Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          whWcJMKEmsdScp8rx9eKWbnQIXol4zQsrhYRWTtoqEM=
Subject key identifier:   8C:81:2E:60:E0:7E:A8:BB:5B:0C:F4:D5:BD:62:30:6A:01:65:6F:A3
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       01984A412F5721303239BDA25DB7A6FA6643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 05:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:42 +0000
Files and hashes:         1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: S53hmLAJnzfPRrp5L+b5yHuJogpEyX8C2eKnF3GFEhg=)
                          3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=)
                          4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:2f:57:21:30:32:39:bd:a2:5d:b7:a6:fa:66:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Jul 27 05:00:42 2025 GMT
            Not After : Jul 28 05:00:42 2025 GMT
        Subject: CN=8c812e60e07ea8bb5b0cf4d5bd62306a01656fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:65:cc:9c:c3:2b:1d:12:77:8b:07:1c:c5:
                    2f:f8:f5:8d:ac:d7:d9:f5:e8:7d:50:36:94:1b:23:
                    98:90:61:71:67:7f:a2:cb:55:10:8d:30:f5:37:19:
                    4d:47:19:bb:58:d5:4b:ee:da:df:61:ac:ee:ea:b5:
                    49:65:a3:7a:d0:54:7a:0e:04:ea:10:95:e1:00:cb:
                    b3:5a:ce:20:54:2c:5d:aa:61:ec:92:be:9d:89:77:
                    28:14:8b:1d:77:f4:16:d2:31:e5:6f:c4:54:de:97:
                    4f:ab:42:9b:d7:bd:32:23:4d:c9:6f:0d:ee:f6:b0:
                    96:7a:e0:9b:4d:34:91:1b:0e:06:c1:b2:61:74:86:
                    9e:aa:c4:f3:14:25:99:6e:ef:1c:f1:95:43:3c:37:
                    a8:76:a6:b5:90:e3:c0:61:c7:83:19:a6:a1:e4:85:
                    c2:62:e8:a1:4d:54:0f:de:c3:0c:c9:e9:57:18:59:
                    22:cc:87:97:20:cf:d1:e2:e6:6a:5f:f9:34:1d:d9:
                    34:e0:fc:b2:70:13:8e:6e:d2:3c:23:db:6a:5d:af:
                    68:22:61:f0:70:e4:6b:68:01:06:d2:fe:0d:32:98:
                    7b:2d:c7:27:b5:f8:2b:0b:13:23:bb:fa:1e:58:89:
                    dd:d8:52:76:0a:0d:fc:c7:5a:b4:ee:fb:e0:7b:94:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:81:2E:60:E0:7E:A8:BB:5B:0C:F4:D5:BD:62:30:6A:01:65:6F:A3
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:ca:5a:fb:70:ee:7c:56:dc:68:ac:73:58:eb:1b:5a:7d:
         f8:94:f2:b8:b8:dc:05:5c:c4:c8:27:ad:e8:3d:7d:13:2e:37:
         b4:a9:96:c3:a1:b2:4e:a3:1b:91:25:ad:a3:4b:85:94:e8:66:
         73:fa:8d:e3:c5:18:4b:dc:89:24:cd:b5:ed:cf:05:f9:78:41:
         09:98:7a:46:1b:c0:93:74:d1:d7:64:14:1b:41:94:0c:b7:6c:
         a3:61:96:05:07:97:7b:aa:e0:93:cb:53:7c:fe:b5:6c:ef:69:
         15:31:51:3b:58:7e:3f:61:b6:e1:e4:5c:07:a0:5c:3b:1f:cd:
         76:60:3a:a5:43:7f:f5:28:15:7a:72:0e:cc:e7:18:d3:95:9d:
         bf:cd:a2:ec:b0:4e:5e:19:17:63:8e:d2:ef:5d:d3:21:f2:4b:
         8d:60:10:9d:f6:c3:da:f4:7d:27:da:fc:5f:b9:cf:19:f4:d6:
         c0:f9:15:ad:53:01:44:7e:16:42:de:e0:b7:01:94:b6:bc:c6:
         2b:96:6d:d8:59:99:5d:f5:1d:99:db:c4:f8:09:33:75:b4:18:
         a3:84:ab:52:12:d0:5e:27:d9:4a:b3:9f:54:90:a3:85:2a:6f:
         11:9d:7b:e0:b6:73:75:b3:99:b5:b9:f9:0d:43:04:d9:ac:57:
         b8:b5:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:43:37 2025 by rpki-client