Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File:                     zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier:          kejnD4XLgbppS8LJKm3Ine4vLg9Q5x023ljUds5OL/s=
Subject key identifier:   57:7C:4C:CD:8F:7E:D8:DF:7D:76:38:E8:7D:73:8B:E3:FF:F2:36:0C
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer:       /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial:       01984AAF2D46D63A6AAB46FD78E34663133F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 07:00:51 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:51 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:51 +0000
Files and hashes:         1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
                          2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: RR7GZWpTACBwYGRQD4gfThMAMpDkV5jyAVUnbCL1O4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:2d:46:d6:3a:6a:ab:46:fd:78:e3:46:63:13:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
        Validity
            Not Before: Jul 27 07:00:51 2025 GMT
            Not After : Jul 28 07:00:51 2025 GMT
        Subject: CN=577c4ccd8f7ed8df7d7638e87d738be3fff2360c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:64:5b:b0:9f:46:20:28:35:19:ce:f8:8b:
                    1b:71:16:71:e1:75:28:9a:66:02:82:77:de:75:e3:
                    26:72:f1:23:86:66:d4:c7:66:a1:59:f1:27:1d:3e:
                    a1:a4:49:ac:ba:6d:9d:75:f1:7a:7f:50:77:72:95:
                    27:89:b8:b5:b2:7e:60:1c:a5:f7:76:3b:90:e6:fc:
                    02:8b:a3:58:8d:ba:39:e4:98:07:83:7b:0b:12:c6:
                    c9:ce:e2:6c:06:ca:62:d1:32:90:f0:f0:3c:c0:47:
                    ca:a0:e5:7e:4f:eb:b2:05:0a:a0:2c:1c:dd:3a:c4:
                    96:de:b4:7a:98:64:b5:2f:db:cb:98:f8:8d:97:c3:
                    18:74:ab:be:bc:1f:df:b5:36:32:34:8e:f8:85:c6:
                    71:4d:f9:c7:2d:c0:6b:db:6d:2b:1f:ae:84:a9:dc:
                    e2:20:03:7a:88:da:96:a3:55:2f:66:00:e5:be:1b:
                    e9:e1:8b:0d:d2:fa:dc:72:13:43:94:4c:78:05:09:
                    8d:63:6b:40:92:12:ea:c0:43:a5:97:c7:b6:1d:81:
                    fc:6d:ca:23:71:03:1f:03:98:c9:68:89:f5:43:fa:
                    bd:fa:05:a3:e4:7d:67:8f:64:4b:68:ad:4a:a7:3d:
                    c1:b2:41:d8:1f:a6:98:6f:27:cc:8c:42:e0:c7:eb:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:4C:CD:8F:7E:D8:DF:7D:76:38:E8:7D:73:8B:E3:FF:F2:36:0C
            X509v3 Authority Key Identifier:
                keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:84:42:63:f1:29:67:ed:29:eb:13:d5:ea:89:d9:db:84:ab:
         53:57:5e:bd:af:2f:a3:de:e8:c3:a5:c9:0f:2c:61:dd:01:90:
         aa:98:7c:56:b2:23:c0:87:3c:cb:84:69:77:5a:0c:26:0b:ba:
         b2:9c:79:4f:91:cc:ab:9f:88:84:52:81:71:8d:51:f1:20:5e:
         b4:28:72:9f:e4:02:1a:4c:7e:04:0a:a8:80:60:88:ac:9e:26:
         ff:ce:31:d2:c2:eb:0a:ca:18:98:80:f2:2e:a2:da:f9:80:c0:
         bb:38:d2:72:0c:6c:f4:7f:11:95:90:e0:3b:4f:a6:ae:12:bf:
         62:62:1a:5d:86:8e:06:6c:e1:4f:1c:be:17:6f:d2:f2:06:c9:
         6d:72:42:bb:cb:3a:c2:ab:48:88:95:43:5a:55:c0:dc:cc:b0:
         eb:1b:cf:4c:6d:df:0f:b0:b7:c2:f6:e7:54:60:6d:a2:1b:65:
         d5:f5:c0:0f:a8:72:38:a6:63:3a:9e:62:a3:05:d5:1a:17:43:
         c5:3f:11:1d:07:68:ec:74:c0:28:9d:72:7b:80:d4:8f:7a:bc:
         b2:5a:36:b3:4d:0f:ef:9c:f8:a4:d3:94:c6:ec:1e:67:1b:2a:
         ac:70:6c:79:4f:de:f9:aa:d2:da:5d:c0:f1:05:df:9c:05:2e:
         ab:db:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:54 2025 by rpki-client