Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          +7VeQHiGceaLVFlP2is536Fw2MozESrR6gzRwVYtVVc=
Subject key identifier:   3C:E8:76:05:CF:59:A2:92:58:53:23:E6:32:71:D0:18:71:F9:3F:1F
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       01984BF85FA14A0F87613441C9BA5C3D4585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          1607
Signing time:             Sun 27 Jul 2025 13:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 13:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 13:00:25 +0000
Files and hashes:         1: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          2: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          3: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          4: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: l1CrzZSOoOqLk50MbU5EJ8DihY5V0aIIMkEnNHY5ej8=)
                          5: _cs3H8q9ZlFgGKRLwiQ4Xtf8xNU.roa (hash: zP2/mCjB82eimNPlv5UC3nRyIxCuHe80Zw3eVdffH6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:f8:5f:a1:4a:0f:87:61:34:41:c9:ba:5c:3d:45:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Jul 27 13:00:25 2025 GMT
            Not After : Jul 28 13:00:25 2025 GMT
        Subject: CN=3ce87605cf59a292585323e63271d01871f93f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:eb:d9:81:59:4a:a6:81:5c:1f:e0:89:d0:
                    b8:f7:83:30:22:87:e0:89:83:0a:ad:ea:43:56:c3:
                    d0:41:4a:52:02:ac:c9:8e:f4:5d:f0:d3:f1:99:7d:
                    21:5c:89:ea:3c:4b:6f:2c:e3:28:a7:9c:f8:de:74:
                    89:28:b3:30:63:3d:76:48:94:21:a0:cb:07:d2:0b:
                    44:eb:da:0b:05:67:74:4e:b1:97:82:03:cf:a7:b4:
                    5f:14:3e:65:5f:16:6d:5f:ba:23:49:75:da:35:05:
                    61:d3:53:bc:c5:a6:31:6a:b1:5a:2a:25:b7:f5:51:
                    67:45:39:c8:ec:dc:41:62:66:07:9c:49:71:4f:ad:
                    b0:b0:38:a2:2c:65:a0:ef:ff:e5:ce:3e:83:3c:14:
                    18:1f:5c:ec:d3:47:3f:4a:ee:0a:5c:16:cd:93:b7:
                    e4:72:87:9e:2c:a8:4c:f2:4c:89:71:70:a7:51:69:
                    6f:8c:e5:f3:b9:5b:d4:a4:12:16:85:e2:ea:93:85:
                    3f:4d:57:3c:be:16:01:dc:3a:15:80:ac:89:90:be:
                    de:66:7b:34:55:9f:7a:06:b8:3d:f1:b5:77:8a:01:
                    dc:07:60:89:40:3d:5a:67:d5:94:9c:e2:7a:3e:b9:
                    3a:c8:01:49:5d:e5:74:57:9b:2a:c3:c3:e2:66:30:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:76:05:CF:59:A2:92:58:53:23:E6:32:71:D0:18:71:F9:3F:1F
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c7:86:1e:5a:b1:1b:c7:99:af:44:c6:10:6f:43:12:9e:87:
         f3:7a:26:78:0f:b2:e8:7d:38:a9:ca:dc:0c:9e:ca:8a:cd:c5:
         41:35:27:a1:5d:76:98:7c:cd:32:a5:60:be:99:b7:df:43:c6:
         e3:1a:46:dc:2e:5a:cc:1b:41:3e:97:69:00:c3:1c:c8:ee:a7:
         7a:fa:52:82:cf:18:08:d7:3d:73:5d:41:63:a8:98:e0:a0:8f:
         df:fd:1b:76:e6:0c:0b:12:02:5a:be:91:2d:b6:55:5e:6e:74:
         30:0e:4e:6d:ff:22:d9:60:15:ab:15:14:9c:30:25:88:ba:2c:
         23:f1:41:0c:86:cb:67:13:7b:77:d7:a0:a5:b0:f3:52:74:6a:
         34:89:c9:34:f8:19:92:83:f5:dc:87:c8:cb:a7:d2:6b:1d:51:
         9f:4f:55:cd:da:1e:d3:49:f1:db:ff:dc:6f:16:82:f6:97:59:
         c1:f2:91:2e:b4:05:a7:cd:a7:d8:6a:b9:e8:a6:55:e4:96:2c:
         d1:21:70:a5:e3:fb:73:ef:02:e4:1e:7f:07:df:5d:7a:6e:e7:
         72:da:02:04:38:83:c0:71:b9:94:09:40:37:78:6f:96:b6:6e:
         0b:3f:3e:e0:d9:5e:1b:30:f0:e6:87:46:ad:28:5f:bf:f5:82:
         f3:1e:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:57 2025 by rpki-client