Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File:                     iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier:          j+wrDnIxx9bb1ZLkEueuO0poHVQApZa1zuPB8c92T4w=
Subject key identifier:   BE:77:85:35:B6:8C:16:A9:A8:D0:6F:AD:8E:09:A9:7C:67:93:E6:7A
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer:       /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial:       019849D39CE2569B783096E15F3063DF62A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 03:01:01 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:01 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:01 +0000
Files and hashes:         1: UoDvXAabOFEhN_Ur6iO6IlEoQNY.roa (hash: C2nYBT6rKIdGBRSYm5JfeMMp+MUUrWzb3x2zB3OMlgE=)
                          2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: +v/qeu664q2osBbuhpdzdjOirG1yxQS6C8TRIXsfI98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:9c:e2:56:9b:78:30:96:e1:5f:30:63:df:62:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
        Validity
            Not Before: Jul 27 03:01:01 2025 GMT
            Not After : Jul 28 03:01:01 2025 GMT
        Subject: CN=be778535b68c16a9a8d06fad8e09a97c6793e67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:12:a3:a2:41:b7:07:ce:82:1a:06:e0:87:
                    e0:f7:8a:d9:5f:d3:df:6f:10:51:e8:46:b9:e3:dc:
                    7a:33:24:3e:dd:14:7c:dc:61:16:04:c7:9b:9e:98:
                    e5:1d:29:05:54:eb:f5:0e:31:77:76:f0:e6:56:b9:
                    9c:30:42:75:7d:53:e4:d3:e1:c2:87:d4:42:85:57:
                    14:85:53:62:2c:78:bd:a3:42:5f:f1:e2:af:d8:23:
                    b8:f7:da:36:d1:56:eb:41:4c:dd:6c:cb:33:04:99:
                    d7:d8:56:45:4c:c7:0e:e5:95:fc:54:61:63:f0:ae:
                    01:a4:c8:94:e2:fe:9f:f9:2b:2e:cf:ae:32:f0:15:
                    44:df:68:e4:37:dc:76:76:db:17:94:02:bd:cc:51:
                    ec:6e:f5:7f:6a:80:b1:cf:38:1b:11:f8:a5:61:c1:
                    ed:18:74:99:c2:1c:49:08:f5:03:34:96:ae:60:ff:
                    2b:c6:6d:fd:7a:8b:ae:2d:8c:02:55:24:16:b3:ae:
                    08:53:44:af:53:e9:c7:b4:ea:94:9b:d0:93:64:45:
                    25:ce:26:24:59:74:30:75:e7:c5:32:91:76:f0:46:
                    56:ac:98:86:bf:51:15:fa:cf:a5:38:18:b3:be:54:
                    c2:0e:2a:c0:f9:20:0e:61:d0:21:9f:00:cd:01:0a:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:77:85:35:B6:8C:16:A9:A8:D0:6F:AD:8E:09:A9:7C:67:93:E6:7A
            X509v3 Authority Key Identifier:
                keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:68:89:11:e2:d6:61:f9:bc:3e:83:bc:8d:6c:4e:85:16:aa:
         ce:53:d8:f1:68:ea:1e:2c:6f:7e:0a:a7:7f:0c:95:d9:82:8c:
         0c:83:53:8c:ee:52:eb:19:36:53:7f:f7:64:f7:53:43:11:97:
         1f:e8:47:63:f6:b9:73:5c:15:3f:ac:4a:29:d9:29:ac:25:6a:
         db:b1:39:0d:a3:0d:b0:05:1f:6c:8d:62:25:0b:85:07:10:45:
         7c:ad:32:01:15:71:9f:f4:74:d4:74:83:b9:e4:e3:3e:42:56:
         20:1b:79:28:df:51:2d:34:4e:4e:09:e5:38:76:a6:01:0e:3e:
         f6:48:8e:77:05:72:15:fa:a4:ca:c8:d1:2b:57:ee:f7:ad:ef:
         57:ec:f2:7a:b6:5d:d1:3c:2c:c0:56:68:e4:c0:7a:a9:0d:4e:
         82:5b:2a:d1:4e:9c:4b:07:8b:fe:c8:c1:21:04:6e:83:0e:20:
         a1:37:ce:8c:1b:61:95:69:f3:bb:a9:06:31:5a:2c:f0:0a:e6:
         e2:3a:a9:78:28:f5:96:ea:62:44:ff:6e:df:40:11:59:4d:62:
         b1:65:e8:b0:02:22:70:56:c4:60:8f:6f:4f:c6:ca:cd:fd:65:
         20:05:13:d6:0f:a8:67:32:9b:4e:df:58:c6:53:a0:91:fa:55:
         94:e6:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:42:35 2025 by rpki-client