Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          4/HBkg+MYISLKsLCSYxZ/HiHKw+ZVLet71fo0PZy8Fk=
Subject key identifier:   76:66:67:6A:E2:C9:C7:80:9D:D2:E6:78:7F:AC:EC:41:09:22:8C:2C
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       019849D339C6C6564698F34F94F7DA6ACF6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 03:00:36 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:36 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:36 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: rJ8Dn7GvI53D7D0tYU19pZcXMmSlNF1eY2nS9ZmR4wY=)
                          2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:39:c6:c6:56:46:98:f3:4f:94:f7:da:6a:cf:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Jul 27 03:00:36 2025 GMT
            Not After : Jul 28 03:00:36 2025 GMT
        Subject: CN=7666676ae2c9c7809dd2e6787facec4109228c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:1c:95:c1:d5:27:7b:49:33:61:d3:24:a0:
                    b3:98:2d:cc:c5:44:c2:84:44:12:31:7c:a5:ee:47:
                    99:60:a5:22:98:73:75:30:1f:f6:67:59:ab:5b:ae:
                    06:b5:7a:9a:d6:4c:f9:54:5a:c4:65:80:79:5e:68:
                    cc:8f:7c:c2:ef:4d:00:33:34:3d:40:80:db:f7:e2:
                    88:80:9e:b6:46:a5:62:20:5d:d5:b8:fc:92:7c:96:
                    20:02:09:42:b3:7b:91:42:fb:4e:06:48:5c:a0:fb:
                    c0:24:ac:ad:86:b9:64:27:eb:12:c6:2f:87:e1:20:
                    b7:e9:ea:03:81:c5:c9:20:10:4c:c8:c6:eb:75:e2:
                    a6:7d:4b:7a:a7:ef:fa:6c:20:be:d6:c0:ec:3f:af:
                    70:9b:01:43:84:38:02:a4:ec:6f:04:86:b5:83:b3:
                    b3:19:67:af:61:55:ec:29:d2:85:9f:f0:4e:92:8e:
                    c8:81:b5:83:df:a9:3f:ff:7b:05:6a:2c:28:4d:dc:
                    6d:ad:ac:8a:f5:57:27:0a:28:e9:0d:67:5c:85:22:
                    7e:d8:a2:0c:48:9c:0f:24:73:92:af:17:86:91:d2:
                    73:d3:2f:b4:5d:69:13:99:54:a0:6b:24:e5:a0:ac:
                    94:0b:42:b8:35:34:cd:3b:80:8c:aa:f8:41:88:8d:
                    a9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:67:6A:E2:C9:C7:80:9D:D2:E6:78:7F:AC:EC:41:09:22:8C:2C
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:23:d9:43:b5:ef:ca:cf:23:a0:72:86:4f:f5:50:a8:bf:
         0b:33:ad:11:f8:96:25:40:7b:9c:b2:a7:ba:ed:e1:66:cd:15:
         dc:7f:ca:8c:83:f5:6a:ad:2b:81:5b:d8:35:9b:1d:4d:19:b5:
         b7:dd:cd:f7:57:a9:ed:f8:8e:76:23:4e:cb:cd:c9:09:6f:a3:
         35:39:75:11:09:45:02:85:18:07:df:2e:93:0c:df:02:3a:20:
         98:95:31:7a:94:3e:18:2a:b0:97:e0:a9:d3:db:8d:86:af:94:
         45:f3:75:59:77:f9:ec:ed:78:52:8c:f6:f5:0b:c6:6a:07:92:
         02:dc:6f:17:96:3d:20:87:24:d5:ce:c5:67:64:17:cf:1b:a5:
         bc:dd:57:bd:50:a1:d4:80:ed:a2:10:61:97:ce:1a:ef:3d:0f:
         63:0f:e2:cf:73:15:24:47:a6:e2:3d:db:e2:09:8b:63:3e:c8:
         dc:8f:30:3c:99:d7:07:17:54:2a:88:d1:be:68:43:73:8d:46:
         8f:a3:10:b0:d6:c7:13:ae:67:52:5c:31:d1:c4:6c:67:4c:64:
         3c:3f:cb:5e:38:dc:3b:c7:03:59:ef:9d:22:15:e3:38:a5:cb:
         4f:8c:a6:50:34:7b:82:42:0c:76:07:97:65:1b:35:d3:8b:78:
         ea:65:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:16:58 2025 by rpki-client