Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File:                     10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier:          Pg4802karEVtguy2sXrzl9A/qzPUkcjcxznHFom6a1U=
Subject key identifier:   36:29:1E:6A:D2:9F:B3:D2:89:51:10:6E:89:D4:94:00:EC:02:9B:CE
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer:       /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial:       019849D3193BD6BD6DA2453B5EE7C402A9D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 03:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:27 +0000
Files and hashes:         1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: bqcmQ4GN9v15uFdshN9w1WMeSyycGDDonhwdHRJlWSk=)
                          2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:19:3b:d6:bd:6d:a2:45:3b:5e:e7:c4:02:a9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
        Validity
            Not Before: Jul 27 03:00:27 2025 GMT
            Not After : Jul 28 03:00:27 2025 GMT
        Subject: CN=36291e6ad29fb3d28951106e89d49400ec029bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:87:07:1f:ad:42:81:eb:c4:28:57:2f:25:
                    28:99:4f:0d:ae:c2:70:bf:78:2c:34:4c:a1:00:24:
                    5b:9f:40:af:15:50:fd:2e:b2:6f:ae:c7:69:8b:8b:
                    6b:7e:5f:5b:27:9c:87:47:ea:2e:f2:c4:e8:8c:c2:
                    76:3d:3b:62:76:32:80:74:a1:79:70:0e:14:80:d7:
                    d5:a3:c7:f9:c8:e0:66:9b:4a:29:58:c8:9b:81:7d:
                    10:c2:46:7b:3b:7e:f0:26:18:50:aa:69:3f:18:c4:
                    23:3a:e1:6b:9b:c7:79:3f:9b:fa:87:b7:8f:ef:05:
                    d9:0c:b7:71:c5:4c:3b:56:12:e4:50:e5:6f:1d:29:
                    41:9e:86:0f:7c:8e:a4:b3:49:18:c8:72:f1:ed:24:
                    d8:39:e4:d4:db:4d:ea:9d:27:f7:86:f3:77:fe:71:
                    9d:65:3f:03:56:df:14:27:56:3b:28:3f:ca:03:bd:
                    58:8c:57:aa:2f:95:9e:db:cd:7d:5d:f8:14:07:cb:
                    7e:92:43:62:94:b3:88:68:b8:8b:bf:e4:95:75:67:
                    cb:98:a4:fa:db:d1:4f:54:52:36:70:d7:df:e6:45:
                    25:ec:f1:50:72:c1:98:d6:63:f3:29:e2:7b:7d:15:
                    5d:80:2e:7a:36:b6:83:b6:9b:22:86:6f:de:3b:55:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:29:1E:6A:D2:9F:B3:D2:89:51:10:6E:89:D4:94:00:EC:02:9B:CE
            X509v3 Authority Key Identifier:
                keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b4:d1:bf:75:29:6c:8d:3b:72:15:a0:aa:a6:75:18:83:de:
         de:f6:42:8e:e4:f9:f7:11:7e:c8:d9:9f:2c:2c:17:05:4d:02:
         9d:d8:58:ac:23:a8:0b:33:4d:4e:64:e1:4c:aa:82:ef:ed:b0:
         7c:0f:66:ec:52:9e:a7:27:4e:dd:83:19:5c:de:da:5a:13:57:
         07:38:49:97:46:a7:f4:05:4f:46:7d:f2:42:0c:61:c7:20:82:
         53:19:4e:e9:5d:03:86:ea:1e:1f:39:d1:00:d1:f5:d4:13:71:
         82:c2:76:df:98:22:c5:3f:40:03:4d:c1:a9:16:b8:b7:cd:d4:
         dd:ef:8c:35:24:23:2c:46:f5:62:70:9c:27:c1:40:90:60:e2:
         67:89:a3:d3:15:f3:90:83:38:51:94:5e:15:6e:4f:b5:ae:c0:
         6a:b9:af:5f:96:04:8d:08:22:fe:f5:7e:e2:8e:10:06:4a:83:
         0c:a6:46:57:5a:98:f9:67:41:e4:ae:03:1b:8d:0d:91:50:d8:
         b8:59:f0:68:88:78:ba:e7:c8:d0:76:d3:6b:0c:fc:bb:08:77:
         70:93:f9:07:7a:ca:e5:6b:19:5c:de:1e:1f:14:6f:34:80:47:
         83:a9:e0:b6:9b:c5:93:3d:a3:1a:e5:23:6f:5c:8b:e2:5c:30:
         85:ef:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:26 2025 by rpki-client