Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File:                     iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier:          Pav741dSzvG96e5U139PeH7WwqOvSjkfaSg2sozbnZ0=
Subject key identifier:   60:3F:27:17:F1:40:89:1E:D8:8A:0E:17:B5:AF:0E:E3:FC:DA:D4:19
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer:       /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial:       0198530E39D303D8260FC2964A3A66398556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number:          1599
Signing time:             Mon 28 Jul 2025 22:01:37 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:37 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:37 +0000
Files and hashes:         1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
                          2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: XOxRIrwIutrGla8JY1TXRZ1IYs2Y9Gr65E2xaosvAUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:39:d3:03:d8:26:0f:c2:96:4a:3a:66:39:85:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
        Validity
            Not Before: Jul 28 22:01:37 2025 GMT
            Not After : Jul 29 22:01:37 2025 GMT
        Subject: CN=603f2717f140891ed88a0e17b5af0ee3fcdad419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:80:ab:b4:cc:7a:29:b2:7c:f7:c7:52:bd:
                    88:18:43:2f:29:d3:ed:a1:f1:18:4d:76:58:d4:1c:
                    5e:01:2d:1b:03:ec:52:a2:b7:e3:a2:94:4a:26:98:
                    bc:d0:d5:56:b2:75:58:e0:b2:61:95:de:98:92:ef:
                    53:bb:30:76:48:72:c6:0f:73:44:7a:c7:89:ea:9e:
                    5c:b9:37:9a:dc:3d:ad:e4:72:27:12:1e:d8:f7:45:
                    a8:aa:b2:b8:dc:22:5b:13:82:af:65:e3:e3:96:ec:
                    5f:0e:63:34:d6:4f:7e:98:9e:36:cf:59:b1:9c:0f:
                    a1:d1:cf:7b:47:dd:31:15:b1:e9:81:d9:5c:44:f2:
                    5a:c9:60:13:ef:bc:49:d7:1c:3e:53:3b:74:51:0c:
                    d4:b4:d9:8c:1e:b5:27:6f:e3:b7:5c:03:46:11:f2:
                    51:c6:e8:59:3f:36:3a:1a:fb:8b:61:74:84:e2:20:
                    ba:ff:2e:35:55:5d:15:c3:b8:ba:6a:04:79:48:04:
                    a1:fd:45:2e:c4:0d:1a:3e:57:95:3e:64:9b:f3:2f:
                    77:7c:16:22:52:ca:43:95:60:ca:8f:09:77:dd:e6:
                    74:9d:a3:60:f4:c4:bd:28:86:3a:55:a1:91:7f:93:
                    83:cd:ef:35:01:53:f7:b0:b4:40:0f:d5:69:80:56:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3F:27:17:F1:40:89:1E:D8:8A:0E:17:B5:AF:0E:E3:FC:DA:D4:19
            X509v3 Authority Key Identifier:
                keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:ca:cb:22:f7:2b:e6:99:a1:59:52:06:e5:f3:5e:e5:db:
         53:a4:51:fb:5c:34:b8:65:0f:3e:44:aa:a2:52:e9:b8:44:2f:
         87:d6:ef:ba:18:3e:c9:ae:c7:13:2b:10:81:ba:9f:c6:11:22:
         8d:be:ee:84:11:ef:6a:69:33:b8:0d:eb:c6:bd:3c:90:e2:b1:
         79:c3:a8:16:dc:f6:e4:13:eb:fd:d1:33:e2:f7:52:70:92:9a:
         fc:0e:44:3c:7a:95:ff:5b:81:8b:2d:db:aa:a3:7a:e5:1d:11:
         f5:2a:8e:9c:bc:50:2f:cb:c4:05:93:e2:4d:d3:80:52:e5:07:
         22:40:aa:d2:ac:c2:9a:15:b3:cb:ac:5f:03:08:83:77:86:ae:
         f1:d5:b2:07:74:0c:70:cd:ca:bc:7a:20:3d:e2:30:e3:98:43:
         27:94:aa:cd:72:30:73:6a:08:3c:e0:7a:68:15:12:7f:30:e3:
         5d:7e:3e:90:1a:b8:27:0c:95:0b:59:d0:08:bf:db:60:e1:f6:
         ae:01:ea:1c:7d:07:8c:11:99:6a:b7:e7:f9:98:6d:ce:46:42:
         7b:c4:13:5c:d7:0b:89:92:e7:9a:2e:65:91:07:ee:ca:5a:a8:
         9f:3f:18:4f:d2:af:d2:05:41:47:b0:b8:f5:68:ea:15:ed:24:
         52:dd:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:35 2025 by rpki-client