Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          HpOuHGySgvKr4DMvDRqoodo/2yUL/o4xJOmuCPMdR7k=
Subject key identifier:   6A:0F:2E:DB:B4:C6:F8:3B:86:F1:81:20:39:DE:9E:7C:C8:20:4B:8C
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       0198499C6CA2BE9B80FC5FEF0A4A2DCA4379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 02:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:44 +0000
Files and hashes:         1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=)
                          2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=)
                          3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: 3jgoeCrRH5oYdEBsUbaohB4d0dci6C+qOxSnE7WZFVw=)
                          4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=)
                          5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:6c:a2:be:9b:80:fc:5f:ef:0a:4a:2d:ca:43:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Jul 27 02:00:44 2025 GMT
            Not After : Jul 28 02:00:44 2025 GMT
        Subject: CN=6a0f2edbb4c6f83b86f1812039de9e7cc8204b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:f8:8f:a9:6d:28:0e:34:24:d8:1b:db:be:
                    a6:19:62:f2:32:e7:2a:d7:07:44:72:16:7c:69:b0:
                    d6:e3:1f:9f:ba:ce:e7:25:d6:91:fc:f9:af:fa:9f:
                    0c:28:38:f1:3a:07:5e:fc:ce:99:ce:f6:e8:09:b0:
                    79:89:fa:d0:a2:4e:c7:e7:33:f8:28:16:13:fa:11:
                    3f:ca:b5:d3:e0:07:9e:04:19:72:61:d8:3f:2b:79:
                    08:fd:20:a4:94:3c:90:1c:ff:8f:3c:99:6e:c7:67:
                    8c:23:6a:87:37:30:e1:37:b3:0c:88:72:5a:a9:9b:
                    50:9a:a2:c0:bd:76:17:fc:4a:57:a6:e2:07:e7:c1:
                    21:77:64:e1:1c:cd:86:b4:19:35:52:46:12:c5:b7:
                    9d:73:b7:51:ba:89:f2:0c:bf:9d:78:6b:2f:0d:52:
                    b5:a0:e5:f4:f9:45:3c:c5:f7:d6:37:d5:b8:f7:71:
                    49:fd:f3:2d:76:40:4f:c7:5b:51:2c:a1:ab:28:c7:
                    8e:2d:ca:26:a7:1a:dd:08:1d:9f:f0:dc:e2:b8:52:
                    a6:80:fe:d8:75:bf:e9:eb:76:a9:84:bf:e5:47:bc:
                    6b:ab:2c:e1:70:20:66:ac:cf:f6:f8:9d:89:fd:46:
                    b8:4a:9b:9c:cd:09:2a:fa:c7:c1:5b:f6:12:ce:ef:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0F:2E:DB:B4:C6:F8:3B:86:F1:81:20:39:DE:9E:7C:C8:20:4B:8C
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:20:0a:cb:6f:de:ce:2f:65:e7:78:b7:e0:ac:f7:60:3e:55:
         94:48:f7:e9:f5:a7:e2:a4:03:34:ce:21:a2:2e:d0:84:97:38:
         0b:09:c0:1e:90:7f:21:4e:c5:52:db:46:91:12:3e:73:c5:01:
         82:20:66:82:13:69:96:a3:b7:da:d4:aa:66:1d:6f:54:44:80:
         52:66:e3:d7:04:fe:60:3a:ba:24:4e:b2:65:08:87:08:d1:07:
         06:dd:16:26:02:01:f4:1a:d2:fc:ff:f1:4f:61:b8:5e:0a:d7:
         80:06:22:71:d5:f6:0d:11:be:4b:08:f9:81:ef:30:e6:cc:a4:
         11:9d:01:ef:07:56:6d:f1:33:57:3b:1b:88:ae:58:d0:82:59:
         bb:5c:4b:a0:ef:52:9b:7e:b6:b6:73:9f:b4:b1:b7:19:c7:3d:
         95:1f:6b:a4:5f:88:0e:dd:6a:96:54:b6:f1:7d:21:33:99:ce:
         4f:47:2e:bd:66:92:e9:6c:06:a1:3c:6d:56:f4:5e:c5:e9:a2:
         b3:9a:cf:3b:64:16:8f:9c:54:47:41:1a:cc:5f:85:0d:cd:89:
         67:88:23:66:d8:7d:c6:d7:2c:f3:8b:e1:6a:a2:41:b6:fa:4c:
         3a:63:46:50:57:ed:4e:2e:d5:19:4e:dd:44:a9:44:e6:2f:52:
         60:ff:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:05 2025 by rpki-client