Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          Eu0S3U3M+vm4BaQ8B4E0JBWeiuun7AcjVS9zPaBIxXE=
Subject key identifier:   50:D1:53:FD:B0:26:A6:18:37:63:85:1E:56:3D:63:6D:F0:38:56:A2
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       01983FF44EA07D6F86C6B0469A1B967A5CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          1613
Signing time:             Fri 25 Jul 2025 05:00:32 +0000
Manifest this update:     Fri 25 Jul 2025 05:00:32 +0000
Manifest next update:     Sat 26 Jul 2025 05:00:32 +0000
Files and hashes:         1: Co2reX9WjBlmenpbYdQoA_FU6Yg.roa (hash: q2QsExP+FdyReITqdolcGkEpneACU1Mny9QFEjumzVA=)
                          2: Du67LuSR--FTZRs33JDJ1Yh_Yqc.roa (hash: Uq3e+EYwHhZpPWXp5ry3+fcpGqjbo+HY9H6K+cMEsOA=)
                          3: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: 6IuijEQM3/qxnwi9QXPlPzHU2Ldv+bBUkuuRyU+/ymk=)
                          4: KKoRgXzLVxX8M0ge-PzEa-7tJn8.roa (hash: ZB5HW8dKxDtda/UB5dE3fN6v3EtscnOQiCRsaguyfYs=)
                          5: vPm_UYg8wre_NolD1hu0Cx9JGzE.roa (hash: Rws+EnLA4ahX/aasRkr6vitQH/K/D1I71mx2gpcNmkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:f4:4e:a0:7d:6f:86:c6:b0:46:9a:1b:96:7a:5c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jul 25 05:00:32 2025 GMT
            Not After : Jul 26 05:00:32 2025 GMT
        Subject: CN=50d153fdb026a6183763851e563d636df03856a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:3b:1d:3a:8d:14:4c:a1:9b:1e:94:ab:ff:
                    2d:c5:09:2a:0b:24:f4:b0:44:bb:2a:45:65:c7:f4:
                    d1:f8:3a:7d:fa:b8:37:32:ce:19:b0:c1:55:02:66:
                    a1:0b:04:4c:d5:53:1f:0b:ce:d7:70:67:50:ca:55:
                    48:43:2d:cb:a4:6c:d2:8a:8c:79:47:e1:50:87:f5:
                    3f:32:00:8d:6b:80:0e:38:bf:5d:74:1e:3f:39:c3:
                    f0:f2:35:30:17:cb:48:88:95:29:2e:0d:a3:4c:c6:
                    37:ca:b6:f7:5e:28:87:96:11:cc:d6:99:63:ca:7f:
                    7e:41:ae:32:da:5f:bf:01:c2:18:5d:47:b8:3d:17:
                    39:ec:3b:ed:ad:0a:7a:d7:83:31:59:18:83:16:15:
                    87:a0:c1:1a:20:0f:69:21:dc:bd:0f:3a:97:ea:57:
                    66:73:6b:89:44:51:79:10:cc:57:90:ac:0c:c5:b8:
                    a1:31:fb:83:32:c3:8e:a1:6d:d7:3b:c9:2e:b6:bb:
                    57:0e:f5:59:6a:a5:76:0a:5d:14:73:ca:f4:cb:09:
                    65:ac:cd:52:c2:07:25:90:37:71:92:f9:8f:87:df:
                    56:b3:07:92:c6:1e:67:c4:01:1d:cc:08:4f:fb:1a:
                    a0:cc:0d:c1:68:e0:e6:ca:b4:27:29:90:82:aa:83:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D1:53:FD:B0:26:A6:18:37:63:85:1E:56:3D:63:6D:F0:38:56:A2
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ed:ae:39:54:28:f6:25:50:e0:82:94:24:28:c6:d5:0d:65:
         b8:e2:c5:06:14:86:26:11:fe:12:93:81:fc:73:0e:60:9a:43:
         46:a6:6d:96:aa:e4:c7:8c:0d:c3:a1:d0:28:9d:5f:42:d9:7f:
         50:43:ab:9f:f8:86:de:11:ce:c5:df:aa:8f:fb:6f:5a:36:d0:
         28:e2:f6:a7:3c:c6:45:54:da:c1:68:7c:a5:2f:58:46:8b:6a:
         6e:5a:89:ea:71:44:e0:01:65:97:33:8c:ec:9e:d9:9e:98:4f:
         1f:3d:32:82:3c:03:75:3b:66:9f:4d:15:d5:bb:98:6d:d3:ba:
         0f:ee:41:1e:b5:3a:e8:ae:2b:98:dc:5b:f4:4f:00:93:cc:9a:
         b0:32:a5:b8:6d:97:0d:3d:da:d4:41:b9:01:fb:32:96:aa:d6:
         8f:6e:2e:8e:9c:a9:b6:53:2b:c1:c5:29:2a:26:42:9d:d3:31:
         f4:99:ae:f2:ca:52:df:bf:67:6c:51:e8:6d:8e:fc:48:87:3a:
         f5:ed:b2:21:cb:80:e9:f5:0a:5c:a8:a6:a5:d3:48:ff:2c:3c:
         9f:bd:ff:38:32:f1:8d:1e:b0:27:16:e3:53:e3:25:31:5a:d6:
         41:cc:4a:8e:3c:b0:60:8d:99:10:ba:84:97:3c:2a:9f:31:63:
         c3:bb:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 14:39:08 2025 by rpki-client