Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File:                     Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier:          JEQ5iXq8HythR6exa+9SV7oqIEfzKLJku2RZcbhRnfI=
Subject key identifier:   EE:36:DB:3D:59:A6:39:00:6B:E5:48:6F:7C:FC:8D:11:6B:45:EA:08
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer:       /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial:       019848893A23BAA8D183B43588DCB107418A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 21:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:09 +0000
Files and hashes:         1: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (hash: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=)
                          2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: LOnpjjR7sRMGqjBXqtTN4yKSlbWqPfyFVsyf6rFW+Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:3a:23:ba:a8:d1:83:b4:35:88:dc:b1:07:41:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
        Validity
            Not Before: Jul 26 21:00:09 2025 GMT
            Not After : Jul 27 21:00:09 2025 GMT
        Subject: CN=ee36db3d59a639006be5486f7cfc8d116b45ea08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:82:86:d2:10:5b:f0:e0:bf:b4:88:4b:94:
                    b0:06:71:89:08:d9:19:1e:ee:ef:16:fe:8e:27:72:
                    b5:93:cc:ce:73:29:22:ed:f5:74:53:80:a8:0e:5d:
                    f8:66:6f:61:5e:1f:09:1e:42:a9:80:9c:2a:7d:6f:
                    9e:56:7b:a5:9b:51:27:4a:f8:c5:71:1b:b8:b2:14:
                    2f:3c:f8:20:47:fe:b8:18:0f:36:c6:f9:8b:05:3b:
                    58:5d:80:ec:ef:c4:e5:6c:14:8b:81:ba:bc:08:0d:
                    3b:ed:f8:54:68:50:08:9b:06:7d:b8:2f:fe:5c:b3:
                    c5:03:1c:d9:aa:17:57:9c:21:e2:00:0c:b6:86:4d:
                    05:28:e4:b2:18:47:c1:8e:a5:24:3e:b7:5c:64:bd:
                    98:3d:0b:73:d1:49:b5:26:ce:db:c5:91:ed:b6:c4:
                    5d:41:d9:88:d0:42:02:9e:f7:33:9f:1f:4c:b7:31:
                    05:4a:ed:83:c5:4f:96:b5:d1:da:ff:a0:2f:d9:d4:
                    90:52:0a:89:43:18:9d:09:0c:93:e7:d3:0e:61:25:
                    5c:70:5d:fb:5b:9d:77:55:0b:f9:c3:86:d6:cd:da:
                    f6:96:2f:b5:39:49:6a:ea:56:a8:b0:fb:4e:7e:a8:
                    18:55:37:3d:48:43:34:5c:87:2f:76:a0:d9:a7:52:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:DB:3D:59:A6:39:00:6B:E5:48:6F:7C:FC:8D:11:6B:45:EA:08
            X509v3 Authority Key Identifier:
                keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ae:8c:bf:76:9f:9a:cc:eb:37:62:6d:24:f3:43:05:03:b3:
         df:a4:49:ec:7d:9c:9d:54:1b:dc:65:eb:d4:47:c5:79:e7:87:
         7f:10:91:b3:d0:fc:3b:a6:b5:7e:89:73:a6:2c:60:73:42:18:
         ff:32:05:9d:2e:39:af:96:b4:81:c9:09:c9:53:a6:e5:c8:33:
         31:e8:f1:e7:9b:4d:e6:f6:1e:56:9b:10:95:57:08:75:38:a9:
         54:0e:3b:ab:4a:4d:a0:99:51:7c:e4:cb:ae:01:06:60:89:85:
         49:db:d0:c9:3e:b6:31:57:29:42:3f:7f:24:94:f5:1e:0b:9e:
         8b:f1:0f:92:56:a1:0e:7b:88:1e:66:a6:9c:7d:d6:1a:11:13:
         ed:86:63:44:53:c1:5d:af:8e:36:b7:0a:cb:f8:51:fa:b5:64:
         c9:d7:5d:63:2a:0b:c3:c9:e5:2c:d7:e8:a1:8f:e5:40:a6:b7:
         d7:32:9f:59:30:7c:13:1d:93:81:a6:52:15:8e:69:60:38:64:
         1f:50:85:c5:a0:40:0f:21:4f:e3:43:7c:98:bc:0e:61:8b:34:
         44:da:8b:c9:84:13:02:a6:82:b4:06:ba:bd:b6:ed:27:af:9f:
         11:9d:73:41:ee:30:b7:f8:8e:7f:bd:23:f9:af:19:de:26:bd:
         29:00:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:48 2025 by rpki-client