Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
File:                     R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft (raw, json)
Hash identifier:          fNy/6hY0dGiJvpLE9PWJ8i6/a07uO/A+EiCfQjuajKU=
Subject key identifier:   6F:FD:64:DC:73:E0:2F:F2:CC:33:A5:E0:EE:90:F6:34:27:76:67:21
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Certificate issuer:       /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial:       01984AAEE0718E40986ECCA7D566CAF58848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 07:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:31 +0000
Files and hashes:         1: 6CJuWYcvaw-acDsC8fypVGv6nZs.roa (hash: wT9pXkMIK5iq/Fr3VYtO4ReEPTUzPvr9i2oggz8Pizc=)
                          2: R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl (hash: y+FHU3GXtSguYga5vMY0ujBa1UEKua2mjSd8flEIy+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:e0:71:8e:40:98:6e:cc:a7:d5:66:ca:f5:88:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
        Validity
            Not Before: Jul 27 07:00:31 2025 GMT
            Not After : Jul 28 07:00:31 2025 GMT
        Subject: CN=6ffd64dc73e02ff2cc33a5e0ee90f63427766721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:be:b1:15:fd:d9:81:f5:53:fe:af:45:3a:
                    c8:61:39:39:95:8d:96:ae:de:36:4c:6c:69:f2:77:
                    f9:3e:4e:3e:48:15:69:b6:e8:c9:27:8e:19:84:10:
                    4a:a4:74:c0:df:2b:f3:09:ec:c8:f2:db:5c:cc:ce:
                    cf:c3:15:25:0b:c8:66:fd:be:4f:f3:89:3a:c1:7b:
                    a9:77:14:96:5e:72:4e:b8:68:9f:22:0e:d2:6d:a0:
                    4b:1a:93:a4:73:30:13:09:64:85:f0:b7:2c:33:6b:
                    b6:c2:1a:19:b2:ea:2f:97:ff:3e:c5:66:de:d0:37:
                    7d:99:86:ef:37:49:f6:c9:b6:c9:09:46:07:28:0b:
                    aa:3f:b3:57:c7:b6:bb:8d:8c:15:80:f9:99:92:d0:
                    39:91:11:99:8a:bb:c0:f5:4d:54:37:64:d6:64:10:
                    43:4f:5c:32:2d:15:33:7c:c3:68:76:24:64:e2:e7:
                    dd:44:b8:c2:eb:f4:9f:44:43:e5:bd:f3:d2:81:1d:
                    3a:75:ac:d9:f7:5c:2b:d0:a0:dc:7e:10:64:12:05:
                    87:20:cb:b7:cc:9c:bd:50:5e:28:61:fd:df:71:95:
                    b8:f7:33:9b:45:de:bf:0a:29:77:f1:e2:e3:8b:9c:
                    c0:28:2c:4f:37:ae:02:af:c1:b7:d6:ca:38:80:97:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FD:64:DC:73:E0:2F:F2:CC:33:A5:E0:EE:90:F6:34:27:76:67:21
            X509v3 Authority Key Identifier:
                keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6f:cb:3c:e4:42:11:aa:9b:40:40:2f:37:21:58:6b:89:7a:
         98:c4:1f:af:df:f8:0e:79:86:2d:63:a6:0f:bc:43:84:76:29:
         41:46:61:ae:8f:3a:8b:fa:1f:cc:3e:87:17:b9:5d:07:5d:be:
         cb:40:20:5c:d1:a7:42:1b:75:c4:a9:07:9a:43:56:af:fb:53:
         60:08:29:96:66:45:9b:43:b6:f3:03:80:02:a5:be:04:50:ac:
         ff:da:f1:dd:43:0f:b5:90:31:4d:d1:18:12:be:dc:c8:ae:4f:
         d3:c8:d1:ed:4f:df:cf:20:15:ee:4c:cc:74:1e:07:6d:ef:62:
         57:fa:f8:75:d0:84:45:6e:8d:a3:b3:25:16:55:26:3b:42:84:
         ef:04:85:44:1c:fe:c9:71:82:c8:56:73:f5:2b:d9:2a:6b:a6:
         0c:7b:b2:05:1b:f2:7b:d0:f4:e7:b0:8e:70:27:82:56:d7:fd:
         23:ab:82:40:ca:e1:5e:d3:a7:8f:b2:50:8d:61:d1:9f:0c:6b:
         b8:d0:7c:39:00:37:5e:09:76:05:e9:98:02:bd:f0:bb:2d:81:
         5c:f7:a0:5a:b5:cb:94:bd:73:27:00:4e:4f:18:f7:2d:4d:f7:
         20:3b:3e:6e:23:cb:0b:dc:c4:30:0b:d3:8e:c0:58:0e:4d:ba:
         9e:a8:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:24:21 2025 by rpki-client