5:
         0e:a5:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 22:15:45 2025 by rpki-client