Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          dltQs4GSxXuhvrR0U5nLkmUkR2d/PWCZhSrwU8RlH9w=
Subject key identifier:   5D:9C:85:65:A9:99:9C:68:9C:00:25:A8:29:3D:3B:C9:61:47:24:D7
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       01985A228B15FDB75775E4CC1648C0469B94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          1609
Signing time:             Wed 30 Jul 2025 07:01:09 +0000
Manifest this update:     Wed 30 Jul 2025 07:01:09 +0000
Manifest next update:     Thu 31 Jul 2025 07:01:09 +0000
Files and hashes:         1: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (hash: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=)
                          2: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: P6wO+9nTJwFGKEZplJJbeUCjIUgumqdU+/6YNXe3WHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5a:22:8b:15:fd:b7:57:75:e4:cc:16:48:c0:46:9b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Jul 30 07:01:09 2025 GMT
            Not After : Jul 31 07:01:09 2025 GMT
        Subject: CN=5d9c8565a9999c689c0025a8293d3bc9614724d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:4b:ed:4c:3b:26:ca:8f:80:29:53:5a:1b:
                    24:84:54:1e:3f:3b:cf:2e:9b:12:e3:c2:1a:22:1f:
                    64:5d:2d:3c:d1:b0:fe:7a:5f:a1:65:2d:4d:32:9b:
                    6c:7c:42:90:aa:19:23:80:13:b2:fd:45:66:f6:85:
                    90:b8:b3:f7:44:1a:89:a7:de:68:cf:fc:e2:a3:cc:
                    ca:3b:4f:66:f6:6d:b3:3e:b3:b7:15:d8:4a:24:e4:
                    ba:f2:33:fd:cd:57:5a:c8:18:60:72:e9:e0:b2:97:
                    f5:90:2e:35:08:05:99:6c:f4:7f:0f:30:11:53:08:
                    b5:76:60:67:58:5e:d1:73:f5:bb:84:be:8a:41:4d:
                    2c:37:4f:e0:a7:25:64:7b:0f:61:02:f9:8e:cb:62:
                    c7:fe:52:1d:d1:23:3f:33:1a:23:48:1c:f4:f7:23:
                    86:e4:6e:46:05:b1:65:76:7e:53:b2:97:ab:01:b7:
                    40:60:a8:cc:8a:c8:57:3f:0e:56:b8:91:83:de:8d:
                    36:89:93:35:e4:9d:a0:5d:27:e1:07:da:a4:96:18:
                    b3:05:77:9a:12:57:3c:a0:b3:0a:ce:ec:e4:e8:c0:
                    86:fc:7e:7e:66:ad:43:8a:ea:84:dd:6a:7c:64:55:
                    fa:66:d5:46:94:c1:33:9d:ac:36:01:67:06:8a:ac:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9C:85:65:A9:99:9C:68:9C:00:25:A8:29:3D:3B:C9:61:47:24:D7
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fb:e7:eb:84:94:f4:55:be:c4:4e:d9:53:db:38:01:17:75:
         23:90:ad:d3:30:4b:65:cd:ce:e1:33:51:c0:91:51:88:21:4a:
         e2:59:62:91:e1:70:b1:14:75:f4:6a:16:31:89:3b:44:5d:af:
         21:52:7d:f6:01:42:3c:27:e8:b0:3b:bf:f1:49:3e:46:a0:31:
         d1:2f:f1:71:19:93:5a:cd:b2:d8:48:4f:e5:b2:2a:20:6e:e7:
         c2:8d:06:84:1b:cc:ad:19:be:01:23:5d:cc:18:32:ba:ae:d1:
         d1:15:b8:ae:c8:41:07:5a:25:cc:cb:7c:57:1b:32:2d:b2:47:
         f1:0b:59:89:b7:5c:59:1b:0c:1a:65:3b:6b:40:22:24:e3:cc:
         a1:20:52:4d:8b:bb:24:c2:77:85:a1:ca:f6:7a:53:c7:fd:23:
         8a:1c:cd:42:cc:f7:0d:01:58:d9:49:04:1f:00:6a:22:9d:26:
         6c:7e:70:e7:0f:ba:e9:6f:7f:b1:87:ed:fd:b7:b3:d7:c0:a7:
         5c:d0:6a:d2:a6:da:95:44:63:f9:ee:25:d1:5f:92:2d:af:ee:
         f8:9f:af:f5:9c:1e:82:e0:f9:b0:bd:3c:49:08:d0:23:53:15:
         e8:69:3f:18:d0:5d:20:23:f6:60:a4:81:4f:c1:e7:2e:35:67:
         af:25:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:01:15 2025 by rpki-client