Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File:                     1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier:          5FS+q77qz31w+XqNlWhOAPJ+i1krrcaYBJvEnMOThww=
Subject key identifier:   E3:7F:7B:0C:0F:C9:DC:25:77:E4:3A:F2:84:BF:48:60:0F:56:AF:0F
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer:       /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial:       01984588EAAEDCDDE5B87FF2629AE5F62A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number:          0736
Signing time:             Sat 26 Jul 2025 07:00:57 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:57 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:57 +0000
Files and hashes:         1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: duXc9Rk6822ROeaJVrooD2Yda5AAvOb3R0bsDGwYftI=)
                          2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:ea:ae:dc:dd:e5:b8:7f:f2:62:9a:e5:f6:2a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
        Validity
            Not Before: Jul 26 07:00:57 2025 GMT
            Not After : Jul 27 07:00:57 2025 GMT
        Subject: CN=e37f7b0c0fc9dc2577e43af284bf48600f56af0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:f9:e6:a0:eb:01:68:a9:79:91:13:ef:1e:
                    7d:e2:43:91:b8:cb:f4:7b:29:39:60:06:5d:a1:4a:
                    93:90:03:77:db:e1:44:83:ec:f7:0e:65:88:9d:d3:
                    12:7b:f8:bc:1f:f7:db:3a:40:4f:c4:2b:02:6a:73:
                    41:ef:52:f0:50:24:ca:76:c6:66:4a:08:b6:13:f6:
                    ec:c3:6f:a7:c5:86:fb:24:bb:43:b9:45:89:31:b0:
                    fe:df:52:37:34:1f:3b:03:67:d6:28:57:b5:97:b0:
                    75:77:25:18:93:61:3c:5b:fd:f2:8f:1f:1b:3c:01:
                    46:7d:c4:4d:9b:2d:39:5a:c4:40:66:6e:14:ab:9a:
                    7b:2a:bc:7c:60:a4:f7:0e:4c:c4:2d:f4:14:55:33:
                    9c:13:73:ba:7e:f3:08:71:22:1b:d1:fc:9a:66:2c:
                    5d:bb:0f:f9:50:7f:c1:a7:9b:ac:5c:8d:6e:8e:67:
                    05:5b:42:05:fe:f5:b5:cd:37:88:a5:a1:a2:bb:58:
                    5f:16:95:74:10:0d:92:2d:98:5a:9e:5a:65:ad:a3:
                    01:66:0a:96:36:8d:82:a7:57:4b:5c:b0:f7:36:ed:
                    12:e8:c6:89:29:8a:db:9a:8f:ff:d1:21:1e:c8:3e:
                    1e:28:36:89:ce:31:ef:1b:50:7f:bb:b2:bc:1e:72:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7F:7B:0C:0F:C9:DC:25:77:E4:3A:F2:84:BF:48:60:0F:56:AF:0F
            X509v3 Authority Key Identifier:
                keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:52:54:97:06:e3:b1:be:a3:22:5d:57:fc:37:61:94:aa:a2:
         ec:14:8c:bd:11:94:96:1e:db:ad:77:31:a0:27:42:4e:17:3e:
         d1:d0:a2:87:61:1b:10:da:d5:59:04:d3:21:43:f6:1b:8d:6f:
         0e:cf:aa:dc:b3:cc:be:d3:66:8e:ca:ff:bd:69:42:84:60:b8:
         b5:68:c3:bd:3c:8f:4d:8c:7d:be:1d:85:8c:4e:99:dc:e4:1f:
         80:fd:fe:7f:77:82:36:61:c5:0a:89:ff:5b:f4:cb:50:db:37:
         cb:20:83:c6:70:b3:2f:00:21:1b:ac:b5:30:a6:40:e3:e5:42:
         95:74:08:c3:da:4c:df:ba:c7:f1:f3:fa:db:99:1f:dc:bc:c4:
         3a:d4:62:f5:e9:b3:d7:2b:8b:7a:12:71:90:c7:73:dc:d5:b0:
         92:e8:8d:a5:58:40:22:c9:cb:0a:e3:27:ac:80:e8:c4:58:db:
         93:e6:9b:36:11:28:6a:0c:0c:fd:25:d9:29:3b:3a:2d:6b:e8:
         3a:b6:0e:db:c6:6d:ad:63:8e:f8:c1:53:f1:bc:0b:62:c4:a9:
         c1:74:6f:5e:59:63:0d:a4:ae:2b:96:0f:3c:e5:d0:16:00:00:
         45:c4:5a:7b:20:59:9f:85:64:df:ec:47:ab:7e:12:f8:c9:cc:
         c9:63:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:36:26 2025 by rpki-client