Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          LxEvhtszNLhh/GwweI8kQH+DQFRY3FvM1HsSO3Eqy5E=
Subject key identifier:   98:12:54:AB:58:E6:38:5C:29:80:E4:80:5C:B5:35:AD:16:28:AF:7B
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       01984B53E7CC199F00AA9E64EA7E756F55B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 10:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:46 +0000
Files and hashes:         1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: iHxKZNYyRNRia4qvD4EWUpniqfLwSuiGIg1ZI+xGk/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:e7:cc:19:9f:00:aa:9e:64:ea:7e:75:6f:55:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Jul 27 10:00:46 2025 GMT
            Not After : Jul 28 10:00:46 2025 GMT
        Subject: CN=981254ab58e6385c2980e4805cb535ad1628af7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:fd:11:63:73:99:2a:0f:a4:4e:4a:fa:4e:
                    47:36:0e:a4:7b:77:20:07:47:59:1e:89:49:c7:cd:
                    e5:06:7f:97:33:48:2d:39:39:97:cf:fe:a7:53:3e:
                    d3:85:38:7d:b7:77:18:3f:62:5f:e8:be:70:5d:a7:
                    e8:68:ae:1a:50:94:83:4a:96:ff:57:6d:99:1b:4f:
                    89:ae:ce:69:21:a7:49:18:63:13:09:81:90:02:28:
                    e3:96:33:99:52:74:15:0f:1e:cb:32:55:4d:3e:20:
                    be:95:2c:d7:00:bb:b9:71:39:b0:16:4f:4b:43:93:
                    f2:01:1b:d2:85:0e:75:59:68:b3:0a:6f:6a:c4:70:
                    bb:19:7c:16:5b:a8:a9:6f:b8:df:1f:88:c4:a7:52:
                    3a:4b:ef:ac:2e:0b:ee:11:51:d5:63:14:1b:72:76:
                    03:88:64:15:15:b9:d8:06:49:11:37:b5:95:c4:9b:
                    ba:30:a6:88:e7:70:d1:ca:56:43:ba:4c:ea:d9:9d:
                    ab:1c:63:88:f9:d4:0d:0b:5a:d2:d9:7e:df:1b:1e:
                    7e:99:ad:dd:0d:a0:70:5c:88:fc:c1:fc:c2:f1:70:
                    9e:1f:d6:80:69:47:57:87:c2:58:95:26:fd:a3:ff:
                    25:c5:4c:8d:0f:89:b4:fa:d2:57:7a:18:21:02:a5:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:54:AB:58:E6:38:5C:29:80:E4:80:5C:B5:35:AD:16:28:AF:7B
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:35:72:1a:7d:3f:8e:7c:35:42:43:f7:86:c8:1a:f9:5a:e5:
         a9:ba:17:a1:1c:99:22:ea:9a:84:c2:a6:8d:56:b0:d8:82:bb:
         1b:aa:9c:62:4d:01:02:c4:5e:c0:73:23:7d:ae:46:30:44:77:
         6b:e1:c9:5a:b0:0b:e4:3a:ea:f2:10:2f:7c:57:8a:67:16:17:
         64:bd:89:56:09:bc:5b:de:a4:bd:5d:ed:f9:85:c4:0f:4e:64:
         9c:ec:32:74:cf:a2:9b:9c:9f:86:3a:7c:c6:b4:f0:a3:29:06:
         66:4b:ed:4a:bf:e1:b9:39:1f:09:f3:c0:fb:15:e7:e6:c3:e3:
         da:a8:a3:3b:1b:e2:2c:7a:8b:78:dc:dc:11:c4:fa:7a:d7:1a:
         f7:4c:64:55:57:5f:94:1b:b4:e5:31:e0:0f:67:81:8e:2d:a2:
         4a:d8:21:79:45:29:9b:f9:27:f9:49:89:76:6a:87:96:02:08:
         37:97:a3:10:e5:61:b5:83:19:5c:0f:8d:93:a9:54:33:8b:91:
         3c:23:5a:56:8c:16:64:e2:45:2e:fd:20:3d:7f:b7:c7:77:39:
         aa:c7:88:6f:b1:eb:3c:06:48:35:56:26:1a:10:22:9a:8b:69:
         28:0d:2d:7e:e3:f2:34:e2:2f:98:31:d7:75:98:66:22:08:d5:
         35:9d:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:06 2025 by rpki-client