Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File:                     dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier:          T4w6nugtBVvfijFemWzGwnjjjVJVNwuuAx2OdVdBIwI=
Subject key identifier:   5D:08:12:D9:36:27:F1:75:A5:F4:39:68:A8:52:1D:BA:2C:A4:71:54
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer:       /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial:       019923316D2983453683A4B746A734D6AB29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 08:01:05 +0000
Manifest this update:     Sun 07 Sep 2025 08:01:05 +0000
Manifest next update:     Mon 08 Sep 2025 08:01:05 +0000
Files and hashes:         1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=)
                          2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: CxIbcOkOPr4YI7AFkF9UmsKz+jNIlns8k/fW6kY1l2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:6d:29:83:45:36:83:a4:b7:46:a7:34:d6:ab:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
        Validity
            Not Before: Sep  7 08:01:05 2025 GMT
            Not After : Sep  8 08:01:05 2025 GMT
        Subject: CN=5d0812d93627f175a5f43968a8521dba2ca47154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:be:76:ce:8e:87:f7:28:92:62:9a:d0:50:
                    6b:78:73:c1:90:84:8f:e0:49:7a:71:f5:37:fd:5c:
                    f4:8c:87:8a:65:08:33:a6:60:c7:f1:78:58:5e:56:
                    a8:65:8b:07:f2:28:0b:7b:2b:55:69:f5:69:22:94:
                    ea:4a:53:78:b5:3c:29:0f:2d:14:6a:15:81:44:df:
                    29:de:07:30:5b:65:db:ba:d5:70:30:f3:6f:f4:41:
                    f0:e7:3d:e3:53:ba:be:ea:da:f1:8c:96:0c:03:61:
                    93:6c:d4:15:45:6f:bb:6b:73:47:29:2f:e3:95:03:
                    c3:47:c2:7d:99:ca:79:e9:e8:da:2f:80:f5:26:96:
                    28:23:08:5d:32:cd:88:16:fe:36:8c:7f:90:7f:ca:
                    d7:96:b2:8e:00:e1:e7:e0:2d:21:52:1a:f1:06:9a:
                    08:66:3b:9c:be:9e:e0:32:1a:e1:3a:d6:f6:d7:7e:
                    c4:52:f0:d1:ea:43:62:70:b9:cf:a5:ff:0b:fb:74:
                    95:cf:d1:c5:93:c2:a3:1e:17:77:c8:a0:a1:29:71:
                    7c:77:b8:17:d2:42:7a:14:85:61:59:6a:a5:a4:e9:
                    e1:99:b1:0e:3e:cc:34:99:dd:c2:32:7f:33:e7:a7:
                    e6:94:e8:44:7f:ed:52:82:f3:b1:4e:82:1f:b4:50:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:08:12:D9:36:27:F1:75:A5:F4:39:68:A8:52:1D:BA:2C:A4:71:54
            X509v3 Authority Key Identifier:
                keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:95:1e:3d:5a:7c:d7:a8:f9:93:65:07:f1:01:f2:fe:ca:60:
         16:c6:52:7f:a7:ff:a8:9e:fc:00:7b:08:a8:02:1f:24:8c:d1:
         52:41:3a:33:cd:f4:a5:ab:cb:3f:aa:a0:8e:cd:20:b5:e6:cc:
         39:0d:9d:3f:bc:b2:2d:44:fa:b8:c3:7e:c7:34:e8:a7:5c:39:
         f7:c9:25:8d:9c:d2:41:d1:9d:d8:bd:8c:97:22:27:69:2b:b0:
         7b:ae:06:cf:7c:1e:83:78:14:2f:32:8f:3d:49:bd:19:08:99:
         16:ab:60:e8:06:e9:a5:18:71:ec:be:36:b3:38:1b:fa:62:5a:
         29:e1:3b:9c:65:3e:2b:c0:04:05:1a:48:70:9f:1b:63:99:46:
         55:38:66:b2:6c:b6:44:e3:94:42:c7:4c:35:0c:54:a3:23:83:
         ff:e1:53:1c:33:97:e4:c3:a4:52:a6:b6:4a:1d:3d:e0:db:7a:
         05:c9:fd:bc:1c:56:d1:fc:01:76:ea:2b:5b:82:e6:46:74:a6:
         0b:7a:27:11:65:0b:43:66:2e:5e:61:cf:e8:23:a3:53:2f:70:
         21:e6:12:e7:6e:99:77:40:89:d6:5c:31:f6:2e:5e:da:66:21:
         ec:c0:d4:ac:f7:6d:da:bf:08:46:7f:fb:9d:c8:cf:2b:19:6d:
         89:2b:af:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:31 2025 by rpki-client