Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File:                     Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier:          KnzDZYK0EmNq5ZoiGqPkV6v8V0k8zqAur3oGgooaQks=
Subject key identifier:   37:A7:B1:F2:0D:54:05:9F:70:8A:58:5E:CC:55:3F:B2:A1:33:4B:C4
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer:       /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial:       01984889503C9E5CCFDCA2B522B864749F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 21:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:15 +0000
Files and hashes:         1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: 0mQC5kGXmJHjjDgAv6m1KMeZI1iziRoUnfnf6rm1g3Y=)
                          2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:50:3c:9e:5c:cf:dc:a2:b5:22:b8:64:74:9f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
        Validity
            Not Before: Jul 26 21:00:15 2025 GMT
            Not After : Jul 27 21:00:15 2025 GMT
        Subject: CN=37a7b1f20d54059f708a585ecc553fb2a1334bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:f9:98:a1:d4:a3:87:b4:1f:8a:61:1c:2d:
                    71:03:87:98:28:09:de:38:7a:79:d3:1b:15:31:9e:
                    f8:10:79:90:b8:14:db:ed:15:2d:8d:bf:9a:d3:49:
                    37:d2:2e:a1:fb:bf:80:2e:ad:2f:7b:6e:ff:c7:d8:
                    d1:61:e0:16:39:b4:24:dc:d4:17:2e:16:15:29:2a:
                    a6:c4:9a:5c:86:a6:4b:20:7a:74:0e:00:23:e5:90:
                    56:9f:6f:e9:88:50:37:5a:4f:1c:ff:60:69:b8:e3:
                    d4:39:fe:7e:5d:8c:76:76:f3:dd:af:38:67:73:a2:
                    1e:d1:1f:e8:7b:66:73:fe:9e:35:aa:47:dc:cd:14:
                    3a:a8:f6:0c:dc:06:cb:d7:9f:1e:2e:04:ac:49:ef:
                    9d:09:61:14:7e:8e:83:01:f8:b0:7b:b2:8b:32:8f:
                    42:bb:c0:9d:38:da:d8:53:68:fb:fc:30:05:89:b9:
                    8b:46:97:3c:75:b1:86:4f:84:ad:c0:db:e1:bd:c1:
                    56:e1:34:1d:f6:0f:6b:18:6d:8e:e9:4e:1c:f6:76:
                    2e:47:47:e7:13:e5:cc:98:ce:46:2f:47:2a:f5:d7:
                    c1:1d:3f:20:d9:21:dc:64:90:12:14:1d:b3:8a:97:
                    47:15:af:81:7e:31:dd:30:31:b9:2e:cb:2f:1f:a7:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A7:B1:F2:0D:54:05:9F:70:8A:58:5E:CC:55:3F:B2:A1:33:4B:C4
            X509v3 Authority Key Identifier:
                keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:10:76:1e:29:30:74:f5:c8:ef:c4:7e:c0:6e:a5:b4:85:95:
         89:85:a8:40:16:7b:08:bd:92:78:e1:8e:6d:51:2b:a0:3b:63:
         6c:57:42:65:a3:31:18:46:be:47:ce:32:77:88:8a:bb:a6:48:
         ff:8d:55:ce:1d:cc:d8:6c:a6:72:f3:17:39:b4:f4:16:fd:03:
         40:74:2c:59:fa:e4:18:06:33:51:3a:65:a5:63:9b:50:b1:ac:
         dc:3d:75:8d:4a:42:55:9e:8e:cc:3a:9c:02:81:e0:4d:be:d8:
         c8:0a:4c:b2:08:8a:ca:a1:2f:6e:d1:e9:9d:7d:5f:ae:7f:32:
         31:36:c4:ac:8f:bd:33:2f:a8:b5:b3:15:64:b7:36:0b:42:fc:
         30:a6:40:5f:14:51:ef:68:63:2f:83:7a:80:13:ce:a0:92:be:
         3e:88:8c:24:67:bd:60:a3:38:56:82:d4:51:2d:03:e3:7d:11:
         96:89:35:1c:38:d4:1a:bb:02:8f:79:cb:6e:89:14:b1:0f:43:
         ea:3a:b8:cd:27:a6:9c:a3:25:a8:3f:83:a5:7f:10:7d:21:c3:
         f5:81:2b:56:20:38:f2:cf:3a:18:95:91:d5:e8:8c:81:d6:68:
         26:c2:ee:17:0a:5b:68:13:6c:85:02:d4:b2:a7:f6:5d:26:7f:
         f2:ab:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:42:55 2025 by rpki-client