Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File:                     zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier:          QnDt5am2Pl2Pe6zDAlONkNOP9THpUgoDUlnXzy3noqc=
Subject key identifier:   1E:E0:08:D0:8A:7D:C1:49:C1:64:0E:8B:AA:BA:D4:34:31:96:37:9B
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer:       /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial:       019847780A6D20E4D2FE0174DC371975585A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 16:01:45 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:45 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:45 +0000
Files and hashes:         1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
                          2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: fUqvIKyc+unDC7iaIaVxu+FghR8uduJ57M2xEHwF8w4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:0a:6d:20:e4:d2:fe:01:74:dc:37:19:75:58:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
        Validity
            Not Before: Jul 26 16:01:45 2025 GMT
            Not After : Jul 27 16:01:45 2025 GMT
        Subject: CN=1ee008d08a7dc149c1640e8baabad4343196379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:80:35:59:8b:45:b2:1e:ea:aa:8a:0b:95:
                    e9:a7:28:80:97:39:7b:be:61:0f:be:55:aa:26:00:
                    7b:57:b0:41:e2:fa:78:f4:13:57:ea:26:50:7a:ca:
                    99:48:cc:27:f9:92:11:4b:e8:fe:1f:74:eb:1f:03:
                    78:f5:1b:88:92:f8:6a:7c:b7:59:81:43:91:4f:49:
                    7f:6d:db:8e:18:96:df:86:bf:99:1b:4b:d6:5d:4c:
                    a0:08:13:d4:d6:ed:5c:67:ab:a8:c9:22:8c:2e:cd:
                    8a:0d:a9:97:a5:34:68:af:db:c6:99:14:a2:52:d0:
                    ee:10:b5:58:e3:24:82:0f:6f:2a:16:f1:9c:cd:e6:
                    89:f8:3e:04:d1:6f:92:dd:a5:0e:48:81:17:c6:db:
                    76:40:6a:93:5f:eb:aa:6e:83:9d:5f:f6:c4:e7:74:
                    b2:ad:2a:e7:e3:6c:eb:de:ff:c4:ec:b4:e3:67:df:
                    4b:07:b7:31:fc:ce:87:4f:12:27:23:29:fd:ca:27:
                    f5:db:f4:c2:71:e7:7c:c6:95:75:2c:85:06:83:8a:
                    fa:f5:df:93:62:1a:b9:11:c0:90:af:38:7c:8d:a7:
                    df:c1:0d:9d:be:91:2c:f2:86:2f:5d:42:18:de:1b:
                    5e:87:1a:f8:1a:24:0f:fb:42:d1:f2:60:77:6e:be:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E0:08:D0:8A:7D:C1:49:C1:64:0E:8B:AA:BA:D4:34:31:96:37:9B
            X509v3 Authority Key Identifier:
                keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:19:ac:29:b9:2d:94:0d:10:26:80:d4:07:09:92:88:7d:
         6e:7a:45:7d:4e:28:7d:4d:e0:33:12:63:df:1a:e5:fd:e7:d3:
         9c:ae:b6:5f:de:fd:4c:c7:58:c7:b2:22:bd:b6:c9:b4:72:6d:
         28:b7:ff:0f:9f:85:ad:4e:39:c1:3b:9c:b2:f2:de:ee:1e:d3:
         49:25:84:24:20:2e:ef:a9:49:21:cd:f1:a8:e4:7a:4a:c2:1d:
         38:a2:95:03:95:88:9d:9e:3e:b3:ff:c3:82:be:59:96:a4:cc:
         5c:bd:a7:68:cc:1e:e4:52:1b:21:45:c1:bd:77:f3:93:35:ab:
         df:fa:42:e5:0c:16:9d:14:c4:d5:d6:4a:19:65:30:58:be:66:
         8a:11:ca:da:2b:c0:6e:cc:6d:cb:f4:7a:39:f2:6c:f1:a4:ff:
         a8:1c:17:ac:bc:18:be:77:5a:ab:3a:02:28:5e:4b:35:6c:5f:
         ab:db:31:32:7a:d7:d9:01:19:16:1e:2c:b7:88:ef:d0:7d:d3:
         f6:42:b7:70:5a:92:7a:65:e0:35:60:79:11:42:7e:c7:6a:cb:
         f5:be:ec:78:94:36:2a:65:9f:9b:09:5b:12:1a:a2:2b:95:e8:
         44:92:b2:ad:cf:22:88:e8:57:2b:40:58:f9:63:13:1c:13:20:
         04:7e:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:47 2025 by rpki-client