Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File:                     H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier:          /OagIPlexoq2lsCQZD+wKUkTDBe3zbljhZF4X68C24E=
Subject key identifier:   63:D5:29:86:A4:3D:63:AC:1B:82:21:3E:81:CE:F2:69:8D:4F:11:A9
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer:       /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial:       01984A77CF6AF215637DB36654F0CA3D73FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 06:00:22 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:22 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:22 +0000
Files and hashes:         1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: /rI1WZPCD7kXwQOcumC/ip9a6kIhCaabezn1rYAv+Yc=)
                          2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
                          3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:cf:6a:f2:15:63:7d:b3:66:54:f0:ca:3d:73:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
        Validity
            Not Before: Jul 27 06:00:22 2025 GMT
            Not After : Jul 28 06:00:22 2025 GMT
        Subject: CN=63d52986a43d63ac1b82213e81cef2698d4f11a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:19:c4:c0:d7:94:b0:6c:03:71:da:de:2b:
                    fc:ac:64:43:fb:ca:aa:db:b0:9b:ab:02:45:cc:33:
                    2a:76:09:bb:d0:81:96:7b:7b:c2:2a:aa:24:7e:9d:
                    7e:fa:5a:ce:45:72:a3:f2:f6:0d:eb:6b:ae:02:e2:
                    4c:aa:b3:9f:80:2c:0e:45:5a:b9:02:7a:50:14:59:
                    c8:e9:6c:87:f3:c8:6c:4f:0b:b1:07:b1:6c:af:45:
                    9a:f6:18:0b:21:6a:ee:a7:e4:db:ad:2a:8d:f3:5e:
                    0c:24:73:c1:67:9b:98:bf:57:64:cd:f9:77:68:d6:
                    e0:19:ee:a8:d9:21:ac:f4:5b:b5:3f:a5:d4:78:2b:
                    db:6c:a8:e0:dc:49:30:de:92:e4:ff:c0:f1:4c:f9:
                    33:12:63:35:8d:3a:d9:89:bd:5a:e4:71:ee:47:9b:
                    d6:6d:72:e1:67:aa:db:9e:f9:08:b5:70:4a:b6:b0:
                    bc:7c:72:bc:a9:e7:7d:9b:a7:5f:22:1a:cc:18:b1:
                    f9:b9:0a:d7:a6:d7:fa:3f:dd:57:bd:20:cc:64:13:
                    5f:01:77:48:0f:39:68:2d:4f:ea:72:50:6b:74:68:
                    3c:c4:26:23:18:bb:83:88:69:f7:18:d1:84:6f:f2:
                    37:2c:bc:21:2e:f6:e2:a4:a4:1c:35:48:68:96:f7:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D5:29:86:A4:3D:63:AC:1B:82:21:3E:81:CE:F2:69:8D:4F:11:A9
            X509v3 Authority Key Identifier:
                keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f9:fc:19:e6:19:eb:4e:d0:9a:f6:b8:18:c6:27:27:a8:1e:b0:
         aa:51:2f:df:e9:4f:86:5f:e1:0b:de:dd:7d:e7:f0:b2:be:8e:
         8a:85:ba:d3:97:01:55:62:9e:14:b6:48:a4:d9:44:d9:a6:c6:
         0e:1e:d8:f3:2e:3b:ff:e7:83:7d:ff:07:54:dd:52:e5:dd:a3:
         dd:34:e0:ff:71:17:0e:2e:78:a2:c3:84:d9:8e:81:7b:83:72:
         4d:2c:58:5e:fa:4b:5c:40:31:2d:ba:2f:3f:34:07:16:ae:9c:
         7b:81:b8:59:3b:a9:73:dc:2c:0c:38:40:d3:27:16:40:77:a7:
         8e:6f:b4:5c:fc:3a:52:ec:5d:dc:6f:90:f0:a5:f2:64:1f:91:
         51:1b:e9:b2:14:91:ee:96:b0:40:21:d9:8e:98:80:8f:45:54:
         84:0f:6b:45:09:91:c4:7c:46:8c:80:5c:cf:b0:2e:94:e4:12:
         d0:be:94:7c:c2:f3:b7:fb:88:b9:4a:ff:64:16:bf:57:02:d8:
         a7:bc:7a:f9:90:10:06:12:4b:44:c5:ac:65:18:59:a6:5a:ed:
         0b:ce:d6:c6:b7:d1:5b:f0:c5:e5:89:19:f8:fb:a7:90:dd:a8:
         84:b9:65:bc:3d:c0:28:58:8d:be:d0:6b:65:9b:46:66:89:c8:
         6c:c5:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:23:27 2025 by rpki-client