Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          jh4JqVEiylgj5LEwy7c7LsNlzh9lrVyM7q/MEoJ96sQ=
Subject key identifier:   60:03:06:6B:2C:F8:BE:C3:8E:1B:DD:A4:65:46:A0:EB:31:E8:78:C9
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       01993A26E19FAD014341216846B73BCDEE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          1681
Signing time:             Thu 11 Sep 2025 19:00:50 +0000
Manifest this update:     Thu 11 Sep 2025 19:00:50 +0000
Manifest next update:     Fri 12 Sep 2025 19:00:50 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: V2jLI5iiRDtKV+moTzi2pq+YOZdL97EZu1CCEAGh/fc=)
                          2: lcvUmc0LhKo6ANY0ugW3mmP3-ik.roa (hash: +B49PEbia08zz2cV1E64Pu8VSfW83hABBkamjBdKnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 19:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3a:26:e1:9f:ad:01:43:41:21:68:46:b7:3b:cd:ee:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Sep 11 19:00:50 2025 GMT
            Not After : Sep 12 19:00:50 2025 GMT
        Subject: CN=6003066b2cf8bec38e1bdda46546a0eb31e878c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:7b:7c:62:aa:fd:66:f4:3a:7f:a4:40:49:
                    d6:d5:6d:b4:09:77:c0:c2:bc:c5:ee:1b:f8:79:3d:
                    e2:b2:27:59:7d:b8:10:cc:26:8e:24:f9:c3:87:42:
                    01:94:32:78:bb:2e:64:1c:11:8b:b6:bd:ec:6f:a8:
                    12:05:d0:d6:64:2e:88:80:fe:24:9b:5a:0e:66:be:
                    82:e4:7f:44:78:89:ee:6b:5f:c8:34:7a:26:3f:a7:
                    e1:ce:4c:99:77:29:8c:44:33:ed:d9:5f:ac:5b:10:
                    77:9e:8b:89:9c:75:46:59:0b:94:01:ed:06:cc:5b:
                    64:d7:48:33:dc:8e:22:2b:79:a5:42:e8:3b:9d:19:
                    5d:b9:cc:29:f4:4d:5b:a0:c9:0b:9f:f9:8d:d2:46:
                    c9:68:1a:ee:66:b8:a1:62:3f:61:82:58:e0:7e:c4:
                    c2:97:30:9c:db:56:f9:a5:80:91:23:a2:8b:11:ee:
                    7b:89:24:9c:0f:36:30:75:18:ea:79:b9:6e:00:21:
                    59:97:10:c3:09:2b:ab:35:49:ce:f9:3d:cd:10:c2:
                    53:35:66:50:68:1b:0e:e1:56:80:ef:89:ef:1c:3b:
                    8d:79:a3:25:97:79:24:be:07:13:3d:60:27:6f:c9:
                    e0:bd:fb:03:71:ca:72:f4:f8:e3:a3:d1:8a:37:75:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:03:06:6B:2C:F8:BE:C3:8E:1B:DD:A4:65:46:A0:EB:31:E8:78:C9
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:19:b8:14:f1:20:ea:9b:99:07:f0:68:27:20:3f:d6:73:ec:
         78:78:75:98:2d:b8:2e:0d:79:fc:6c:2c:c8:9b:4f:e5:de:2c:
         c8:03:ee:48:b4:b2:50:5e:ae:e4:51:2d:81:d8:e3:2f:ad:6e:
         70:02:89:36:c7:8e:c6:51:29:0f:16:3a:e6:bc:75:09:f6:34:
         cc:f9:c5:5e:c0:04:79:00:5d:63:d0:2e:e0:3a:df:fc:71:f9:
         a5:68:02:b6:ba:a1:c5:97:69:6e:b2:51:50:3c:23:d1:2d:f5:
         ce:f9:fe:e8:a3:a0:d0:be:2b:8e:4c:32:e0:93:16:e9:ad:b9:
         86:a1:3f:d7:79:0d:c6:1c:1b:a0:8d:a8:16:fc:24:93:8e:e4:
         21:22:ed:6c:32:0c:3c:8a:33:bc:05:80:6d:cb:06:ab:26:8f:
         e0:af:24:07:34:ad:93:b3:04:67:38:fa:67:70:2e:d8:1c:f5:
         e2:25:54:90:1f:d1:75:e8:7b:84:f5:3c:79:c8:4e:8b:a9:93:
         19:74:d2:c5:d3:42:d3:3e:88:16:64:fe:40:72:37:ac:dc:b5:
         98:78:3d:c2:fc:39:0c:e0:81:b2:dc:c4:c5:32:27:7f:c0:3a:
         4b:34:dd:e5:90:1f:b9:95:0f:9f:be:be:8d:e2:6e:40:b1:42:
         12:e6:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:34:31 2025 by rpki-client