Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier:          uE4tlQYudEXL/pFrPoFFlzRbnRavuj1fOwoYV004pSI=
Subject key identifier:   81:34:E0:ED:4E:0A:AC:DE:03:8C:A3:03:63:02:18:95:5B:46:FF:B5
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer:       /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial:       019848F787358529A0374AE02D47B098F3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 23:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:38 +0000
Files and hashes:         1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: 1FANfyE/xKa0DVMbAcOORATlj2M5oxcF+4DmqV3lOwM=)
                          2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:87:35:85:29:a0:37:4a:e0:2d:47:b0:98:f3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Validity
            Not Before: Jul 26 23:00:38 2025 GMT
            Not After : Jul 27 23:00:38 2025 GMT
        Subject: CN=8134e0ed4e0aacde038ca303630218955b46ffb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:69:88:bb:4d:b3:52:98:c8:0a:c9:d3:39:
                    67:5d:ff:71:88:32:f1:a7:61:fc:2c:65:8e:dd:17:
                    2f:00:8d:9c:c8:45:72:84:ac:95:0a:cd:96:b8:7a:
                    1c:43:b9:1b:84:1d:a6:47:e3:7f:53:c7:0e:cd:8b:
                    34:35:78:d1:8c:6b:5d:9d:84:34:97:d7:b5:37:5f:
                    2f:89:92:d2:19:6d:1b:19:cd:fe:bd:e1:2f:d5:9f:
                    d3:46:f2:97:90:9f:7c:fc:89:96:d4:e2:05:99:6d:
                    5a:f1:f2:a7:51:19:c6:6b:db:50:fc:3c:9f:53:a1:
                    f5:ab:9a:70:df:b9:cc:8d:97:e8:b1:3e:2d:23:94:
                    38:c5:09:5a:7b:36:b8:9f:d3:59:9e:f5:74:04:15:
                    42:11:01:85:a1:7f:ba:9d:09:df:91:7c:2a:3e:b7:
                    f0:be:56:51:81:08:14:c5:21:03:66:e1:f0:98:2c:
                    10:a4:13:a0:c2:b8:80:4f:dc:4d:0b:ba:1d:b6:7a:
                    35:36:e0:9d:9c:0a:78:d9:e0:3b:2b:41:dd:28:ad:
                    3e:c1:21:1e:4f:74:da:fb:3f:bd:06:bb:ea:29:35:
                    67:84:d5:5a:70:bf:c2:53:60:6a:d6:9e:0a:70:96:
                    4b:0f:a2:70:2d:ce:f6:56:0a:7f:63:c2:cf:a8:f1:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:E0:ED:4E:0A:AC:DE:03:8C:A3:03:63:02:18:95:5B:46:FF:B5
            X509v3 Authority Key Identifier:
                keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:15:c2:af:06:a5:0a:92:4e:3d:80:cc:ed:fd:0e:f7:d8:76:
         a5:f6:22:b7:10:7b:e9:a2:1a:0d:73:80:7a:9b:8d:89:53:26:
         04:14:0c:93:3b:5b:4d:8d:b9:5b:0a:a7:eb:d8:1d:23:82:8c:
         f1:9d:74:78:99:09:56:aa:79:09:26:ba:e6:a7:db:dc:8e:fd:
         31:15:f5:0d:32:cc:8b:a8:33:87:73:1a:32:20:09:ab:2f:d2:
         43:55:85:4a:82:8b:17:cd:ff:fa:c3:29:bf:54:8a:3e:4a:19:
         fa:70:e4:d0:87:9c:bd:83:86:a2:a7:42:91:96:e4:62:b7:1f:
         b3:94:d9:c8:3d:8b:3f:e9:79:90:49:e2:33:b1:de:57:bc:6b:
         2b:a1:03:ee:7a:df:80:ac:91:3c:a9:1d:f0:2d:1a:91:60:71:
         0f:d5:b2:90:f0:ce:5d:50:6d:f5:0d:84:56:fa:53:63:1f:2d:
         55:3a:c2:a1:06:d2:d3:67:cd:c3:ec:e2:53:d2:41:45:30:3e:
         e5:8f:f3:4d:e4:6a:3d:e9:6b:6f:1e:1a:1f:f5:5e:97:70:50:
         45:cd:44:ae:8e:a9:c5:b2:57:ff:72:e4:88:c0:0c:0d:a6:1d:
         5a:94:02:e3:81:35:fe:ed:69:af:c8:d5:84:a8:c2:70:13:66:
         3d:dc:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:24 2025 by rpki-client