Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File:                     dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier:          O/RAKCpBjFzexr0quZNcq9tc+CWR1hhBUVX9//oZdkk=
Subject key identifier:   5F:1D:D1:CC:61:41:0C:AC:45:8E:99:74:64:A9:E4:82:7F:60:C5:2B
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer:       /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial:       019924438F644F72ADD79D835BDA92BE9245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 13:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 13:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 13:00:31 +0000
Files and hashes:         1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: b+/vMEQY6Jm+yYlWJwePg5eGQs4BI76hKnldgHycmuI=)
                          2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:43:8f:64:4f:72:ad:d7:9d:83:5b:da:92:be:92:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
        Validity
            Not Before: Sep  7 13:00:31 2025 GMT
            Not After : Sep  8 13:00:31 2025 GMT
        Subject: CN=5f1dd1cc61410cac458e997464a9e4827f60c52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:ac:16:13:6e:0e:ed:72:8e:d7:dc:5f:13:
                    48:20:95:b8:fe:fc:a4:e1:9d:9c:cb:3f:8e:80:9e:
                    97:ce:d5:d0:54:c6:63:af:19:29:ff:57:08:5e:02:
                    04:68:c3:22:87:77:1a:8e:ca:9d:5c:d2:47:c6:8f:
                    0e:7a:75:18:dc:bd:58:d6:38:9f:4a:fa:14:4f:34:
                    54:a3:25:b3:71:0c:58:77:df:4e:7d:84:75:29:bd:
                    7c:93:e9:1a:ae:dd:14:50:75:25:1c:01:84:29:0b:
                    2d:7f:0b:d0:7a:ce:90:bb:e4:74:7e:c7:41:4b:52:
                    c5:9a:12:bb:52:b8:3b:c9:14:eb:69:8b:97:46:d6:
                    6e:ab:70:21:4d:27:97:f9:1c:ee:53:57:9e:01:91:
                    16:2b:0b:b8:13:3f:19:bc:35:c4:30:cb:3a:2d:db:
                    a7:ca:0e:10:13:08:1d:de:78:1c:ad:40:26:ec:c0:
                    d0:23:2e:3b:22:8a:22:27:3b:a6:93:ab:92:eb:ca:
                    32:61:a3:e7:d5:a1:26:62:0f:be:fa:ce:3f:7b:75:
                    33:5c:60:b2:85:ea:df:62:be:1e:d8:cc:92:59:bc:
                    15:02:b1:d7:83:ae:1b:9c:52:cb:fb:2a:5a:ee:b2:
                    4c:a9:6e:b3:c1:d6:11:15:40:85:82:37:0b:d7:6f:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:D1:CC:61:41:0C:AC:45:8E:99:74:64:A9:E4:82:7F:60:C5:2B
            X509v3 Authority Key Identifier:
                keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:1b:e1:80:1c:b1:06:25:5a:4f:0f:89:f7:10:32:5f:b1:
         2a:1d:98:76:b6:9e:a2:66:e2:fc:1e:67:d7:0c:75:1c:23:35:
         49:4d:df:9e:78:99:d1:65:6f:f8:39:ea:e7:fe:f1:b4:76:01:
         49:7f:48:61:ed:20:ba:99:3b:17:4e:d5:fd:6d:e1:8c:22:01:
         37:33:b8:91:84:89:c7:83:59:ad:2a:ba:02:24:f4:00:0e:20:
         fb:f2:78:f1:00:6f:be:fe:10:5f:a3:ce:85:d5:2f:ce:16:44:
         62:80:93:96:37:57:15:4c:62:c3:0f:94:16:6e:c0:e8:31:d5:
         fc:ee:68:26:38:e6:35:08:4b:09:13:dc:c5:2f:f5:0a:c6:5d:
         ea:9c:ab:02:36:e5:ac:77:1e:a1:ae:c7:3d:09:dc:71:5a:da:
         3c:4b:c4:39:fd:67:16:06:77:55:e4:b6:23:08:bf:1c:f6:a3:
         6b:b2:5f:31:92:f9:bd:39:f6:41:74:f1:12:28:68:e0:b1:83:
         ed:3e:1f:a6:eb:79:fc:cb:59:e4:23:92:fd:5d:89:2d:23:ad:
         c7:e3:7d:9c:dc:49:97:c5:ea:1e:78:dc:21:2a:13:1b:86:39:
         78:2a:53:5b:7a:cd:87:3d:52:48:9c:3a:b5:c9:f1:17:05:d1:
         42:63:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:53 2025 by rpki-client