Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
File:                     cke6Q-JwyYvcZCqePCGMpSTrD1M.mft (raw, json)
Hash identifier:          euJD0XXw2WyjMwjUwdQaCF3HXiIZ7msSClCZhnLjfIE=
Subject key identifier:   AB:21:DB:3F:5E:38:8E:F6:7A:58:3B:34:7E:0C:53:8C:EC:F9:4A:1C
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Certificate issuer:       /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial:       01984A77C86C4FD66DB463546FB46F302701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 06:00:20 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:20 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:20 +0000
Files and hashes:         1: 1SSRPhQGWDVRDl7tVf5cgz9wb9I.roa (hash: cAcXHNB5q2899YSFSUe/YwygvaFymSVR7Dvr6t//gOI=)
                          2: cke6Q-JwyYvcZCqePCGMpSTrD1M.crl (hash: ePFvWPF6Pv5VhB0J1sYf7L4Vo+eV0+mJr8+jb/wFVIs=)
                          3: icOqkD3iZ1uQhUc1od-t1KdaP8Q.roa (hash: R662CVA1MQV0WqGE3hZcMqQgQJpHzJMBr1PqZkwqav0=)
                          4: nYSUhhKNV1AT2H-4naVza27ZDOA.roa (hash: o6xNr5Ke3qqZYzCqrvTkv0D8Qt/kg5dwkN1dH2Aaq3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:c8:6c:4f:d6:6d:b4:63:54:6f:b4:6f:30:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
        Validity
            Not Before: Jul 27 06:00:20 2025 GMT
            Not After : Jul 28 06:00:20 2025 GMT
        Subject: CN=ab21db3f5e388ef67a583b347e0c538cecf94a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3e:e4:38:12:78:b3:67:cd:d1:63:f4:89:f5:
                    02:47:08:47:e5:ef:81:fa:f1:52:8e:73:a8:87:01:
                    c4:41:e0:f9:45:d1:36:29:11:45:7f:2b:00:60:1c:
                    0e:b4:7d:84:6d:c9:90:67:95:df:e4:d7:23:ef:6d:
                    fe:40:93:b3:ce:42:24:c9:27:e0:f9:f5:b6:dd:bb:
                    38:25:a3:ec:ca:dc:a7:bc:dc:dc:de:51:42:77:17:
                    06:21:35:ed:41:fc:98:13:ba:47:ae:97:90:5f:18:
                    21:d9:7f:c5:e5:3a:a4:81:1f:d1:a2:d5:84:88:4f:
                    5e:06:eb:a6:1c:10:49:f4:a4:d8:40:61:a0:e3:58:
                    aa:d4:1b:a2:89:cb:4a:df:54:6e:26:17:01:d2:66:
                    98:1e:ee:36:a9:54:a5:3e:e6:a9:0c:3a:a4:46:d8:
                    5e:a9:9c:05:8f:91:44:b0:68:4a:bd:ba:86:ab:23:
                    68:54:5a:7f:58:1b:d7:c0:9d:84:6c:dd:75:7b:2c:
                    b7:2b:ab:e2:f9:3f:7c:a2:4e:3e:d0:b4:2b:cc:ab:
                    da:cd:15:f2:f9:9e:51:8e:95:5d:c1:27:96:3c:24:
                    f7:21:fd:fe:87:da:50:4f:25:e8:08:3b:40:4e:e1:
                    f5:df:71:42:09:c0:a6:6e:80:1a:bd:7b:d0:78:c9:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:DB:3F:5E:38:8E:F6:7A:58:3B:34:7E:0C:53:8C:EC:F9:4A:1C
            X509v3 Authority Key Identifier:
                keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2a:31:df:46:fa:54:05:09:24:5a:f8:f8:04:90:77:2b:fd:
         f3:e4:a1:15:ee:b9:06:ff:4f:f3:14:7d:0d:00:97:14:7e:42:
         3c:aa:78:d3:ff:f6:b1:9f:0d:7d:3c:3a:39:0f:03:5d:9b:71:
         28:47:db:48:02:1d:d9:f2:74:7d:fe:98:c8:ff:a5:2e:75:85:
         2c:39:7d:cf:b5:e2:83:2d:a8:71:41:e3:0b:66:e4:88:77:a5:
         b8:37:43:d9:fd:81:42:c8:54:b2:88:5d:6c:12:50:3a:f7:9f:
         d1:29:58:5c:71:86:37:9f:9a:df:4d:67:7f:24:9a:12:6e:50:
         06:ef:31:26:9b:56:b3:a2:64:b7:38:4c:0a:56:4c:08:74:b8:
         f6:94:fb:a0:b2:64:82:39:c8:11:88:6b:f8:e6:3f:2c:43:87:
         ba:62:34:39:64:54:e5:9f:9b:55:d2:d6:df:52:90:9e:d5:0c:
         34:8f:d4:5f:fe:b1:32:a3:68:ca:de:14:20:5e:4c:f7:51:82:
         ce:ad:34:39:5b:12:8e:c4:8c:d7:3e:9a:75:86:c9:ea:15:86:
         ac:1b:31:7c:34:b3:d0:52:76:78:09:38:03:28:ae:00:3d:dd:
         57:4e:34:58:92:81:65:98:ad:2d:cb:de:7e:ba:d9:d6:ec:41:
         f1:81:e7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:50 2025 by rpki-client