Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File:                     B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier:          49ByA/X5MQZ78/+rtcFMBLz+KdhnGGTPvX5Zot9kY9s=
Subject key identifier:   36:6E:AF:10:EE:E4:05:1E:86:61:F1:75:74:90:86:7C:A5:47:45:AE
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       0198553261122F51CEBC52468A5209506D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number:          1606
Signing time:             Tue 29 Jul 2025 08:00:21 +0000
Manifest this update:     Tue 29 Jul 2025 08:00:21 +0000
Manifest next update:     Wed 30 Jul 2025 08:00:21 +0000
Files and hashes:         1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
                          2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: PYOZAgmx4cB5r0qrckoSOXIi/lsd8m6RQfbEsmm2cJo=)
                          3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
                          4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:55:32:61:12:2f:51:ce:bc:52:46:8a:52:09:50:6d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Jul 29 08:00:21 2025 GMT
            Not After : Jul 30 08:00:21 2025 GMT
        Subject: CN=366eaf10eee4051e8661f1757490867ca54745ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:66:7a:48:f1:f9:18:fe:51:c1:74:66:ed:
                    47:41:76:b4:97:93:67:90:fb:4a:5c:c3:e0:33:7b:
                    ff:45:07:64:dc:89:5b:8f:b1:29:64:fe:6f:91:40:
                    0d:69:6d:6a:7f:a9:19:e5:35:44:b3:37:ff:cf:66:
                    80:12:4a:ec:4b:96:29:3c:87:48:6a:d3:ad:2e:9d:
                    7a:9d:ef:80:58:4c:d2:9e:72:6f:00:fe:16:aa:7f:
                    74:26:8c:e9:1a:09:79:13:fe:ba:79:fb:08:ae:97:
                    61:ea:2a:22:c1:0d:f7:4f:9b:26:80:b4:a4:87:c7:
                    92:2c:c2:cd:65:f3:f5:fc:39:95:03:ef:6f:e6:77:
                    1b:a6:00:29:a5:41:ac:63:18:9e:22:c1:37:0d:ae:
                    b6:d5:0e:8c:e1:4a:71:60:05:ef:02:97:ee:5e:8a:
                    74:de:cf:48:f2:38:f4:87:1d:8d:be:aa:4e:3c:42:
                    05:f1:0e:0f:ef:f4:62:9b:f3:d8:7b:26:2e:f2:51:
                    53:97:44:50:8f:47:e9:2e:07:8e:89:9f:80:fa:fe:
                    5e:5e:5b:ce:f3:95:aa:4d:f4:16:84:eb:af:55:6e:
                    f0:95:97:47:af:b7:93:9f:12:0f:86:b2:51:b0:b4:
                    30:2b:3c:7f:1e:c8:55:ea:87:be:47:94:14:86:db:
                    e0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:AF:10:EE:E4:05:1E:86:61:F1:75:74:90:86:7C:A5:47:45:AE
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:e2:c2:71:93:3f:1d:4f:2c:53:9b:7d:e3:07:c6:06:23:
         f5:54:5a:61:13:a9:db:72:7e:04:5e:7d:d8:e5:80:4f:20:18:
         ac:87:fb:e7:d0:6a:3b:23:c9:75:37:36:91:ea:93:45:a6:58:
         75:92:df:56:5e:dc:24:19:6f:12:86:13:42:dd:65:e7:e1:cf:
         bf:6f:b2:69:18:eb:36:7a:38:c4:3e:a4:7b:e5:a4:9e:05:2f:
         07:c1:bf:f8:4b:07:fd:2e:bc:66:e1:c0:05:be:ab:20:7a:4d:
         6b:f0:35:c4:b6:f9:28:c3:8b:7d:bf:60:bc:19:60:77:8a:c7:
         bf:90:bf:50:8b:54:24:f2:f5:7c:c7:16:81:ac:98:ec:19:c2:
         24:23:af:31:15:55:51:99:36:86:63:59:56:5f:01:61:3c:77:
         8b:31:8f:30:e3:7a:47:12:e3:1d:7f:72:00:f1:e7:3e:c5:dd:
         39:c9:a7:d9:f0:92:69:59:80:06:f5:18:9b:b8:b3:72:09:c7:
         df:bb:32:65:b4:48:9b:10:a2:1c:66:1d:6f:8a:e0:3f:7f:bc:
         1c:7c:7d:e2:56:e3:d2:96:d7:9b:2b:29:ce:52:91:8d:f5:00:
         86:9a:90:9b:54:b6:00:3e:6e:70:ff:08:2e:b1:8a:62:75:fa:
         fb:74:26:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:09:47 2025 by rpki-client