Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File:                     MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier:          HQqMunYR4szgQ42VJ4OzP+gupqSugHvZxxkbiXO8su4=
Subject key identifier:   02:AB:66:1E:BB:5E:A5:7D:E8:62:0A:32:46:E7:DE:D7:64:62:71:4E
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer:       /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial:       019848F731AA58EEAB6B6961330E652C4C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 23:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:16 +0000
Files and hashes:         1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: MOennjFtLPvad+w6fwuppae2+Q6AjmYL8CwF370wngo=)
                          2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
                          3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
                          4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:31:aa:58:ee:ab:6b:69:61:33:0e:65:2c:4c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
        Validity
            Not Before: Jul 26 23:00:16 2025 GMT
            Not After : Jul 27 23:00:16 2025 GMT
        Subject: CN=02ab661ebb5ea57de8620a3246e7ded76462714e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c4:74:55:10:17:63:af:b6:c3:fb:fa:a2:79:
                    23:99:08:71:a4:a8:eb:e2:07:db:5a:85:37:99:13:
                    90:cf:f0:27:23:22:23:ca:f2:c9:7b:22:78:cd:07:
                    81:8f:56:cf:ea:96:9c:73:72:4a:74:7e:bb:73:1a:
                    8d:de:c9:79:30:27:d4:fc:c0:7c:b2:e9:f0:45:0b:
                    95:f1:17:6a:0e:44:71:78:69:64:56:67:64:07:f8:
                    ba:2d:32:0b:6e:d9:9e:4a:e8:87:39:9b:0e:34:ce:
                    7d:de:c0:76:94:76:12:bc:dc:9c:36:29:0e:9a:d6:
                    be:3e:0c:42:f4:c9:54:b2:6c:ad:2b:29:67:a5:6c:
                    58:d1:97:23:fa:3e:0c:73:4c:52:34:6c:df:0e:4d:
                    26:4b:3c:c5:c9:84:78:be:0b:52:4e:aa:ad:2b:2c:
                    c3:91:6d:3e:cb:00:61:84:87:9a:df:e7:a4:3f:a8:
                    04:c3:44:fc:cb:aa:a1:40:a3:b7:d9:f8:74:44:f5:
                    fa:0e:6b:5a:ac:5c:93:ab:96:f4:dc:02:eb:67:ba:
                    b6:81:61:12:73:c3:02:97:d2:91:72:b1:4b:0d:a0:
                    53:e1:a1:16:e3:56:53:b6:16:51:b0:14:71:ae:23:
                    ca:11:d0:e1:95:b5:54:00:79:48:7f:51:76:13:d8:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:66:1E:BB:5E:A5:7D:E8:62:0A:32:46:E7:DE:D7:64:62:71:4E
            X509v3 Authority Key Identifier:
                keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ec:48:c8:e7:b7:41:7e:cb:32:6c:ed:f3:83:e0:6d:b5:1d:
         84:95:11:87:bb:12:f0:5b:5b:95:9a:b9:90:f7:ac:d3:99:2b:
         44:d5:77:b9:a7:f1:03:6d:be:c1:07:b1:c9:e6:14:49:bc:95:
         c7:5f:8a:48:e5:64:00:bf:38:35:eb:c9:15:1f:7a:88:a6:42:
         2e:8d:f5:5a:3b:7c:07:eb:21:01:33:5a:f3:57:93:28:b3:7c:
         ba:eb:0d:0e:ed:3e:96:e4:de:e9:6a:dc:49:ec:7c:97:fc:96:
         b5:41:0d:bf:af:75:b8:bd:ee:d9:34:f4:98:17:30:02:84:3f:
         b8:cc:72:0e:f6:d6:70:45:ad:b6:ae:08:22:4f:88:cf:0a:ae:
         1a:ff:46:07:a3:75:f6:30:7e:98:d4:ab:cb:e5:5c:f3:f8:29:
         0d:d1:dd:c4:0f:58:8e:78:e5:ee:8c:d1:16:26:34:4c:35:57:
         bc:84:66:aa:ca:d1:79:81:6f:11:96:3f:27:ce:05:e0:f3:76:
         23:b0:21:56:07:63:17:66:b8:fb:4c:80:db:d6:b9:9c:c5:86:
         8d:e0:0a:6c:bc:94:05:8b:a3:0d:66:90:bb:50:5e:a3:49:95:
         f5:74:3b:1b:8f:7d:89:f6:db:79:53:b7:d4:2b:05:8c:2a:8a:
         bb:37:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:41:10 2025 by rpki-client