Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File:                     zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier:          uik2IqGmaSs4buwUBm0CaB7QAgdD3O85qg6iq/QktIk=
Subject key identifier:   91:77:34:80:DC:4D:7D:71:D8:48:95:5B:42:0D:97:2B:D9:DA:DB:C3
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer:       /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial:       0198499C75F98D3BBED9C7631A3CA2C4FE85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 02:00:47 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:47 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:47 +0000
Files and hashes:         1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
                          2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: F1AMO4z3HivikYcz7BMNVNla5wPTQ+FM6DxZ4nzfyWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:75:f9:8d:3b:be:d9:c7:63:1a:3c:a2:c4:fe:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
        Validity
            Not Before: Jul 27 02:00:47 2025 GMT
            Not After : Jul 28 02:00:47 2025 GMT
        Subject: CN=91773480dc4d7d71d848955b420d972bd9dadbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:02:fe:4b:a2:a2:5d:03:24:85:82:32:a5:69:
                    9f:30:28:c7:a9:a4:e7:93:ce:f5:08:bc:c9:2c:e6:
                    03:35:0e:7d:02:48:f4:e7:b6:73:8e:51:c1:26:63:
                    cc:2b:89:35:06:6a:93:38:b3:a2:61:41:cc:21:5e:
                    dc:c4:dc:06:0c:55:6d:74:b8:20:52:9f:e4:95:d8:
                    8b:90:7b:e1:0a:8d:74:80:2b:6e:76:35:96:a4:52:
                    69:68:25:55:94:89:54:db:9f:56:00:3c:77:be:d2:
                    54:c7:7f:98:e3:21:26:7f:71:b8:68:ec:38:91:4d:
                    76:af:a6:44:d1:aa:81:d5:4e:1a:42:4a:bb:3f:63:
                    69:0f:98:f8:09:07:dd:c6:90:03:3e:4a:d3:db:18:
                    a6:28:c7:ef:ad:1e:55:b8:c1:27:c4:13:99:14:e8:
                    b1:b3:cf:e8:b9:43:a9:41:fc:98:d3:55:53:4d:4b:
                    c1:78:c5:b0:f7:c6:c4:a8:fd:10:98:72:b0:73:5a:
                    22:1b:66:1e:d1:a8:43:a8:5e:23:9e:52:c8:98:e6:
                    a8:87:3c:fa:23:66:0f:63:ab:39:84:cf:d1:0b:28:
                    f6:bf:02:9a:ba:a8:26:24:f5:db:6a:e0:23:fc:bf:
                    89:30:5e:a5:0d:b9:fb:b3:0d:2a:24:71:98:36:61:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:77:34:80:DC:4D:7D:71:D8:48:95:5B:42:0D:97:2B:D9:DA:DB:C3
            X509v3 Authority Key Identifier:
                keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fe:ba:94:ed:0d:a2:96:f5:d7:63:5c:7d:ae:3f:93:73:1d:
         c3:50:ba:2c:67:38:c9:a4:3b:56:53:f7:a9:cf:7d:55:c5:73:
         4d:15:8a:8e:0c:70:da:ef:f7:7a:d4:01:dd:8f:2a:93:8b:63:
         92:9c:f4:5e:d3:2e:58:da:37:01:5b:e2:8c:09:35:23:36:19:
         b2:7a:cb:05:e8:84:69:de:21:66:47:40:1c:71:8b:7d:bd:c4:
         83:9d:0b:0b:40:c9:61:1a:bb:22:46:3b:12:70:f2:36:42:6a:
         58:57:81:b9:00:49:ab:bd:39:da:99:d1:d2:8c:3e:59:0b:67:
         0c:8a:4d:0a:3b:ba:75:08:bd:cd:4a:18:c1:18:64:76:27:e1:
         3d:d3:d6:d5:7b:87:85:1a:28:44:18:93:bf:c9:01:dc:39:b5:
         3e:14:5d:04:dd:d4:21:a1:f4:35:87:e5:c9:3b:7d:99:4e:7a:
         c4:12:87:01:b8:b1:e2:64:51:93:15:07:fc:3a:a7:39:ad:8a:
         a5:b0:36:51:87:ee:29:99:64:e2:ca:0a:b4:35:50:0f:81:3d:
         94:39:e8:8b:a4:4e:d3:a8:d9:d5:50:09:2c:a1:92:1f:53:2e:
         d2:f3:94:b1:82:46:27:1f:a6:2f:29:ba:1a:32:99:21:74:9d:
         70:72:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:11:36 2025 by rpki-client