Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File:                     0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier:          QJRfe2+8Jn+MBlDSarhoCfo+gdoiNa99xsrC/KLKdm8=
Subject key identifier:   19:F7:D7:B4:92:59:BE:2C:38:88:2A:EE:61:A8:F7:DF:DF:7C:CF:98
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer:       /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial:       01984664681C432C7B471740B4E58A8DE097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 11:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:42 +0000
Files and hashes:         1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: xT700O4v2/fZeVq8q8xNY3m1xJ3rjesTzTSktURmK9w=)
                          2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:68:1c:43:2c:7b:47:17:40:b4:e5:8a:8d:e0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
        Validity
            Not Before: Jul 26 11:00:42 2025 GMT
            Not After : Jul 27 11:00:42 2025 GMT
        Subject: CN=19f7d7b49259be2c38882aee61a8f7dfdf7ccf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:18:0f:d5:88:4c:03:87:2a:bc:92:71:be:
                    9a:b3:03:7f:83:61:d9:47:25:87:21:52:5f:f7:3e:
                    68:92:d0:fc:e5:ee:65:fb:d3:99:fc:7d:bf:4a:10:
                    88:cc:fd:14:01:3b:0b:4d:d5:ed:1a:51:e9:0d:1a:
                    6b:1d:c6:f3:68:d9:c9:a9:54:06:aa:1b:3c:2e:02:
                    9f:f2:16:ea:43:85:54:19:a3:fb:42:df:56:71:4e:
                    18:bb:c7:e3:79:dc:b1:8b:24:42:4f:a7:ab:39:fd:
                    08:20:ea:5b:b9:b8:b6:8d:fc:9c:e8:bd:a5:e9:4b:
                    13:50:22:d2:39:8c:c6:46:49:d0:a7:ea:f9:54:73:
                    05:a0:02:0b:03:cd:1e:a9:21:95:08:c2:11:53:18:
                    14:9b:c1:87:aa:c8:c2:e2:d4:12:55:06:d4:f1:dd:
                    60:da:e5:a5:da:93:99:c2:f2:fa:ad:e9:a2:15:72:
                    11:17:72:be:90:0b:7e:ee:39:a8:f6:03:82:13:79:
                    71:f3:79:4d:9c:74:51:f4:ef:d9:19:0f:8f:60:3f:
                    f4:14:b4:6e:da:23:36:34:07:0c:12:8d:6b:3b:b8:
                    6c:52:43:7d:42:b3:41:03:aa:79:c4:af:7b:aa:71:
                    42:46:ac:7d:0c:a4:4f:58:97:e6:87:2c:58:cd:c6:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:D7:B4:92:59:BE:2C:38:88:2A:EE:61:A8:F7:DF:DF:7C:CF:98
            X509v3 Authority Key Identifier:
                keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:5d:23:a7:78:8f:62:ce:3f:60:9e:b4:34:6a:fb:d8:c9:
         bf:e0:75:a7:28:ac:f2:0d:fe:bd:bb:79:e3:1f:e8:4a:0a:96:
         e9:62:6c:e3:36:5a:68:49:9b:83:49:1c:b7:e3:20:5a:55:f5:
         8f:7c:ea:b3:f0:42:5b:33:28:4d:3f:0d:e6:00:d1:f1:3d:ec:
         58:18:13:07:f6:66:2e:c4:a6:79:ec:1a:cc:c6:67:a3:03:c0:
         1b:45:51:5a:cc:4c:68:23:58:98:a8:b2:95:44:14:e1:d2:7f:
         1a:7e:b3:bc:80:2f:d9:77:ff:88:95:31:98:75:bd:1d:96:55:
         df:3e:ac:51:f0:80:aa:f0:16:da:02:12:6c:a8:ec:7d:95:db:
         d3:a9:5e:84:3c:9f:ae:3e:e5:8c:25:e2:90:c3:e2:a5:f4:68:
         7a:ba:01:f4:d2:62:8d:13:55:0e:27:46:25:60:f8:63:bd:b1:
         32:d8:56:29:29:3b:b6:a0:60:2b:c0:f8:f3:06:9c:23:72:24:
         e2:2d:82:67:27:94:d4:a1:52:d7:e9:2d:d4:ac:c9:21:cf:a8:
         72:f9:06:61:0e:d9:2c:6d:d1:7c:fe:b8:f2:b6:26:e1:7e:5e:
         ff:03:e1:62:ac:33:ae:32:8a:1c:9a:86:5a:a3:d6:9a:77:8a:
         38:0b:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:34 2025 by rpki-client