Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          8FDhG1cjIx/0LUZnFqk4GKBbVnnO6jJUi3lcc9ufg/k=
Subject key identifier:   83:BD:D4:81:9C:E0:27:04:F2:71:82:CE:D8:7B:25:7B:95:45:BC:0E
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       019849D387460EB92765745D9C351A3B6E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          1606
Signing time:             Sun 27 Jul 2025 03:00:56 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:56 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:56 +0000
Files and hashes:         1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
                          2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
                          3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: V2SJKxyrVXuai/midYuq9VB6zFnub5cIyQM/VPCZWhA=)
                          5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:87:46:0e:b9:27:65:74:5d:9c:35:1a:3b:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Jul 27 03:00:56 2025 GMT
            Not After : Jul 28 03:00:56 2025 GMT
        Subject: CN=83bdd4819ce02704f27182ced87b257b9545bc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:df:79:f9:f7:da:13:7a:18:f5:2b:b5:f5:
                    cf:ed:60:dc:31:1f:fd:55:07:dd:9c:a3:35:06:08:
                    00:7e:4a:aa:38:83:d2:44:0b:53:11:87:23:47:c5:
                    51:ec:48:d4:59:51:d3:62:16:9e:4c:25:d1:c5:c5:
                    c4:2c:8b:7c:bf:d5:85:e8:2a:b3:ff:d3:5e:4b:19:
                    16:b3:4e:f0:3a:e9:8b:49:b6:fd:fa:f7:fd:e6:0e:
                    8b:3c:6b:5b:bd:95:6a:0f:5e:28:aa:b1:da:6a:70:
                    25:b4:ce:33:92:cf:bb:4b:d9:70:0a:fa:67:66:e6:
                    c7:2d:b3:be:1c:76:1f:c8:79:e1:25:a4:a9:43:2d:
                    bf:15:49:45:2d:3f:be:c7:5f:3e:c0:ad:b7:9e:99:
                    d7:65:32:62:4b:a9:5e:a9:61:04:43:dc:22:82:6f:
                    b8:57:81:a7:bb:11:48:f6:ce:36:1a:56:84:74:c6:
                    88:52:a3:d7:c6:67:b7:af:5e:35:c6:4c:f9:8d:f4:
                    15:59:cf:96:22:6e:46:6d:f9:13:01:84:16:e0:88:
                    ac:69:5a:46:e5:6f:b0:02:63:a0:d9:95:9b:c3:ce:
                    cc:5a:7b:0a:02:bc:36:ba:e6:06:ea:87:8e:71:c1:
                    5d:da:10:51:43:e7:ec:66:1e:20:05:b5:95:2d:84:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:D4:81:9C:E0:27:04:F2:71:82:CE:D8:7B:25:7B:95:45:BC:0E
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:fa:68:7d:9e:4c:94:b8:a8:d4:bf:8f:79:f6:01:99:2a:
         37:8a:0c:a4:fd:e9:ec:14:30:cb:72:44:0c:e9:f2:bd:8d:df:
         ea:66:fe:e2:8a:d7:31:b1:97:df:ef:15:d5:38:33:1e:59:3a:
         2d:be:f8:ab:67:89:2c:11:ed:66:cd:2d:48:84:03:33:5e:68:
         e5:47:79:6c:2b:15:30:86:e6:3f:13:05:90:43:21:18:4d:1f:
         2e:b4:1a:56:9a:6a:5c:f6:8f:b7:c5:47:5b:6a:3d:e1:21:dd:
         98:fb:44:55:76:89:20:c5:ea:b1:25:d0:60:f7:ed:20:1f:2c:
         f1:e5:73:f0:d7:ff:fa:f3:b7:c3:3a:11:c9:8d:26:64:8b:12:
         93:92:f2:a9:34:b3:9c:32:02:8c:49:ec:e4:eb:c1:04:76:d8:
         9c:f7:66:e5:6d:ab:35:51:04:c4:8b:c4:17:82:86:14:22:32:
         38:5b:4b:62:57:8e:3a:be:09:87:d4:9b:e5:d4:70:a6:ad:87:
         c6:93:7e:36:e1:bc:00:50:72:44:b0:0d:f7:5b:7f:05:3d:1c:
         5e:53:8f:b7:51:66:ae:4b:31:cc:63:15:16:ce:d2:db:ad:a3:
         80:19:8a:78:4c:08:77:8e:04:fe:f9:58:b9:98:2a:b2:46:8b:
         1a:85:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:23:51 2025 by rpki-client