Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          O6HdUo+j1I7KjIsQ1rK7DoKomwqkKEzuzvX3CpYbLbw=
Subject key identifier:   8F:70:DD:C5:A8:D1:AF:0B:E7:37:01:36:C9:30:98:FC:08:C2:46:CC
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       019845F686666AE0E30A8F50D0A4702CF682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          1132
Signing time:             Sat 26 Jul 2025 09:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:40 +0000
Files and hashes:         1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
                          2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: 3duo7KB3agJQ3X3nGQ3LT4MX++FmVOamFTx1m/lU1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:86:66:6a:e0:e3:0a:8f:50:d0:a4:70:2c:f6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Jul 26 09:00:40 2025 GMT
            Not After : Jul 27 09:00:40 2025 GMT
        Subject: CN=8f70ddc5a8d1af0be7370136c93098fc08c246cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:ad:95:98:66:ab:25:c9:a4:05:23:ed:b2:
                    3b:fa:00:55:f5:c6:39:d3:48:1a:4f:e9:80:80:e7:
                    b1:be:81:46:24:92:84:e8:0a:85:15:2d:a8:5b:a3:
                    da:61:45:bb:94:5b:7c:30:33:a4:c1:d5:77:a1:ec:
                    ba:57:35:1b:d0:07:e9:10:fe:ff:a0:e5:5a:39:47:
                    e3:2c:f5:c4:d4:9a:59:d9:1d:c3:0f:c6:3a:b8:4f:
                    1d:04:cd:2e:7f:20:e4:50:67:67:d1:30:bf:3d:a4:
                    14:3f:36:e3:30:3d:7f:6a:a7:70:1a:6e:d0:95:f3:
                    7f:0c:d4:70:01:02:b1:7c:4e:03:70:4d:65:91:eb:
                    f9:5d:4e:0c:54:0d:54:2e:10:f3:b1:f4:c0:77:65:
                    63:4e:7a:3d:50:05:c0:a0:68:7f:9b:bb:2a:f8:0e:
                    1b:76:8b:42:f0:28:b9:b0:8e:95:f7:25:21:34:4a:
                    4d:e5:9f:db:a1:7d:0b:58:64:07:1f:06:05:d5:45:
                    c0:0a:17:bd:51:33:aa:a0:fd:39:8a:24:44:55:3a:
                    86:0d:9a:12:da:f9:b9:ad:ff:30:bd:a8:cc:3c:a0:
                    1f:1c:21:8e:76:2b:9f:a2:b4:a8:4e:a8:48:0e:11:
                    37:28:8d:60:9b:de:bb:d1:5e:7a:35:f0:7a:c1:a6:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:70:DD:C5:A8:D1:AF:0B:E7:37:01:36:C9:30:98:FC:08:C2:46:CC
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f7:ca:1d:5f:cc:67:bf:58:e3:50:31:94:06:49:8d:02:7f:
         30:30:6d:c0:7f:c9:e1:78:3b:91:ae:fe:b7:a5:fe:89:29:9f:
         c7:19:0e:6c:5d:46:b3:2b:81:44:99:11:2c:0d:b4:01:4c:03:
         4b:83:00:99:d0:e9:2a:29:5e:32:da:3d:c8:d2:93:32:66:87:
         ae:ae:37:2d:5c:b7:f5:fc:23:3f:78:5c:9f:e7:c9:ad:8a:28:
         73:8c:40:0d:2b:2e:9a:64:a8:4d:21:93:ae:dc:ad:5b:63:3a:
         4c:e7:d6:95:32:86:05:68:da:bc:63:52:05:e5:a5:af:b1:b6:
         54:af:1f:cc:a0:2e:59:84:e5:c6:9a:4e:25:ff:78:1c:80:24:
         9a:c9:38:cf:f8:af:f8:2d:d9:ac:db:3d:1a:10:55:c6:f6:a6:
         4d:f2:b6:6e:fb:5e:69:d6:99:15:23:38:9c:37:35:c5:42:00:
         62:1e:77:bb:ea:ce:98:b1:40:65:7b:c7:c2:78:e9:cc:8f:47:
         00:62:20:ca:18:c8:11:9d:10:5a:20:33:33:f3:3a:c0:a7:be:
         f3:e9:0a:0d:07:5b:fd:4e:d4:43:49:a7:16:49:b8:fa:ed:86:
         bf:1d:d5:dc:39:a0:aa:fe:b4:ba:23:d8:43:61:a5:60:7f:a4:
         b7:cc:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:13:56 2025 by rpki-client