Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File:                     m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier:          z+I8y5/TAN49P7FZQV4usMPOF7pC7mUid83ei6/Tbqs=
Subject key identifier:   99:06:1B:10:D2:72:C5:D7:79:ED:78:CB:A4:7B:F4:4C:B7:D4:EA:7A
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer:       /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial:       01984965EE48923FFB282256225F37424CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number:          1593
Signing time:             Sun 27 Jul 2025 01:01:13 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:13 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:13 +0000
Files and hashes:         1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
                          2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: IVN8H6zdvG4Sa4RaTDZd4YMMZRKSnVz2VWe3hzVZXlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:ee:48:92:3f:fb:28:22:56:22:5f:37:42:4c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
        Validity
            Not Before: Jul 27 01:01:13 2025 GMT
            Not After : Jul 28 01:01:13 2025 GMT
        Subject: CN=99061b10d272c5d779ed78cba47bf44cb7d4ea7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:4f:56:dd:38:e4:a4:ce:59:a8:95:73:3f:
                    ef:9b:cb:d1:96:c8:c6:7e:8c:3a:ba:eb:e7:1e:ea:
                    60:aa:f3:49:74:eb:44:3c:be:eb:b5:fc:56:ef:1b:
                    31:b8:b1:78:e7:59:fa:2e:11:0d:2b:c2:da:63:7e:
                    18:db:5b:72:b0:e1:48:91:42:87:97:16:a0:e7:a7:
                    0a:98:8d:98:37:50:dc:02:92:f0:3a:49:9e:b5:22:
                    36:f8:4e:53:61:54:a7:16:c5:96:58:21:d9:6e:f2:
                    20:6a:81:1c:0a:c9:8e:23:a7:a9:0c:3a:74:6a:fd:
                    82:ed:bb:63:c5:eb:9d:86:6a:00:45:45:7e:41:21:
                    44:cb:ca:cc:fb:77:64:90:b9:88:ef:ee:50:5a:2b:
                    d4:3b:91:a9:a4:3d:92:99:1e:eb:02:7c:72:35:db:
                    4e:3f:7b:0e:26:8d:68:59:a0:68:25:28:ac:5b:99:
                    15:a0:4c:68:f1:79:a0:35:55:fd:54:f8:c8:de:ad:
                    27:13:36:ca:9d:ca:f3:bc:20:e6:28:0a:41:12:fb:
                    96:55:35:d4:79:70:ed:ee:ae:83:c7:6d:62:c8:bb:
                    38:77:ca:9d:02:4a:10:cf:e7:6d:61:a7:41:54:4c:
                    66:f9:e9:82:eb:2b:f4:66:66:42:52:68:8f:86:ff:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:1B:10:D2:72:C5:D7:79:ED:78:CB:A4:7B:F4:4C:B7:D4:EA:7A
            X509v3 Authority Key Identifier:
                keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:50:50:76:31:41:1a:d3:b7:c1:25:80:9f:66:40:50:a3:
         93:4c:91:98:1b:d6:bd:ef:27:ed:01:1b:2a:61:29:6b:59:7a:
         61:bf:13:d4:4b:88:f2:e8:0d:1b:7c:50:11:05:79:c8:21:9f:
         ac:b0:f8:07:f5:6c:c7:f5:25:fb:41:f4:cc:e2:67:6a:a0:a8:
         ed:f0:0a:6c:78:d9:b6:45:2c:71:8a:32:c8:5c:3c:f5:f0:3f:
         a3:63:ab:72:98:bc:a6:48:f5:e5:75:4c:6e:b2:ab:13:b0:6f:
         a0:4b:6c:e1:df:e0:d2:91:f3:e5:ab:56:48:a5:94:69:ad:11:
         55:2c:61:eb:06:0c:73:fd:c0:17:0a:8c:66:bf:81:5a:ea:b3:
         9a:41:6b:35:bc:ff:99:fb:1c:78:5b:c2:f0:f3:f2:ca:72:a5:
         05:c8:64:ab:d6:7c:0e:54:22:b5:84:56:c0:6f:0e:29:18:87:
         96:1e:bd:7c:3b:26:fa:c1:c6:d4:e2:29:a7:7b:14:17:49:59:
         80:42:52:87:27:01:1b:eb:fe:44:53:82:3c:18:d7:c5:18:e9:
         3a:57:60:35:63:1c:62:67:3f:27:bf:6f:6d:ed:dc:b1:c9:a4:
         5c:ae:3f:4b:ae:b8:09:55:69:2e:7a:d5:ab:8b:2f:82:b3:fd:
         3d:3a:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:06:47 2025 by rpki-client