Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          M61Ef/tbESC0ffLISun6s+emUONHAlxbBJPZiZqALm8=
Subject key identifier:   C4:79:40:35:15:61:01:74:DB:AB:8E:32:0E:10:62:C9:BA:DB:59:14
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       01983D611ED374C9BFBC2ADB746E17F14539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          1162
Signing time:             Thu 24 Jul 2025 17:00:31 +0000
Manifest this update:     Thu 24 Jul 2025 17:00:31 +0000
Manifest next update:     Fri 25 Jul 2025 17:00:31 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: FADv518mHXDyXWw1VWx1laNWFSxIIHhGWyhiVExNKsA=)
                          2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3d:61:1e:d3:74:c9:bf:bc:2a:db:74:6e:17:f1:45:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Jul 24 17:00:31 2025 GMT
            Not After : Jul 25 17:00:31 2025 GMT
        Subject: CN=c479403515610174dbab8e320e1062c9badb5914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:3e:4a:d5:26:c6:52:c4:8e:3a:26:25:ed:
                    23:be:97:a5:3c:54:34:98:1f:13:83:cd:e2:13:a0:
                    0f:d5:21:c1:44:cf:1a:ec:f9:36:23:68:1d:2d:8f:
                    bc:7a:fc:c1:89:5a:71:10:5b:30:0f:dd:50:fd:d1:
                    b8:c3:96:59:e7:eb:2d:cc:0f:73:3a:84:ff:bc:17:
                    21:67:8f:a9:61:51:79:ae:ea:48:aa:55:5c:ee:3f:
                    91:0d:8e:6e:a6:3f:d3:1d:2f:d8:b2:d8:30:9c:56:
                    36:bd:58:50:f9:1a:e9:ce:0b:cf:a2:15:0b:14:14:
                    e6:3e:a8:e3:d7:59:18:02:ec:27:cd:15:ed:3b:2f:
                    1c:2f:99:45:42:7c:ae:c5:9b:06:ff:59:e5:be:33:
                    30:05:5f:50:5e:f2:93:41:72:2c:8f:19:64:5f:b5:
                    2d:e1:33:40:14:45:dc:66:08:9c:57:8f:50:4e:17:
                    2b:67:79:25:da:d1:b5:da:c9:56:c1:d2:9e:11:15:
                    d8:3b:ee:07:3e:3f:9e:60:4f:41:58:a1:a1:ea:7c:
                    8a:15:09:cc:b5:15:99:26:1b:ac:6b:af:70:c4:23:
                    c4:cc:b0:9e:02:fe:81:fc:dd:33:ac:63:86:db:27:
                    13:92:40:cc:89:95:ce:f5:38:99:9d:66:f6:37:8e:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:79:40:35:15:61:01:74:DB:AB:8E:32:0E:10:62:C9:BA:DB:59:14
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:25:e6:48:b6:f3:ee:56:e0:53:b4:08:f4:b1:44:49:f3:
         9f:09:89:0e:65:29:ee:f7:5a:33:f1:30:ed:6f:90:88:05:f5:
         51:ba:5b:1c:e4:0f:71:ea:8e:84:ee:fb:c5:3b:c6:12:f8:5f:
         18:a8:62:f2:a6:2f:f0:26:a9:0a:f4:2f:c6:d1:28:bb:6e:0a:
         76:3a:b1:17:31:3e:3c:ef:8d:cd:8c:73:2c:6c:f6:73:1a:78:
         78:f0:ac:6b:62:80:0b:6d:d4:9f:85:d9:1e:e2:83:dc:c4:9e:
         44:02:57:48:c1:e5:8e:5d:19:8e:60:6b:46:74:b9:87:b4:2e:
         06:9f:85:9a:9d:f5:11:86:73:c6:6e:a7:73:79:a8:52:85:23:
         77:4e:8f:80:0b:86:01:a0:ba:80:ff:8c:79:ca:d6:69:cf:46:
         b0:79:a2:51:9c:a2:bc:fb:2b:2b:35:3c:e6:e0:42:62:cd:85:
         31:01:e7:b9:8f:ac:7e:8b:3a:0c:97:6e:e1:14:71:11:60:bd:
         d0:6e:a4:2b:16:a2:2a:34:ff:0e:57:46:04:fd:18:c5:29:17:
         ef:71:fd:34:35:88:f6:47:87:f5:1b:db:c3:bb:a1:d1:65:b4:
         c9:f5:b3:58:c1:79:8d:46:cb:33:4f:bc:1e:31:1f:40:ab:ba:
         23:a2:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:30:43 2025 by rpki-client