Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
File:                     IBBUhPGH8gh9Egytlx1oLbMVmWU.mft (raw, json)
Hash identifier:          f9HZHNis2Ak4+n2+Ymob5pwqCPhcHWjsHFNUrlgLiaU=
Subject key identifier:   7E:B6:69:9D:77:E8:7E:49:69:CF:1E:7F:65:39:31:B2:F7:B8:C7:02
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Certificate issuer:       /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial:       01984A779AF67A9BB29DD72565D6C48E8CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
Manifest number:          01A4
Signing time:             Sun 27 Jul 2025 06:00:09 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:09 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:09 +0000
Files and hashes:         1: IBBUhPGH8gh9Egytlx1oLbMVmWU.crl (hash: nCsG5sT7/TuKX0phtxUUuH3GPmyS43mMp/PkDYT8GR0=)
                          2: Rh0IEx7nLGjWZjM91m5L9ROERFI.roa (hash: ueZbxYCJshLwHxcAfnLZtqfa1hKKEGpxZF9hNshflTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:9a:f6:7a:9b:b2:9d:d7:25:65:d6:c4:8e:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20105484f187f2087d120cad971d682db3159965
        Validity
            Not Before: Jul 27 06:00:09 2025 GMT
            Not After : Jul 28 06:00:09 2025 GMT
        Subject: CN=7eb6699d77e87e4969cf1e7f653931b2f7b8c702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:5d:25:0e:eb:d5:19:2c:b3:6d:dc:02:bd:
                    d3:ed:5e:b4:f4:59:e3:73:b8:3f:7e:0f:26:fb:d8:
                    99:f5:dd:2f:5f:ef:24:14:98:09:40:a0:be:d2:0c:
                    e7:4f:98:14:a6:b8:c6:8e:d7:ed:36:05:f9:c5:c3:
                    11:f2:29:6e:dd:bc:4a:24:f2:c1:7c:43:f6:73:0c:
                    7b:68:80:1e:14:f2:df:5b:40:41:f0:0e:3a:c4:3e:
                    6b:7b:3e:29:54:26:c2:a7:ad:11:2e:18:00:94:d0:
                    e5:7d:ba:a4:7d:a2:f8:6e:07:1a:27:1d:e4:ec:09:
                    20:4f:b3:b3:67:82:26:f3:cd:e6:4f:d9:87:bd:0f:
                    e8:56:4d:c3:2c:d2:83:40:55:33:c4:59:bb:88:ed:
                    36:05:15:75:7c:51:ff:68:6c:ad:64:09:8a:ad:70:
                    85:a2:9a:b9:66:e4:60:c1:ed:b8:bd:11:41:ee:b2:
                    03:9e:70:71:f0:c4:c8:8c:89:20:e1:d4:68:bf:b7:
                    2c:7a:50:cb:6a:25:91:f6:a5:38:fb:8d:f3:af:f6:
                    85:ee:75:c9:28:45:6d:52:bc:40:04:22:d1:98:cb:
                    5f:a8:e3:c5:74:e9:8b:9b:66:c2:08:5d:c4:ea:ee:
                    c7:c9:67:98:b6:47:bc:3d:24:a4:30:6e:bd:58:23:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B6:69:9D:77:E8:7E:49:69:CF:1E:7F:65:39:31:B2:F7:B8:C7:02
            X509v3 Authority Key Identifier:
                keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9d:93:ca:c0:f7:80:c6:cc:8f:70:ec:5b:be:e4:4f:c0:08:
         c4:3b:f6:4a:38:2a:6d:7c:10:49:cb:04:d8:3d:e4:f5:56:f7:
         7b:67:a7:3b:75:a5:5e:f2:1d:78:af:a8:97:8b:92:e7:55:e6:
         9b:e8:ea:57:cb:84:fc:2a:e5:f3:c3:86:c4:30:86:63:b8:7e:
         46:f7:8a:ce:59:d4:13:1d:c6:9f:6c:fd:f1:0a:43:df:c5:95:
         c2:45:d4:d3:71:92:5d:01:17:20:54:fb:c2:36:f9:c1:f4:6e:
         12:ba:4b:59:d9:40:d2:f8:33:74:aa:52:28:e2:92:90:89:b6:
         e4:34:d0:05:8a:5e:b5:32:ae:87:cd:85:7b:66:7d:bc:0d:e7:
         f1:55:7b:5e:26:bc:73:4b:d1:11:ce:f9:58:7a:5a:93:65:26:
         40:f8:27:56:91:61:e4:35:11:0c:fc:84:7a:67:46:59:06:e9:
         38:0d:29:a9:9b:99:35:65:1b:1e:58:a8:d0:30:a1:b4:f9:eb:
         a9:b9:81:d6:11:6e:0b:ab:f2:35:b2:f7:cc:4b:26:14:b4:cc:
         07:2d:10:d5:11:3e:b3:e7:19:6c:53:d1:0b:b7:7c:9f:73:73:
         fb:1f:9e:aa:65:ba:c3:5d:ed:d0:bf:c5:33:3a:6a:0c:61:4b:
         bb:ea:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:12 2025 by rpki-client