Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File:                     pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier:          rhZLDCrPh2MrUo5pVpsFVOPDAd+eAgRrHC076GE2sns=
Subject key identifier:   E6:42:86:B2:7B:77:5A:2E:B6:A6:67:5D:47:0A:53:F0:54:ED:A5:22
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer:       /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial:       01984588788448D132563104A9973FC88D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 07:00:28 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:28 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:28 +0000
Files and hashes:         1: 1-Rh4xR4UjkOh8VqSY4pK4d1pRds.roa (hash: x3ETC4RsRxr7b/UEU+/7lhOsihrtUte3yh6z17TAj9w=)
                          2: GISiwDWwkN55w-OPn4qwRSweA84.roa (hash: HIcUUP5vEFNT3gS3RcoPzA6F9bPL2QzZ521VNaxnhks=)
                          3: kT-9aZ8PqlfT-VcjyzgIGjoK45k.roa (hash: GXEy5f6ZMAPtdjysI4zwNtCcC/imdXdb1ZPEUBC58HA=)
                          4: lXukILbe6VXJ7h_Wf9WW21z12mw.roa (hash: +Zzql9kBnSussoen1LHmVUwZhXfkIG96Hh/jt0AAOuY=)
                          5: llr3G6G5AM7M10tmA9xFiPTyO0Y.roa (hash: iQGQsp8WoDcGM5vwoYe4dx6kdl9hCiwMrIHoYkwEWK0=)
                          6: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: OfSnJAZQA07V9gaTMk0aJOsRglkF2hKQ/Jm0tA6zSrU=)
                          7: rKCFva5BURgPwYBY7AhhhAP1WfI.roa (hash: yPJLL1iPDAh4jC5sDkvBCraLd8BwdjLiqxgvyLndKHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:78:84:48:d1:32:56:31:04:a9:97:3f:c8:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
        Validity
            Not Before: Jul 26 07:00:28 2025 GMT
            Not After : Jul 27 07:00:28 2025 GMT
        Subject: CN=e64286b27b775a2eb6a6675d470a53f054eda522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:16:08:5a:bc:6a:58:d4:cb:1c:c5:39:91:
                    ce:fa:9c:43:8f:58:31:e0:41:25:66:71:58:55:54:
                    a7:3d:d5:89:aa:06:3e:6e:ea:31:87:ad:3e:c6:45:
                    14:58:77:6f:d5:a6:95:c8:d1:d2:0c:70:91:37:42:
                    36:7b:67:2a:9b:06:41:4c:64:f6:7b:29:2f:da:0a:
                    8e:16:86:1a:b8:13:2e:24:e8:77:65:1d:66:bc:ed:
                    37:d4:e8:f4:1a:46:a7:6c:9c:c4:98:84:65:94:6c:
                    89:21:01:16:46:25:96:9d:ca:a3:76:ce:e7:d3:25:
                    8d:46:4d:5e:8f:a5:c7:7a:0a:1b:b8:5a:e4:c7:a7:
                    c9:41:74:9c:0f:d6:70:42:08:29:7d:b9:4e:98:51:
                    72:70:63:b5:ce:ad:32:56:aa:3c:62:3d:c4:75:f0:
                    7f:16:23:ac:f8:2e:da:f6:29:97:8a:d8:23:ce:93:
                    cc:ee:79:28:28:30:ce:f3:35:ec:c8:7c:21:f4:d2:
                    46:f3:45:10:7f:e4:ce:ac:ed:6f:ab:2d:ed:54:17:
                    72:bc:d6:18:c8:4e:12:15:5a:5c:c0:29:5c:03:60:
                    1d:d1:4c:c0:c9:4c:fe:93:55:60:c9:ff:8d:e6:25:
                    40:d1:0d:c3:9c:12:d4:2b:69:cd:57:13:4b:aa:36:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:42:86:B2:7B:77:5A:2E:B6:A6:67:5D:47:0A:53:F0:54:ED:A5:22
            X509v3 Authority Key Identifier:
                keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:33:06:e3:0e:f4:2c:7b:ca:e0:8f:63:e6:09:af:cd:18:f6:
         bf:33:ae:7a:f0:6d:13:89:5e:d6:a1:5f:65:70:55:fd:7d:e0:
         3d:4c:7b:cf:77:5f:40:a1:08:0e:df:37:7f:f2:81:a7:58:6d:
         59:8d:ad:87:8c:8f:bc:dc:d8:f2:03:79:1e:9d:b8:db:4d:aa:
         cc:67:c6:52:f5:26:52:4e:62:c6:60:1a:ed:e9:d5:b8:68:a0:
         b8:76:ae:c8:cc:12:6a:bf:58:4e:b0:67:ef:82:7c:b3:c3:60:
         df:cf:89:64:40:07:b5:0e:e7:2e:07:2d:26:a5:f9:69:c6:c9:
         77:d4:0e:81:60:2c:f5:96:79:3f:52:5f:ac:1b:16:31:c8:df:
         d8:26:60:20:c3:7f:17:61:b6:0a:50:b5:e4:be:9c:e7:79:96:
         92:04:65:4b:1c:b3:79:0c:88:e4:34:ad:7b:0e:44:d1:7d:a0:
         cf:cb:b2:b3:95:b3:9e:3a:63:47:43:fc:76:8a:f9:fb:6f:e2:
         3c:5e:21:4e:5a:41:46:ed:46:12:3f:b3:76:7d:bd:38:8a:43:
         67:11:d1:4c:9c:ff:f4:89:36:e8:10:d3:2f:91:60:bb:f4:33:
         c7:b7:ac:51:c2:53:c8:fe:fd:28:dd:32:a6:a1:cb:ed:05:10:
         88:32:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:36 2025 by rpki-client