Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          n0qRCMUZtWy/Wu2TugA0/YGePjm/GGaJsgCHER/R+HU=
Subject key identifier:   47:7A:ED:2F:89:C8:8E:62:40:90:92:F4:88:12:51:81:59:30:8E:FD
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       019847E4C39F7989F869A359DA51BB37A355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 18:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:31 +0000
Files and hashes:         1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: JsZVOWxTpVWrFKv1fGmfvMu6GmFGVBjjDJB68J0iRt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:c3:9f:79:89:f8:69:a3:59:da:51:bb:37:a3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Jul 26 18:00:31 2025 GMT
            Not After : Jul 27 18:00:31 2025 GMT
        Subject: CN=477aed2f89c88e62409092f48812518159308efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:0f:22:90:7f:05:17:1e:58:7c:1e:d2:6c:
                    ed:26:b3:15:63:e4:66:91:fd:d5:62:9e:86:1d:40:
                    db:97:1d:46:dd:34:e8:88:9d:25:5e:97:d6:bd:78:
                    d0:e6:55:e5:1a:7c:61:f4:fe:33:6c:da:03:0c:cc:
                    ec:49:2c:26:f9:fd:4f:1f:d0:71:b2:6e:78:e5:37:
                    08:25:1f:2b:68:9d:0a:4a:dc:81:74:e9:e8:38:18:
                    50:a8:c1:d9:9e:c1:58:6c:40:b4:1b:07:68:ec:d9:
                    be:7c:c7:ea:be:f2:5c:56:6f:60:e9:65:e3:66:44:
                    38:03:fe:b7:33:49:0a:3a:26:0d:95:4e:9f:f2:bb:
                    7c:a9:b9:47:83:d1:e0:05:e3:99:73:28:6f:47:4d:
                    8c:65:ee:67:2e:3b:07:68:1c:ed:16:50:25:e9:f1:
                    cf:50:6d:d9:47:89:96:ee:fc:e7:17:1d:f5:8c:64:
                    00:56:7f:2c:5f:15:18:4e:a0:54:20:96:c5:53:73:
                    70:12:0d:f9:1d:38:2a:1c:3f:f4:65:24:7d:94:04:
                    5e:84:88:da:02:d4:bd:38:5c:a7:1d:d3:61:84:d9:
                    83:cd:68:1e:b0:f6:3f:d4:56:40:f2:0c:82:30:b2:
                    2a:dd:81:73:9e:49:1a:81:7b:05:bd:e8:22:cd:10:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7A:ED:2F:89:C8:8E:62:40:90:92:F4:88:12:51:81:59:30:8E:FD
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:f9:0f:9b:f2:1b:49:77:16:fd:dc:1d:bb:fb:a4:6e:0c:
         78:33:32:0a:b1:f3:ea:6a:ea:f7:4c:e0:61:d1:da:75:26:f5:
         37:7a:90:d7:d4:22:77:9b:e6:48:a1:0e:c3:9b:a9:26:e4:f8:
         69:15:cd:66:1e:9e:ee:d7:a6:45:c1:e4:12:5c:93:44:db:8b:
         80:43:34:ea:5e:38:f0:69:3f:a0:b2:4f:69:17:86:c5:48:3b:
         3c:5c:b9:25:57:0d:38:d0:72:27:09:a0:ae:93:cf:ec:17:42:
         55:bf:0c:14:2b:cc:af:c7:5f:18:2a:7b:f3:f0:8e:a4:5a:63:
         36:57:1a:0e:2f:0b:db:86:f2:a4:4d:9c:8a:7b:d8:7e:83:0e:
         3d:b9:76:c5:97:f0:c9:2f:7d:a8:a7:5f:31:63:2b:0e:4c:b3:
         cd:fa:55:20:2c:85:36:87:ec:dd:06:43:1e:b4:bd:bb:c2:7f:
         ba:1d:1b:5d:5d:30:04:33:1f:72:41:f2:4c:8f:3e:94:33:95:
         5f:27:5a:f6:31:e5:21:ec:8c:a9:c9:fc:97:f9:e2:30:34:31:
         cf:f4:b2:e4:70:f7:97:ba:2d:1a:78:3b:71:81:30:4c:8a:50:
         51:23:8c:1d:b0:55:53:19:91:34:d2:6f:fa:e3:17:c9:52:ab:
         4d:e7:d3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:17 2025 by rpki-client