Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          G6Kr0l2qQ8Dsm6XRJkT2iX0WDYe9gSZUFt2PWL96PRA=
Subject key identifier:   CE:9D:E0:90:B8:83:25:ED:29:72:E2:48:BF:DA:C4:89:58:8D:36:61
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       0198529F57ED242F34DB9DC1721DB1065EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          1606
Signing time:             Mon 28 Jul 2025 20:00:31 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:31 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:31 +0000
Files and hashes:         1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: cqSZnNDgUERsTIPo9rsLGKvP88cCzuV8BRI9AI0bT9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:57:ed:24:2f:34:db:9d:c1:72:1d:b1:06:5e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Jul 28 20:00:31 2025 GMT
            Not After : Jul 29 20:00:31 2025 GMT
        Subject: CN=ce9de090b88325ed2972e248bfdac489588d3661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:40:87:d9:9b:a9:cf:3a:1d:83:63:1d:c9:8a:
                    e1:79:48:d1:27:92:59:d6:48:f9:0a:f1:11:05:2b:
                    a0:bd:0f:db:df:80:9e:1e:89:c0:b0:57:25:e4:06:
                    a3:2b:42:07:ab:cc:69:70:d7:04:ee:88:a2:f4:bc:
                    f4:64:e0:49:6c:6b:af:55:b3:c6:19:71:9e:a2:86:
                    ab:90:4f:8f:9d:fa:8c:fe:59:98:37:32:05:aa:b8:
                    ab:11:84:f0:f0:22:c7:66:b1:fd:75:7e:7e:63:bb:
                    41:69:94:a2:44:c7:8d:99:a7:86:0d:ef:02:7f:c5:
                    7a:13:72:2a:22:17:e6:6c:3e:17:47:aa:79:2c:4f:
                    48:27:c3:68:af:77:92:f6:82:ad:ab:07:7b:84:3a:
                    20:df:9d:ca:b9:75:f7:36:17:bf:4c:78:60:bf:c5:
                    a7:c1:5e:7d:1d:1a:5c:40:67:42:51:c0:06:f6:64:
                    6e:c6:1b:7e:00:f8:f1:ee:1b:90:47:61:11:6e:9a:
                    12:d3:5e:5f:4a:0c:6e:2e:5e:20:68:3b:13:5a:7d:
                    6f:4e:0f:2a:47:a1:40:a8:9d:0d:35:9a:4a:bd:7c:
                    b9:3e:01:91:46:a6:89:b7:74:63:22:c5:99:7e:8e:
                    84:b8:0e:fc:51:14:cc:b7:88:d5:e2:f4:9d:13:8c:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9D:E0:90:B8:83:25:ED:29:72:E2:48:BF:DA:C4:89:58:8D:36:61
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:12:97:53:b1:24:e3:e7:3d:fc:67:c7:7a:3a:6b:63:5d:c4:
         65:66:6d:27:23:07:19:31:b8:ec:cf:70:1f:33:5f:c2:d6:c7:
         8f:6f:12:16:87:1b:bb:5e:22:8d:16:e9:b4:e2:9c:da:0b:7b:
         91:74:2a:64:5a:e9:57:c3:45:b9:8f:e1:54:f5:79:32:ea:9a:
         47:80:1d:3a:fb:3d:da:0a:5f:35:c9:25:17:21:82:6e:66:61:
         5b:26:a0:4f:6a:db:f6:7f:a3:7c:99:9f:4d:43:37:00:89:6d:
         7c:ff:22:64:3f:c4:55:0f:ae:35:e5:34:66:a8:db:d8:31:0f:
         a3:9b:c9:12:8c:d6:83:c1:24:b5:3e:b0:83:0e:36:93:3e:5c:
         97:ca:63:e1:da:40:cb:7c:13:65:b9:b0:62:2c:17:85:c6:37:
         6d:8c:9c:1a:c7:3e:75:d8:33:2a:04:eb:e0:f6:04:48:5f:66:
         5f:6e:f5:4c:38:17:55:9e:cd:3e:19:c2:03:50:6b:b9:07:10:
         88:f3:54:4d:00:d9:34:3d:aa:18:ff:8a:6a:23:72:d6:41:11:
         e4:6e:93:3e:71:5a:a0:e0:5a:07:f9:5f:20:11:c0:97:1b:35:
         20:50:67:f6:64:e1:0f:76:50:c7:8c:27:b9:65:4c:d5:5e:53:
         d2:5f:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:40:00 2025 by rpki-client