Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
File:                     eXvOmMjjpdL3ViPm8jLzz827Uro.mft (raw, json)
Hash identifier:          P4t4SNmlY2iJ8jC7ybpg8kW1+3CN8dPg6pzsxXcQs/I=
Subject key identifier:   C7:F1:91:03:0F:5B:57:71:50:2E:2F:AC:81:EA:65:A8:F2:E5:8F:59
Authority key identifier: 79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA
Certificate issuer:       /CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
Certificate serial:       01984AAEBD22B4CC92DDA90C7F4BFB108450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
Manifest number:          0A28
Signing time:             Sun 27 Jul 2025 07:00:22 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:22 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:22 +0000
Files and hashes:         1: KwgXZqDYcgh4zXYqaxbQknWHXTU.roa (hash: jIwi+9Rze68vMzWY1H0bY4CpBzrr84g1O5yKXA5KfZA=)
                          2: eXvOmMjjpdL3ViPm8jLzz827Uro.crl (hash: tnGwY4kgjrXXwXhXBIdyZhJAPNYY8sJHDLUxLMBi+M8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:bd:22:b4:cc:92:dd:a9:0c:7f:4b:fb:10:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
        Validity
            Not Before: Jul 27 07:00:22 2025 GMT
            Not After : Jul 28 07:00:22 2025 GMT
        Subject: CN=c7f191030f5b5771502e2fac81ea65a8f2e58f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:92:2b:c3:64:19:6f:76:88:57:25:eb:4f:be:
                    f4:bc:4e:ed:dc:e5:15:fe:62:10:65:c5:0c:34:e6:
                    94:5d:08:53:89:7c:47:cf:64:19:90:bc:67:cc:d0:
                    24:45:f3:7b:65:e6:4f:b5:c4:fa:4c:19:8c:87:6f:
                    33:49:1a:17:eb:cc:7f:0d:44:f7:e2:7d:ba:ae:47:
                    e4:38:2f:55:75:e9:23:e7:5a:67:b5:e5:94:a9:54:
                    2d:af:4c:db:fb:99:b1:f0:5f:df:d1:8d:bb:bb:80:
                    f2:d7:f4:8e:04:31:48:44:03:dd:d5:e8:f5:d3:9c:
                    c4:b4:71:3c:b1:da:de:8e:4f:a5:e2:bf:c4:01:c4:
                    c3:eb:e7:7a:e6:f0:84:4c:c7:82:58:3a:d9:22:1b:
                    49:2f:ff:30:6c:90:c1:12:30:9f:a7:9a:4a:3b:bc:
                    b6:4d:3e:82:c1:02:12:93:04:48:9c:36:b1:1b:b0:
                    b6:63:96:7d:8c:91:1b:15:d7:14:dd:cb:4e:67:8d:
                    22:13:8e:7d:93:58:c4:a3:19:7d:80:26:63:c7:ee:
                    81:3e:27:f6:43:d9:d6:41:6f:ae:2e:cd:81:a8:2c:
                    51:73:54:a0:84:6d:4b:62:a7:ca:66:1b:9e:81:20:
                    58:b0:f8:1f:0c:7e:30:4c:e6:68:f1:86:5d:04:ce:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F1:91:03:0F:5B:57:71:50:2E:2F:AC:81:EA:65:A8:F2:E5:8F:59
            X509v3 Authority Key Identifier:
                keyid:79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cc:ac:dc:be:bb:74:60:f4:dd:b8:cd:59:79:0a:46:b9:69:
         3f:27:48:14:4d:77:4d:01:26:bd:f2:70:3b:a6:5c:d5:7b:5a:
         c9:2e:d5:06:fe:02:04:71:91:e6:7e:31:b9:86:10:a0:43:87:
         a1:9f:f8:d0:ca:b4:1e:89:a6:5c:7d:06:f9:c7:b0:03:1a:fd:
         a3:73:b5:56:f0:0f:ea:3b:11:5b:eb:c6:3a:6a:6e:ca:51:c9:
         ab:0e:11:c7:8f:c9:37:27:c8:ee:88:92:cc:56:79:df:d6:b2:
         2e:b5:ba:41:8a:35:69:f4:c8:be:27:c7:b2:b7:1e:d9:33:52:
         ab:06:78:51:c6:c3:20:c8:88:27:36:ff:40:84:4a:cb:09:b6:
         2f:d9:05:ed:7a:10:6a:75:12:3e:fd:14:6e:8a:44:65:59:9d:
         66:50:61:9d:57:5e:00:ba:fc:55:3c:86:4d:1b:ba:1c:fb:f0:
         9b:cc:6c:ee:5b:22:4c:5e:59:67:70:bb:c0:9f:c9:1b:12:05:
         8d:c1:61:cd:84:0c:ff:02:af:b7:e8:86:25:ee:8f:58:8d:f7:
         b5:a7:46:10:b2:9d:91:7c:16:83:5c:c9:49:33:98:03:24:4d:
         8b:65:e4:d6:94:19:38:f7:ee:ad:03:92:cd:8f:50:29:c1:5e:
         08:e8:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:19 2025 by rpki-client