Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File:                     sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier:          2DUSAev3a6i8CYhP7i5NjSC+SEV9wSRnsm1j0ZpxSJM=
Subject key identifier:   AB:A7:05:28:5C:77:05:B3:54:F5:41:AA:6C:9F:AD:5E:B0:EE:8C:14
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer:       /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial:       01984965328EE7FE3DF1C2F54EE6127D865F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number:          1594
Signing time:             Sun 27 Jul 2025 01:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:25 +0000
Files and hashes:         1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
                          2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: 7MOFP1aZ13UibsX9cMUS4jNtTg7rZR+lU6TixyMoInY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:32:8e:e7:fe:3d:f1:c2:f5:4e:e6:12:7d:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
        Validity
            Not Before: Jul 27 01:00:25 2025 GMT
            Not After : Jul 28 01:00:25 2025 GMT
        Subject: CN=aba705285c7705b354f541aa6c9fad5eb0ee8c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:a6:a8:fd:44:40:44:1c:bd:e5:fc:21:7e:
                    86:0e:82:df:7c:32:a4:6d:5e:bf:b0:0f:aa:80:af:
                    57:ac:66:a8:b3:06:12:e4:f9:16:12:61:9f:58:8c:
                    5c:15:90:79:82:33:37:a6:b6:2a:54:e3:db:0e:09:
                    61:54:f9:5f:ce:11:cc:04:a3:62:24:b5:e0:9b:1c:
                    bc:f4:b8:bc:24:e5:b3:7a:cc:70:0e:4c:e8:b9:f7:
                    03:4f:a0:34:1b:02:4c:ea:4f:51:42:12:86:b1:0a:
                    98:07:7a:3f:07:b9:6d:5d:c0:86:e2:0b:f4:fc:8d:
                    00:68:d4:51:6b:52:a2:8e:b3:17:07:44:14:4e:b1:
                    06:00:16:e2:a6:4c:28:65:32:7a:e5:4c:82:51:58:
                    2b:17:2d:0f:b3:e2:2b:ab:f0:c9:37:ce:ac:88:91:
                    0e:55:57:d5:c1:d0:0c:0a:b5:81:3d:82:d5:36:7a:
                    0b:74:a2:17:8a:b2:80:6e:5a:95:ef:95:f9:77:6e:
                    55:1c:18:87:f1:e1:27:af:d2:35:2b:62:5e:be:06:
                    af:48:34:ca:73:f5:b1:e6:52:82:56:5d:d1:2c:6c:
                    f5:2c:6d:10:32:88:b6:99:91:17:05:2a:1f:8b:ab:
                    df:5a:77:98:c8:4b:02:cb:5f:2d:02:46:3f:be:50:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A7:05:28:5C:77:05:B3:54:F5:41:AA:6C:9F:AD:5E:B0:EE:8C:14
            X509v3 Authority Key Identifier:
                keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:61:60:83:a8:66:77:65:ff:68:39:1e:93:f3:60:6c:c4:71:
         7a:a5:2a:cd:e0:43:b6:55:f9:28:ae:fe:7a:31:7f:71:a6:89:
         df:20:d7:f3:16:77:be:17:4d:59:4c:90:1d:73:0b:4e:d0:bf:
         49:81:69:f2:b6:7a:ce:1f:25:af:51:5e:d1:48:35:92:cf:c5:
         fc:e0:45:5e:b8:7c:fe:af:b9:ce:83:82:4d:17:7e:c0:d6:0a:
         41:36:f5:de:a4:05:5e:ac:7c:0d:b3:e6:96:ac:fa:1f:0c:b6:
         55:7e:37:77:84:c8:60:4c:a7:58:11:7b:63:eb:61:1a:50:ee:
         fe:21:ff:11:83:47:dc:ea:4c:f5:33:cd:f1:4d:6a:d5:93:ea:
         ba:a2:eb:f9:9e:85:ee:8f:c6:07:33:4b:90:4c:85:c7:64:ea:
         22:f4:17:e5:85:d8:a6:1d:9a:b8:69:3f:5f:da:33:02:b8:7a:
         a5:09:ef:b6:99:d2:cf:87:61:65:c2:cf:af:03:86:46:cf:d2:
         67:50:cb:06:f4:0c:0f:48:f2:10:b4:11:12:a4:b9:d3:a4:d8:
         1e:a1:3c:5a:2b:8c:46:54:c2:e9:8a:63:cf:b6:81:13:da:da:
         09:0c:39:6a:cb:09:54:ff:13:1d:c1:17:49:14:d7:13:d8:28:
         54:5e:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:22:07 2025 by rpki-client