Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File:                     u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier:          3Cd2VFCTDpfWtQfwvEn+3LE2t+T9xBOmo/zXYgYdhkg=
Subject key identifier:   04:50:58:9A:A2:84:2C:0C:13:BA:A9:78:33:1D:1E:EA:79:AD:8D:42
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer:       /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial:       0198496622D1F86A2EE9A6DAD698B32C2713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 01:01:27 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:27 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:27 +0000
Files and hashes:         1: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: k8az5Pg0UpF4EU+gB2NR7Cnxj9UCS5XP0jdAfyE8eiw=)
                          2: zqm8sqmxX0F8ohqYYWfQXp8iRJ4.roa (hash: dDiUuU6g/ottfUPpI3HwKpho2gKA2x4esWjcJownMww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:22:d1:f8:6a:2e:e9:a6:da:d6:98:b3:2c:27:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
        Validity
            Not Before: Jul 27 01:01:27 2025 GMT
            Not After : Jul 28 01:01:27 2025 GMT
        Subject: CN=0450589aa2842c0c13baa978331d1eea79ad8d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:15:94:19:35:67:d9:09:48:3f:26:75:13:
                    ab:dd:b4:65:58:c0:84:c9:47:46:5e:f9:52:0e:d7:
                    e1:c6:b8:f7:65:e3:64:ab:6b:68:9f:7c:ae:7a:bf:
                    c7:5f:0a:af:40:bd:91:dc:ad:08:c8:20:e6:ea:c9:
                    87:fa:97:e0:c9:de:cd:84:8b:85:ba:69:2d:0a:e0:
                    4c:fb:9a:26:0d:2a:5c:37:f0:2a:1c:a0:98:6c:da:
                    d9:ae:90:0a:73:b8:a8:5b:82:ac:eb:26:2a:5e:bc:
                    e2:f9:20:65:1f:65:cb:6a:5e:78:4e:c0:9a:08:05:
                    dc:6a:5a:b3:d3:2e:87:7d:5c:12:8e:7c:fa:45:6c:
                    ed:53:5b:c0:7f:6b:3b:7b:c2:89:63:42:9e:26:fb:
                    50:5f:0c:95:14:c8:f9:7d:b3:1e:1a:5d:54:51:f1:
                    2b:8c:38:9b:73:85:56:20:e2:de:b2:90:9d:99:30:
                    16:d3:5c:a2:f0:1c:15:d1:67:0f:f9:65:52:f4:3a:
                    11:5e:9d:14:92:8b:58:34:ca:47:fe:7f:d7:98:0b:
                    dc:2d:ae:bd:04:a5:a1:cd:c5:b3:8e:e5:22:2d:42:
                    55:f1:df:77:61:89:15:03:8a:1f:bb:94:b1:6a:12:
                    86:0b:42:43:aa:ad:42:6f:86:c5:2c:f0:cc:96:9d:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:58:9A:A2:84:2C:0C:13:BA:A9:78:33:1D:1E:EA:79:AD:8D:42
            X509v3 Authority Key Identifier:
                keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b9:3b:91:50:df:68:de:0d:d0:f8:5f:fe:7d:d5:6c:fe:7b:
         38:fc:ab:26:d5:7c:df:e0:14:aa:40:a6:dd:64:73:35:1d:e2:
         69:1e:6f:c9:1f:52:fc:9a:af:49:53:4e:40:b7:af:6b:ce:48:
         a3:8e:70:b7:24:44:f1:e2:c6:2e:77:6d:95:a3:bb:07:e1:db:
         1a:84:85:16:71:62:50:9a:11:40:b9:df:2b:73:71:97:68:88:
         aa:d2:ac:b4:96:f5:e4:11:27:e8:9b:f0:ea:ce:1d:da:14:e2:
         95:d0:3c:86:7d:0f:93:3c:6d:cb:93:38:b8:ea:96:f6:73:fa:
         50:28:9d:b2:66:d8:25:a8:27:1f:97:d9:bb:c9:d8:25:3d:fd:
         5b:96:67:31:92:33:3e:ba:6f:75:6f:25:b0:29:ad:02:1a:49:
         7b:d0:33:b3:0b:b6:4e:97:e7:ef:44:a5:2d:1e:31:af:61:d6:
         6d:b7:b4:7f:fd:04:ef:ec:d1:33:d0:57:09:d7:75:3b:38:45:
         dd:53:dd:65:01:34:c6:1f:d2:1e:79:49:e2:5f:ae:aa:07:77:
         5d:ff:11:41:db:7a:fe:d9:01:0e:52:7a:31:39:34:f4:61:73:
         53:e5:3f:0a:45:61:00:a9:d1:2d:03:e2:ee:f4:6e:92:15:5a:
         21:17:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:34:59 2025 by rpki-client