Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
File:                     83Uc-MOi02yXRMllGYmZRaxgeCA.mft (raw, json)
Hash identifier:          Ql+mBc/4BBdWmAxdT5/0YYGNSOGG/101M1cT2GC8W/w=
Subject key identifier:   02:7B:9C:CA:62:71:E9:86:88:68:14:A1:D3:90:F3:62:99:53:B9:66
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       019849D39AAAF0066C0756B65A8382CE8C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 03:01:00 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:00 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:00 +0000
Files and hashes:         1: 83Uc-MOi02yXRMllGYmZRaxgeCA.crl (hash: prGn7hpjqueEcP5xDTZUcSV5HRFrCLMnnKP/mWc3XrI=)
                          2: RQIIwfPKKX5p7u0Y-C_D5Y-bKBI.roa (hash: KiLJtwlRDmcGob+kpYuioRY1Q/RLPjcl0rdsa4MFnrs=)
                          3: xelQwmSnZUsP7vwyXYG-OjnLzks.roa (hash: VANd7e1T8sboSWcnlJJpwtTBZNkVD3ZVwPQJ+ivjoHw=)
                          4: ycYE11LlQ1a-t4T_yP1coVz5lU0.roa (hash: aqEuNcxSiCWBJQINtSpWdlIDutYbO4J8N5pMivaTnAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:9a:aa:f0:06:6c:07:56:b6:5a:83:82:ce:8c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Jul 27 03:01:00 2025 GMT
            Not After : Jul 28 03:01:00 2025 GMT
        Subject: CN=027b9cca6271e986886814a1d390f3629953b966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:8b:25:b9:d8:66:4b:a8:9a:ba:52:15:e6:
                    48:6a:73:0f:bf:47:b5:dc:92:f6:98:2c:c1:d5:be:
                    72:dd:46:3d:70:43:6c:2f:e1:d7:42:d4:0a:be:cd:
                    0a:75:46:76:d5:b5:64:73:85:3a:51:0f:e6:f1:20:
                    69:51:92:a3:a8:e7:f1:74:43:2b:2e:fd:e9:5c:74:
                    3a:7c:d2:5d:16:a9:c4:8d:0c:9e:6b:40:99:44:cd:
                    96:81:5f:37:03:09:04:4b:a8:7f:3b:09:d5:4a:c9:
                    21:19:8f:53:46:62:c2:63:12:97:d1:bf:bb:3c:6d:
                    70:33:da:64:78:6d:3b:e9:6a:96:ec:dd:ff:a4:be:
                    41:1f:1a:ab:a4:6d:8d:8c:5d:be:43:9d:eb:1e:9a:
                    79:ef:e3:6d:f9:15:ee:c8:d5:8d:29:64:f5:78:17:
                    24:91:f1:a7:e3:29:1b:e2:9a:b6:94:02:26:14:de:
                    08:9c:3f:8a:86:35:03:ee:e6:0f:71:e6:a1:4d:4f:
                    68:e4:12:34:5f:90:3f:33:48:fc:fc:b9:27:9c:8d:
                    2c:6d:6d:7f:18:f2:24:f0:99:a1:64:60:30:35:82:
                    e8:00:09:5c:a6:ef:14:34:37:92:ae:76:83:16:b3:
                    4b:68:4b:f1:d3:56:6d:e5:17:fd:b8:33:13:7e:94:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:9C:CA:62:71:E9:86:88:68:14:A1:D3:90:F3:62:99:53:B9:66
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:3e:fc:ac:b3:37:dc:e4:dd:44:d4:8a:4f:15:21:b0:a5:9c:
         ee:dc:a7:43:af:9d:bd:10:6f:b6:03:ae:55:b4:28:79:10:3e:
         29:1d:34:de:a5:d8:b2:72:a4:c0:e3:af:36:63:f4:b0:35:c3:
         4b:2d:fb:01:fb:74:57:6c:bc:cf:3b:ff:29:11:d0:38:5e:66:
         55:b5:46:05:0b:35:77:b7:ec:ac:98:30:a6:fe:d9:c9:58:46:
         5f:48:d8:da:b5:29:6d:a8:8b:3f:4d:e6:5f:41:fe:66:4d:0d:
         8a:0d:c8:98:da:b1:e6:ae:89:32:d9:be:f1:28:8b:4f:40:c1:
         fe:f2:03:bc:42:13:f2:24:74:c7:30:2a:6d:05:03:69:66:ab:
         e5:d7:e7:df:3d:48:b4:42:fc:a8:5b:89:61:4b:9e:37:f1:b2:
         27:b8:09:76:8d:02:3a:32:e5:8f:61:8d:e4:77:41:74:5c:df:
         8a:4a:c4:ba:9e:18:d4:ce:6a:38:53:86:60:2d:c7:f6:bf:ba:
         17:7a:8c:8c:a0:aa:f0:db:2f:b6:9b:c1:7a:de:b5:cf:1d:d2:
         ab:0c:11:ae:a8:aa:96:07:21:88:3c:eb:12:2e:09:a9:a5:9e:
         dd:7f:62:8e:9f:af:bb:3f:a8:ef:24:56:b1:ac:c1:24:3b:2d:
         dd:d0:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:42 2025 by rpki-client