Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File:                     bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier:          lPcFW3BZqDlk1LKwCxeE7nhgwxKtAhTHOo+L/6vOBYQ=
Subject key identifier:   BD:27:41:8F:9F:25:22:1F:EE:DD:F4:30:C4:5B:B4:A5:70:AC:78:2C
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer:       /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial:       019844ACBBA3CE53970D339C2BDC8161F61C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 03:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 03:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 03:00:27 +0000
Files and hashes:         1: BhpMJWOfusOQEVpOrd-46zXykZY.roa (hash: 0YBwZ2xZ2kE/oCS5ZASinXgiSDtB02PggMsq/vyRmUc=)
                          2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: +Vu/lETvhCnA4lDabjrFMAC6I+kbLPYjMxyCunNqmns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:ac:bb:a3:ce:53:97:0d:33:9c:2b:dc:81:61:f6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
        Validity
            Not Before: Jul 26 03:00:27 2025 GMT
            Not After : Jul 27 03:00:27 2025 GMT
        Subject: CN=bd27418f9f25221feeddf430c45bb4a570ac782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:ae:4e:0b:21:94:87:6a:12:60:04:e0:d1:
                    52:c7:5d:3a:00:85:20:c3:92:11:40:44:53:25:32:
                    30:a3:fc:ab:95:d2:b5:73:f1:2b:29:66:9a:5a:f6:
                    24:8e:06:ae:4b:76:6c:a4:49:94:a9:17:ed:e8:51:
                    f2:72:b9:e1:d9:48:57:a8:db:8a:5a:ef:26:69:ad:
                    14:0c:0b:de:6e:c3:26:39:d1:e1:69:fe:a2:5e:b9:
                    f4:df:4b:6d:9c:70:8d:55:a5:f1:93:04:64:72:6c:
                    7e:81:fc:97:a3:c3:51:b8:22:2e:8e:38:59:31:46:
                    5f:ff:3a:36:fd:34:1f:aa:66:62:12:c5:bc:eb:40:
                    23:87:67:ce:31:d3:51:3a:09:2e:13:5a:a2:02:30:
                    86:ef:95:2f:cf:7a:dd:78:32:45:aa:6e:79:e7:e2:
                    6b:97:0d:61:e6:23:55:37:85:f6:9a:8c:7c:e5:29:
                    ee:fa:6f:2e:eb:50:e9:7f:ab:f4:4f:81:b0:d1:1e:
                    1f:7b:29:55:76:3a:2d:e7:24:5b:1b:b9:1b:a3:06:
                    74:51:aa:33:45:95:df:9c:23:70:55:3d:7b:33:c2:
                    68:da:01:5b:55:04:eb:4a:17:0a:f6:ec:84:a6:34:
                    3d:63:6d:fc:88:98:fb:b4:29:00:5f:ad:65:25:d0:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:41:8F:9F:25:22:1F:EE:DD:F4:30:C4:5B:B4:A5:70:AC:78:2C
            X509v3 Authority Key Identifier:
                keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:c9:b1:26:41:13:2c:27:61:2c:76:3a:78:7e:c1:aa:fb:
         fa:b4:f7:b4:06:3f:0d:08:18:7d:55:4d:41:44:fe:5e:93:63:
         1b:ae:b8:74:70:37:af:76:56:d2:5f:1b:bf:9f:95:0e:e2:04:
         04:27:6d:67:ff:00:97:82:3e:99:bb:cd:14:8d:52:d9:4e:4f:
         e5:04:ba:e4:76:b6:68:c0:44:ff:1e:ef:91:7b:37:94:0b:25:
         ca:50:99:ca:a9:d8:77:11:e3:a7:05:54:95:ce:6a:12:43:d1:
         7a:df:ce:1c:7d:7a:f8:c7:f6:d7:95:73:09:95:55:20:01:98:
         5e:91:2b:f9:1f:b0:a7:fd:11:4b:4b:b0:b4:63:74:ce:e8:1b:
         9e:59:d2:b7:e2:60:38:e6:39:e1:bc:43:b8:b7:cf:59:f2:10:
         42:3c:cf:dd:7d:bc:fd:71:02:e9:aa:f4:f6:26:aa:79:62:4c:
         22:26:04:28:14:da:61:bd:e4:ac:ec:b2:a5:2a:31:b1:cd:4e:
         1e:72:9a:3e:41:43:f9:a1:18:dd:7c:3c:35:ae:91:6a:f8:41:
         a1:54:4d:24:b3:6e:0e:ac:1e:6f:94:68:99:62:2c:66:57:0b:
         67:14:2c:c6:c3:e6:ab:bc:0f:67:16:0c:2c:a6:47:da:8b:6d:
         43:31:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:22:07 2025 by rpki-client