Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
File:                     px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json)
Hash identifier:          smUpjle7z4nP2rjQ7BlE4gVq392RkXR0KLrMaKnrGL0=
Subject key identifier:   08:93:E6:BD:21:52:8B:B5:6F:60:02:F6:10:C2:67:81:5D:3D:C4:1A
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Certificate issuer:       /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial:       01984A40D57C365BB936C59605F012CE3ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 05:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:19 +0000
Files and hashes:         1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=)
                          2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: D09AQ/og8j0rlWyP77KbmQ3pFJXKW48eHs5ERi0Owgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:d5:7c:36:5b:b9:36:c5:96:05:f0:12:ce:3a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
        Validity
            Not Before: Jul 27 05:00:19 2025 GMT
            Not After : Jul 28 05:00:19 2025 GMT
        Subject: CN=0893e6bd21528bb56f6002f610c267815d3dc41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:8e:5d:cd:ad:de:19:75:01:77:32:0a:e1:
                    a9:50:71:96:ec:8b:b9:88:71:c8:06:2c:04:74:af:
                    47:ee:a5:74:29:d3:50:8f:dc:fb:a5:6d:b7:9b:fe:
                    63:8a:7d:6b:8b:66:09:2b:75:43:a4:a5:0e:c3:15:
                    e5:80:91:cc:b4:ef:64:bf:31:19:01:67:fb:4c:6c:
                    9f:c2:a6:db:c6:ab:5b:91:2c:51:7c:06:85:4f:eb:
                    54:ce:d1:5c:a6:32:a5:7a:3d:c5:4f:bf:60:ca:a5:
                    7e:ef:a2:dc:80:0e:37:6e:cf:b6:95:c6:ef:58:a9:
                    95:66:c7:2d:a5:2b:6b:f0:97:c0:b5:7e:c0:5b:a5:
                    bf:ec:6e:50:67:35:b6:5b:64:0c:bd:53:ed:4c:f7:
                    0a:be:bd:0a:c1:ce:a0:fa:2d:3a:1c:a8:00:a2:83:
                    cf:32:28:1c:0f:38:80:4d:cd:a9:68:2c:38:77:cd:
                    06:f6:9c:87:73:e6:4d:c1:1f:f0:d3:1b:20:7a:8e:
                    82:a8:f3:3e:dc:44:25:e3:7f:55:94:08:49:ed:6a:
                    b9:6f:8e:aa:d7:b4:9f:2a:b0:64:b2:66:84:1a:c2:
                    d1:7b:76:e3:5c:22:e8:e2:30:1f:8a:ed:27:8e:a8:
                    db:49:0c:e9:1e:f7:37:b2:10:86:1c:61:fd:1c:f6:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:93:E6:BD:21:52:8B:B5:6F:60:02:F6:10:C2:67:81:5D:3D:C4:1A
            X509v3 Authority Key Identifier:
                keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:91:a5:3f:7f:ce:eb:6d:50:23:cd:0c:c0:8a:e0:a5:d4:26:
         90:40:82:21:3a:ce:44:d9:0e:1e:34:89:20:4b:0a:3b:7d:c1:
         17:51:b9:77:de:fa:ee:65:f2:e7:ba:37:6c:a4:53:50:3e:31:
         98:8b:10:dc:20:02:63:59:31:3b:4a:d2:ed:0b:65:d6:2f:7a:
         91:d3:4a:2e:5d:03:e2:b5:3f:b1:c3:a3:be:b8:4d:9e:a2:b6:
         ab:c7:0a:40:67:b8:80:80:6d:f4:73:bd:5f:ce:8d:16:4f:58:
         58:24:ff:90:f6:71:ad:2d:b1:6d:4d:c1:6b:45:97:ff:c8:cb:
         1a:38:fa:ad:ba:60:e9:3c:db:02:db:ae:2b:88:a0:2b:af:b1:
         d3:33:88:d3:36:bf:b0:1c:68:f5:16:14:2c:cc:d8:3e:d1:82:
         3b:69:70:d5:c9:31:c3:f0:a6:4d:fa:bf:84:98:77:4a:3a:32:
         36:6d:77:3e:90:b3:b4:3e:17:70:90:ca:aa:a4:1a:71:77:ec:
         3f:1f:de:c4:52:13:d5:a4:ce:4d:87:7b:cd:e2:d1:45:b7:47:
         fe:2d:fe:7c:b1:f1:6f:26:c6:b5:ca:a1:33:7e:87:ec:e8:59:
         c1:d1:63:b2:37:cd:02:99:be:bc:25:bb:47:30:e4:ea:e0:f6:
         fa:53:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:13 2025 by rpki-client