Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File:                     dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier:          Dc/xwFn/T2eZ68b8GPT0ROqxk70uXJ266uIRBX1wwoU=
Subject key identifier:   BB:73:CD:C0:7E:2B:48:52:AD:92:F9:85:1B:58:BC:53:B8:29:7E:F9
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer:       /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial:       0198499BFDF1A2E0A8634F6E69849A6DCEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number:          0417
Signing time:             Sun 27 Jul 2025 02:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:16 +0000
Files and hashes:         1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
                          2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: 95bDea4sGQ4vakKCY3Xm3KSKEj5zj80DroJehiElApw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:fd:f1:a2:e0:a8:63:4f:6e:69:84:9a:6d:ce:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
        Validity
            Not Before: Jul 27 02:00:16 2025 GMT
            Not After : Jul 28 02:00:16 2025 GMT
        Subject: CN=bb73cdc07e2b4852ad92f9851b58bc53b8297ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d7:0f:29:18:3a:33:07:40:c6:cf:97:00:b7:
                    48:2a:3f:22:cf:01:bb:38:62:5e:5f:81:d5:23:07:
                    d9:7f:64:a5:52:16:36:7f:ad:10:c4:20:df:7d:ad:
                    e3:66:fa:a9:66:aa:74:7e:12:7b:16:b2:ea:24:bc:
                    d9:7f:30:08:9f:1a:fb:c6:b7:de:2f:6d:13:df:ef:
                    d5:fc:5a:a8:11:25:04:17:3a:64:d7:ae:68:78:cf:
                    57:9b:2e:ff:8d:2b:b4:cd:9a:10:3d:d7:99:d8:9e:
                    26:a6:87:1d:41:f2:24:8d:86:71:a1:00:06:6a:ee:
                    1e:44:0f:88:b7:95:80:66:5e:1d:c0:23:44:93:39:
                    3f:d4:1d:97:5d:ba:34:be:17:4a:de:39:a9:da:98:
                    50:8a:51:d2:50:04:a5:2e:cb:ac:90:22:67:2d:22:
                    c0:9a:cf:ac:7f:58:25:02:56:74:cb:85:4f:51:92:
                    a9:62:a0:16:d5:4f:ef:5e:db:5b:10:45:a1:d1:18:
                    e0:ab:17:c2:04:64:47:85:5f:9e:1c:4a:67:23:41:
                    21:4d:eb:2a:95:9a:2b:f1:2d:e8:d7:64:f0:9d:52:
                    57:b9:c7:07:2d:d0:c6:c1:69:1d:37:06:2d:94:e2:
                    4c:c1:60:94:af:a2:56:53:88:cb:ee:6f:2c:7d:a6:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:73:CD:C0:7E:2B:48:52:AD:92:F9:85:1B:58:BC:53:B8:29:7E:F9
            X509v3 Authority Key Identifier:
                keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:c5:8e:3f:7a:87:89:4c:d2:c5:3f:6e:13:74:0f:cf:2d:
         74:3e:e1:90:80:1c:51:61:99:6e:13:3b:e0:d5:2f:b6:ba:2b:
         f1:e8:e7:bc:6b:2e:21:e0:b6:bf:3a:0a:c3:42:dc:fa:bf:c1:
         0d:9d:01:2e:fb:38:eb:b0:d0:98:43:df:b2:c6:6e:4c:ff:c2:
         48:15:d6:12:1d:0f:29:db:cd:72:53:e5:a1:7f:4b:b5:d1:c8:
         99:f4:c1:b2:f9:5c:35:58:50:41:65:64:95:ac:d6:4a:a2:bb:
         39:23:fb:15:1a:0e:2d:ca:8e:00:ce:58:84:ae:ce:a6:95:7a:
         5a:6a:4e:16:f3:b8:14:b0:5b:09:98:64:e9:d3:ad:6d:74:a6:
         3d:fa:91:f2:ff:5c:f0:8c:8c:be:b2:62:32:74:8a:8a:bb:0a:
         bd:09:22:d5:3a:8a:ee:2c:f8:c2:5f:ef:28:98:73:37:ab:2e:
         ce:c5:96:67:9a:b9:ac:c2:cb:67:b1:b0:bb:76:fe:02:9f:32:
         15:f9:54:27:8f:dd:4a:97:5a:bf:03:e6:a7:2a:45:97:d1:53:
         30:04:c1:f8:07:80:33:76:a0:ea:f9:39:26:95:8b:12:ee:9d:
         31:e2:eb:45:6a:d0:c2:35:9d:3f:33:35:11:4b:83:f9:1c:54:
         92:6a:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:31 2025 by rpki-client