Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          KcH/CTvp2KAKj9/RwvFm2+JJ2uKwet93QAs+tiUFUXc=
Subject key identifier:   88:F2:51:BB:3E:E0:E0:D4:94:BC:ED:3B:9D:9A:9D:A7:D0:91:10:90
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       01984777576B9160DB9B146D3AF1A8FD494B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 16:01:00 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:00 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:00 +0000
Files and hashes:         1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
                          2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
                          3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
                          4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
                          5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
                          6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: yzcRtnYi3/trs5AE53qWnvsEG0Jw6NQE9K4dGRjO93I=)
                          7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:57:6b:91:60:db:9b:14:6d:3a:f1:a8:fd:49:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Jul 26 16:01:00 2025 GMT
            Not After : Jul 27 16:01:00 2025 GMT
        Subject: CN=88f251bb3ee0e0d494bced3b9d9a9da7d0911090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:3d:5d:c3:d0:c2:7b:66:91:c2:f0:46:ea:
                    f4:0a:db:a1:89:95:8d:8a:8e:3d:72:81:7d:65:9e:
                    42:5f:71:84:0a:14:0a:0c:45:47:7f:83:80:82:30:
                    59:82:d0:8e:0b:07:70:87:82:8e:3f:d6:6d:16:e6:
                    f8:2c:78:79:b9:66:f9:b3:6c:e2:f9:57:1b:07:4c:
                    70:61:ad:b7:30:81:8d:c6:84:9f:d3:40:91:67:16:
                    bc:22:9b:c6:fb:fc:04:15:cf:f1:e5:63:36:a8:8f:
                    e6:d8:9c:55:10:46:06:a9:54:2d:0a:33:a2:a2:2d:
                    2a:00:08:7f:ce:4d:2e:16:b0:f0:3c:74:e0:5a:bc:
                    e2:5b:11:aa:e0:14:6f:ea:d1:1f:0a:27:4e:5b:75:
                    09:e8:f9:1f:76:d5:71:a9:77:ce:09:60:55:c2:d6:
                    aa:f1:97:68:37:39:b2:cb:4a:6f:d7:4f:d0:47:ab:
                    fd:a9:bb:90:0d:73:dd:37:18:1d:21:e5:87:00:e3:
                    d5:eb:28:fa:e5:98:3e:0e:44:e7:79:83:a5:91:5d:
                    88:7f:f8:63:69:ad:db:e0:97:36:0d:23:54:b5:b4:
                    16:6a:b6:e8:3d:35:37:09:62:30:17:fe:21:b8:5b:
                    16:63:a0:b5:9a:ee:13:73:16:f6:2e:0e:e3:88:b7:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:51:BB:3E:E0:E0:D4:94:BC:ED:3B:9D:9A:9D:A7:D0:91:10:90
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a6:2d:7a:ed:66:d5:d0:fb:f6:fa:13:a2:73:43:f3:b9:90:
         04:19:77:24:4a:2a:1a:4e:b1:23:9d:00:94:e0:41:f0:50:13:
         f5:47:ea:6a:01:db:75:8e:c1:11:dd:30:49:b4:1a:37:5f:93:
         00:42:3e:6b:b4:67:0d:8c:29:ae:1b:4d:ac:ce:ff:9a:cc:82:
         ff:c5:8d:aa:49:37:48:60:9c:2c:81:8a:cb:bf:04:87:34:5e:
         c3:e8:4d:9a:38:4a:49:41:36:63:f3:9b:fd:e6:e0:74:8b:06:
         b9:58:6d:0a:5a:e1:86:bb:a8:9c:9a:34:49:28:5a:07:87:b8:
         9b:6c:48:ec:49:37:76:68:b8:19:3d:4d:74:3b:ab:cd:15:09:
         bf:9a:87:f6:28:40:7d:ef:35:a4:63:ff:07:b6:75:91:78:a6:
         bc:38:3b:fc:a1:6f:a2:e2:c4:d5:63:2a:20:04:a1:a8:25:65:
         a3:39:de:a0:19:45:c8:5c:a4:16:1c:f5:1b:a4:9f:85:0d:01:
         61:15:23:0a:84:a9:a1:35:ed:d6:70:65:f2:03:dd:a0:7c:96:
         c0:5a:95:ee:a5:4d:cf:4b:76:c0:33:66:6f:bb:e1:80:81:86:
         fc:17:e4:ac:2e:3b:42:ba:5b:14:3a:f6:1c:b1:aa:c7:12:b2:
         68:3f:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:36 2025 by rpki-client