Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          0exUokBo9AEpKi2MA7mQ6qzANZb3g6kNs7go+7RnTRg=
Subject key identifier:   29:CD:F0:78:E8:A0:0C:72:B9:6E:97:A7:85:E3:7A:D8:BB:CD:B7:4D
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       01984589052C289A293D9AC028F5BC85E011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          1641
Signing time:             Sat 26 Jul 2025 07:01:04 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:04 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:04 +0000
Files and hashes:         1: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
                          2: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
                          3: isUlANYjYqCjfC0Ok17mG4MP8p0.roa (hash: VTLE3KmkIit4Ru9ybnFT0PTCo031dbYNUSZynBG0Bx4=)
                          4: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: H9GG+7CFLN0fxxC9pno69Hleji4uVwPxuzazOz42fSg=)
                          5: ut3Ia6-mOfUCkcqND1t7uvinIqc.roa (hash: aJkTC/NqOQ2/INKdyvEr1miuxsKpaWRMdWzEAJzyDDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:05:2c:28:9a:29:3d:9a:c0:28:f5:bc:85:e0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Jul 26 07:01:04 2025 GMT
            Not After : Jul 27 07:01:04 2025 GMT
        Subject: CN=29cdf078e8a00c72b96e97a785e37ad8bbcdb74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:58:d8:d7:a9:a6:35:7a:89:2b:b7:c0:6a:
                    81:a9:7d:c3:38:d0:8f:e6:57:ea:31:01:19:3b:01:
                    05:2b:5b:c5:64:1e:41:fa:d1:23:9a:61:66:fe:f1:
                    2f:ce:05:4c:b1:8a:6f:dd:b9:09:59:53:fa:57:30:
                    21:8a:5f:89:30:8a:18:4a:5a:33:7f:ae:8d:62:47:
                    2c:71:cf:48:ed:e2:e5:c7:51:4a:7e:50:4d:2f:57:
                    03:14:83:76:ac:f4:09:2f:07:a6:da:ab:50:33:a5:
                    e3:b1:c9:57:09:b9:cf:00:88:45:ff:49:24:38:76:
                    e0:b3:98:b7:59:29:dd:5d:61:17:53:1b:fa:f6:35:
                    f0:b0:7d:c8:7f:30:ae:d1:aa:8e:2f:64:a7:64:ae:
                    c1:bc:91:ed:d0:fb:ed:9a:ab:31:e6:6a:5c:40:09:
                    ae:df:8e:73:2f:79:bc:92:7c:ca:de:a4:4a:c9:68:
                    ec:04:ea:18:82:66:49:1d:02:1b:ed:d9:33:c2:20:
                    e0:6b:e4:12:a1:c6:b6:98:72:54:6f:57:91:98:c0:
                    9d:14:c6:73:67:70:67:47:92:a5:01:53:1e:5c:22:
                    51:aa:38:90:53:ea:43:fd:bc:0a:66:e6:da:1a:9d:
                    4c:01:5a:2d:77:63:0e:18:42:21:1b:a5:b1:1a:b7:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CD:F0:78:E8:A0:0C:72:B9:6E:97:A7:85:E3:7A:D8:BB:CD:B7:4D
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:d6:44:1c:b4:e1:b0:22:c1:c3:34:45:7a:1d:61:e7:ab:
         75:35:20:38:3f:44:e7:f6:0a:de:c9:9e:a1:01:e6:88:c5:5b:
         de:9e:9a:97:ea:1f:b9:4d:4a:3c:d3:cd:df:8c:78:4c:66:e1:
         e4:66:6a:29:5f:7c:c1:b3:52:39:fe:d7:1c:a5:c8:96:4d:f7:
         ea:ed:10:89:15:72:c1:fb:af:b9:8b:4f:78:3b:75:5d:ea:0a:
         40:8d:f6:98:54:48:c9:da:8a:a9:24:6a:0a:05:1b:9a:ba:9e:
         63:04:be:97:54:ab:22:79:57:88:93:3d:77:f3:fd:4c:20:28:
         a8:d4:4b:56:db:dd:2f:11:8d:10:a7:b1:eb:d3:e9:24:ef:f4:
         5b:f5:d5:df:60:d1:a5:65:5f:e5:fa:25:c9:44:d3:9e:22:f7:
         5c:ae:63:be:c7:53:84:ed:83:2a:f3:d7:31:f2:ea:49:93:92:
         6b:7c:41:b1:36:0e:6f:fe:4c:bd:5a:d5:6b:84:69:15:b0:4a:
         0f:0d:c8:14:4e:32:30:c5:47:da:8d:2a:c3:0e:4a:77:5a:77:
         31:9d:ad:c6:72:bc:7b:bc:d1:30:cd:7d:4d:81:de:78:b5:99:
         8c:f3:9b:14:9c:98:f8:19:84:25:7a:ce:58:5c:f8:f1:4c:73:
         a5:eb:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:34 2025 by rpki-client