Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File:                     iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier:          ii8bVHIopiuCKyca+P+65SQ+Fg85WvyJXZujfuXie+A=
Subject key identifier:   6F:76:24:54:F5:2D:7A:B7:26:DE:88:25:C7:14:45:6D:2E:82:28:C4
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer:       /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial:       01984AAF1F16E3850CFC2F440D2E58015813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 07:00:47 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:47 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:47 +0000
Files and hashes:         1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
                          2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: 7OrcH7LraTcJxitQREjsePnq+eG/jL80oBVfKprjCRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:1f:16:e3:85:0c:fc:2f:44:0d:2e:58:01:58:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
        Validity
            Not Before: Jul 27 07:00:47 2025 GMT
            Not After : Jul 28 07:00:47 2025 GMT
        Subject: CN=6f762454f52d7ab726de8825c714456d2e8228c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:95:7b:91:aa:68:be:c0:06:c7:16:b2:d7:
                    3e:ea:de:3e:66:4d:fa:6d:59:ee:da:62:b7:ed:45:
                    bd:5b:c9:cb:02:8a:b2:33:42:16:b5:f5:dc:e2:e9:
                    fe:98:5a:84:12:96:c9:1f:bb:ef:7f:58:3f:79:1d:
                    02:13:52:4f:52:35:d8:a1:e1:81:ff:52:30:73:08:
                    87:2d:bf:c7:61:c7:81:e2:63:f7:76:84:8d:c3:92:
                    08:5d:50:99:c6:87:91:47:91:3a:a1:da:a4:2f:01:
                    d7:7b:50:34:35:8a:51:a4:8a:45:d3:e5:30:10:fe:
                    3d:c9:5c:81:d0:14:63:44:c4:bb:71:ac:1c:e1:82:
                    a9:7c:03:73:4a:c8:cd:10:eb:0e:30:a3:9e:31:77:
                    26:6a:b8:c1:23:93:16:71:6e:2d:e3:17:0a:ce:18:
                    6c:65:6b:08:3a:f9:25:a0:8a:c8:4a:27:a4:e3:17:
                    29:83:66:c6:17:61:c9:55:c1:77:38:53:e4:19:2b:
                    0a:12:bb:e2:27:4c:f1:65:3b:33:ef:17:9d:d9:f1:
                    46:16:de:fb:98:4a:28:f6:b9:3e:65:f1:21:fe:4b:
                    67:c7:bf:22:14:42:52:bf:5a:d6:56:6c:91:fd:d0:
                    a4:d2:30:f1:ea:86:a3:14:02:2c:73:8a:25:50:9f:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:24:54:F5:2D:7A:B7:26:DE:88:25:C7:14:45:6D:2E:82:28:C4
            X509v3 Authority Key Identifier:
                keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:aa:27:21:35:ed:f0:32:ae:45:bc:4a:28:1a:0f:f0:5d:84:
         bb:94:87:3b:e3:44:48:fc:3e:3b:03:87:57:38:6e:75:7b:08:
         54:02:17:c4:22:47:be:ee:6b:05:ec:f7:22:e3:c0:cd:9b:84:
         3b:1f:c1:38:99:51:4b:cc:ab:1f:ea:83:f3:93:16:5c:c8:38:
         5d:2a:ed:c1:f0:6b:45:6b:a3:ca:30:cc:94:00:33:a8:42:15:
         1a:f4:83:8a:2a:4a:cc:be:cc:9a:d1:17:2f:38:5c:30:24:d3:
         09:74:02:04:28:f3:11:01:d1:7a:d7:87:1f:2d:0c:61:5a:96:
         3d:1e:95:88:d7:47:f6:da:94:c7:e0:2a:71:06:6a:1c:12:63:
         91:58:16:0c:1e:45:e5:4f:62:80:79:77:4a:05:c1:7d:0f:5e:
         0d:f9:b5:da:5f:8e:e5:51:bc:d6:a5:7e:78:8f:3a:87:fd:1a:
         44:4e:8a:67:48:85:ff:69:c3:24:ec:dc:c4:00:60:1e:76:aa:
         34:3a:bc:8f:25:c1:85:d0:7e:d9:59:11:bc:8f:24:7f:dd:eb:
         92:26:06:cf:ee:ea:7a:39:e4:ea:7d:99:51:5e:77:95:23:7d:
         6e:fb:21:bb:9b:52:ab:70:27:74:fc:25:b3:89:52:d5:a7:58:
         68:d3:29:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:35 2025 by rpki-client