Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
File:                     59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json)
Hash identifier:          SN7lgGzwZsezjrT2n3SnIpzV7SURYTpJUTh/tzP8+tU=
Subject key identifier:   CD:7D:A1:12:96:71:4C:27:DD:1B:FA:58:28:11:9F:FB:59:63:0B:96
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Certificate issuer:       /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial:       0198499C90C93C0450657BA0996401064797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
Manifest number:          1446
Signing time:             Sun 27 Jul 2025 02:00:54 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:54 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:54 +0000
Files and hashes:         1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=)
                          2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: G5iawZl7mMDyYIZZHQHlhkz13u2OEbTAzrnYEChzJJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:90:c9:3c:04:50:65:7b:a0:99:64:01:06:47:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
        Validity
            Not Before: Jul 27 02:00:54 2025 GMT
            Not After : Jul 28 02:00:54 2025 GMT
        Subject: CN=cd7da11296714c27dd1bfa5828119ffb59630b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:e7:26:0b:9f:f7:37:ba:7f:15:3e:87:1b:
                    f1:e6:7e:05:71:5e:55:c5:04:41:eb:bc:c0:60:ec:
                    4c:a5:2f:96:14:31:d8:21:8e:29:5b:ac:8f:9d:57:
                    f8:18:7a:2c:42:f0:d6:c3:d4:d6:c9:3b:1c:81:c3:
                    6a:c5:5c:65:2a:4f:c9:4b:33:c4:ff:a0:67:f9:73:
                    82:f4:de:99:95:4d:d1:02:06:3c:5d:34:45:7d:30:
                    af:0d:95:4f:56:d8:34:34:e5:29:d8:e9:1f:11:b5:
                    f3:24:00:c9:66:64:0f:58:bd:b0:65:7a:f4:de:1f:
                    8a:c3:6c:27:98:d2:6f:6b:49:05:22:34:8e:d4:1c:
                    d3:75:a4:b0:73:99:26:bf:71:ec:80:39:f7:bc:35:
                    c8:48:43:41:ca:2c:3b:54:df:17:51:fe:d1:9e:c9:
                    c4:cd:df:b8:f8:53:5b:f3:eb:d9:22:20:71:fd:91:
                    4d:71:74:9d:7b:60:67:89:c8:53:eb:4f:25:aa:9d:
                    51:be:61:a5:87:65:74:24:d6:d9:32:24:ce:3a:c1:
                    05:02:d8:3b:98:85:cb:c4:2e:64:a9:96:79:8b:b9:
                    40:dc:1b:1d:78:f4:16:b7:48:1e:ad:fc:fc:d7:e4:
                    67:08:8a:b8:04:ed:20:fb:f8:d5:33:56:c2:23:f9:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7D:A1:12:96:71:4C:27:DD:1B:FA:58:28:11:9F:FB:59:63:0B:96
            X509v3 Authority Key Identifier:
                keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3e:7c:ec:51:c3:a3:c5:c1:c0:d2:63:fb:fb:0d:3f:d3:dd:
         43:13:b4:90:c7:9f:17:dc:36:86:f1:f7:ca:39:13:cf:41:f9:
         16:74:6c:c1:c4:6c:fe:92:b7:c2:d7:55:f5:86:3e:ad:8a:3a:
         a6:8e:72:39:58:d6:8b:56:68:40:43:84:35:9b:a5:72:a6:5b:
         56:da:6e:4c:28:0a:e4:d5:51:1a:f3:8d:53:32:10:a3:86:0a:
         09:46:d5:34:20:71:c1:44:0c:53:9f:0a:37:23:12:c2:37:fd:
         84:2c:e3:7f:e7:9b:00:80:e9:cc:d2:82:03:81:a7:71:5e:1d:
         28:d5:d7:4a:2f:7e:d4:57:80:f3:9e:30:81:33:ea:67:55:88:
         19:3d:a4:de:a9:01:85:ae:fe:bc:fb:64:d4:7b:cd:eb:bd:fe:
         5c:74:17:0e:ae:4b:e7:ca:c1:45:1b:61:72:47:5a:64:8a:32:
         d3:0c:79:f3:45:1f:bf:54:07:c2:3b:6b:a7:dc:96:fb:b8:74:
         ce:f1:85:15:77:6f:c5:fe:06:b3:0a:0b:86:da:3b:c2:bd:9c:
         9a:98:49:34:7c:e5:3e:63:93:e9:52:f3:e5:f2:15:1a:3c:af:
         6f:ec:b1:67:97:85:f7:50:c8:e0:cd:11:75:44:27:8a:d3:0b:
         eb:5c:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:59:11 2025 by rpki-client