Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
File:                     7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json)
Hash identifier:          jMLQJ1exVZJP/TWyRB+cuW2rFN65jzGZP/ZxzW8vdsQ=
Subject key identifier:   C5:60:3B:27:51:7D:66:F9:C8:07:B8:A2:98:94:9D:82:AE:C1:24:1E
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Certificate issuer:       /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial:       01984A0A7737004D5C49E51E465C46110DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
Manifest number:          0873
Signing time:             Sun 27 Jul 2025 04:00:56 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:56 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:56 +0000
Files and hashes:         1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: seDBPNoT4B54rydo1bWSsGPPluI1fFRi1Btb0zjgREI=)
                          2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:77:37:00:4d:5c:49:e5:1e:46:5c:46:11:0d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
        Validity
            Not Before: Jul 27 04:00:56 2025 GMT
            Not After : Jul 28 04:00:56 2025 GMT
        Subject: CN=c5603b27517d66f9c807b8a298949d82aec1241e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:ab:f6:21:83:bb:34:e4:57:a1:b4:03:8e:
                    c3:15:81:9c:c2:fe:32:d9:1c:f5:d0:94:95:0c:71:
                    28:4f:6b:01:fd:3d:be:21:a1:34:99:4f:ae:37:7e:
                    36:16:fb:c0:44:7c:3a:60:78:2f:38:6f:36:3e:9d:
                    70:03:b5:87:f9:41:b6:04:cf:cd:a0:78:4f:aa:ba:
                    d0:89:a8:59:31:40:82:40:3e:14:42:10:0d:d5:11:
                    82:8d:25:80:3a:cc:19:73:97:2e:3e:ef:60:4e:37:
                    43:7e:41:11:4a:af:2c:67:80:2e:d8:a6:12:29:56:
                    ea:c5:f2:80:ee:cd:52:bf:8b:19:7e:43:ba:ba:7a:
                    43:a3:86:f9:bc:f2:ad:59:5e:cd:5c:7d:33:ca:33:
                    5a:07:2d:b5:30:3e:cc:a8:0d:7f:2b:3e:72:86:c5:
                    fe:af:fc:b0:f8:83:87:89:c5:59:1d:b6:9e:33:f3:
                    9b:8f:ad:12:59:f8:59:fd:82:74:7c:dc:89:f3:37:
                    70:63:88:4d:3d:89:41:bb:5b:3a:f6:23:b7:03:8e:
                    8b:c2:22:a7:15:be:95:c9:34:02:06:6e:4e:32:af:
                    d3:af:83:58:26:de:96:6a:7c:18:7b:5d:69:7b:b6:
                    fe:06:b0:bf:4b:1d:1b:43:45:d8:5d:80:29:ec:6d:
                    83:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:60:3B:27:51:7D:66:F9:C8:07:B8:A2:98:94:9D:82:AE:C1:24:1E
            X509v3 Authority Key Identifier:
                keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:79:5e:b0:9c:1a:80:8a:0a:19:5a:92:8f:77:0e:1d:ad:a8:
         4e:56:51:3f:ed:63:a4:bf:0b:cf:2b:ec:b4:0a:d3:2a:8e:32:
         87:4f:49:26:b1:e1:b3:5d:73:57:7a:a7:82:8e:7a:99:39:6d:
         f4:bc:2a:bd:5c:35:ad:8f:99:96:1a:a8:4e:16:a1:cc:a8:6b:
         47:f3:61:ef:fc:91:54:2d:43:14:bb:0d:78:6c:f0:e8:96:ab:
         c0:80:06:3b:18:40:fc:cc:5c:7f:e2:c5:4e:27:34:8b:e1:b9:
         3a:0f:6c:42:ac:87:fb:b4:65:e5:e0:51:53:61:ef:57:d0:6d:
         7d:92:67:6c:51:f9:d4:7b:56:c6:ce:88:6f:c7:18:2c:97:6b:
         ba:c2:09:5a:4a:1e:02:3d:e5:fc:8b:0f:2d:55:e6:17:21:d2:
         59:2c:ff:dd:4b:08:b9:09:35:c1:46:e2:55:75:55:e7:ca:dd:
         3c:eb:62:c6:9e:f4:cc:6e:86:06:7d:4a:7f:97:fc:79:fb:f9:
         7b:7f:d9:82:78:ba:22:42:1a:6f:e4:d2:a9:d0:9c:55:e8:2f:
         44:a2:89:86:19:11:8f:bc:32:39:70:16:ee:8b:32:95:92:ef:
         74:9d:64:9a:20:05:28:8d:2d:78:33:2f:c3:f7:86:01:0b:4c:
         ea:14:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:10 2025 by rpki-client