Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          nurwU9MCKNQVtJFFOviGzfzZtQGTU+9IxuXOmeYH/Is=
Subject key identifier:   B0:DB:46:DA:0A:B3:10:2B:AA:4A:9F:FF:77:15:20:59:7C:67:BE:8F
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       019916F6749763595FB8354D1B5882A3FEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          1675
Signing time:             Thu 04 Sep 2025 23:01:14 +0000
Manifest this update:     Thu 04 Sep 2025 23:01:14 +0000
Manifest next update:     Fri 05 Sep 2025 23:01:14 +0000
Files and hashes:         1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: g+MlgBol2FB7C5fsw5ogSDBjN+D+ldLl304OtSmL1jU=)
                          2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=)
                          3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=)
                          4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=)
                          5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 23:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f6:74:97:63:59:5f:b8:35:4d:1b:58:82:a3:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Sep  4 23:01:14 2025 GMT
            Not After : Sep  5 23:01:14 2025 GMT
        Subject: CN=b0db46da0ab3102baa4a9fff771520597c67be8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:df:cc:00:ea:e8:ac:b4:34:b7:ff:8f:ea:
                    2d:8b:5d:90:fb:18:d9:a5:be:80:79:62:3f:7a:5a:
                    07:71:40:b6:2a:77:9e:e2:55:da:df:2e:c6:fb:a7:
                    6a:1b:e5:b1:b4:e7:70:bf:39:cc:39:ed:50:9e:d1:
                    a6:15:c4:4b:d0:72:fa:50:e4:fc:8a:41:67:8a:93:
                    81:08:67:76:aa:83:12:0d:b3:b5:4b:67:af:5e:56:
                    7f:7a:39:ce:fd:d7:7e:81:bb:3d:f7:6f:34:2e:db:
                    a4:74:cd:f8:a8:9f:9b:8e:e4:41:4f:8e:bd:76:2f:
                    56:97:e3:71:6d:0b:b9:e4:b3:21:9f:99:48:96:79:
                    8e:2c:9b:8f:8e:83:06:8e:74:38:f2:75:f5:0d:77:
                    a4:a5:b9:71:71:87:23:5b:98:44:af:4c:32:a8:e9:
                    87:b2:77:1d:74:6d:fc:fc:ff:ce:35:a4:ad:34:23:
                    22:a0:c0:d2:97:2f:ed:88:1b:3e:d0:95:96:4e:f1:
                    69:3c:2b:02:3f:1c:28:b5:71:04:51:14:bd:74:2b:
                    68:92:1a:b6:da:10:f3:82:a9:f9:fa:8c:51:01:97:
                    44:1e:00:9b:b8:d7:d9:6a:02:34:15:ef:04:96:92:
                    53:c7:2f:95:8e:c6:33:00:a2:4a:f8:e6:42:49:12:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DB:46:DA:0A:B3:10:2B:AA:4A:9F:FF:77:15:20:59:7C:67:BE:8F
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e3:37:bf:4e:a2:4f:9a:55:cb:c0:97:3d:ea:d3:2e:f2:90:
         ff:da:ea:d2:4e:21:0c:5d:db:7e:d9:aa:15:92:a9:46:2f:6e:
         1f:93:00:d1:f7:77:e5:23:ce:32:27:18:91:d5:ac:b6:ee:0b:
         85:a3:0b:dd:f9:09:87:74:c7:48:fd:30:96:b6:99:57:a5:15:
         c0:91:c0:0c:cd:56:78:44:c3:a2:fe:61:52:66:4e:9e:c6:bf:
         65:22:72:e5:80:aa:67:6a:2e:2c:03:b6:68:93:9c:cd:e2:3e:
         90:5f:ed:64:67:c8:55:c8:60:60:93:52:84:48:89:7c:ba:76:
         38:9c:1c:10:73:6b:20:3f:f5:29:77:6e:98:c1:66:8d:bb:de:
         e5:52:45:89:5a:bd:af:61:4d:8a:e9:81:66:51:0b:92:ef:5f:
         d7:43:da:a6:a9:7f:60:95:99:60:e2:1e:23:53:67:f8:ef:3f:
         70:41:9a:c3:04:2b:aa:95:9a:d8:f1:6f:45:28:8f:02:bc:40:
         9f:37:86:3b:f6:17:d3:df:d0:aa:ee:fc:25:77:2f:d0:73:8e:
         77:ea:de:61:f7:bd:44:13:05:d8:87:cc:91:66:45:89:8f:a0:
         79:92:5e:6c:c8:28:e3:0f:44:15:f4:2a:d2:17:d5:27:1d:07:
         a3:99:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:27 2025 by rpki-client