Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
File:                     R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json)
Hash identifier:          35jwYNCEMsBVXhqblSiSb6dWa6OcTW52bOEBLxhIGQw=
Subject key identifier:   16:97:16:B7:D2:6F:C6:6D:6B:75:FB:04:00:3A:7D:8B:55:FD:D7:E8
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Certificate issuer:       /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial:       019849D3BBCFF74893CA1D26411267C6B9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 03:01:09 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:09 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:09 +0000
Files and hashes:         1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: saqJrg5Uth2ophk2xP74+6y88CJUggs13XdlaSvRd5M=)
                          2: eUJqNeMrOG92tkRoE1eKe7bdKA0.roa (hash: ZH26TI2Lx95OhTyG7ufuoqyGvbD2mq8daN9NRoWVAZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:bb:cf:f7:48:93:ca:1d:26:41:12:67:c6:b9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
        Validity
            Not Before: Jul 27 03:01:09 2025 GMT
            Not After : Jul 28 03:01:09 2025 GMT
        Subject: CN=169716b7d26fc66d6b75fb04003a7d8b55fdd7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:51:7e:23:cb:08:94:52:30:c7:d0:c2:2d:
                    9b:9d:31:34:c8:93:03:35:ab:be:c5:02:d4:1d:57:
                    77:7d:90:62:34:d6:11:a3:b7:a0:29:a1:60:9d:59:
                    2d:a4:58:57:5f:42:c4:cd:23:52:51:cb:83:1c:5b:
                    a4:cb:79:50:26:5d:a3:1a:23:5e:c7:69:15:51:6b:
                    df:62:86:7d:f8:42:b5:1f:2a:11:00:cd:7b:59:58:
                    e9:5b:14:97:88:4a:90:6d:db:93:67:c4:66:ba:83:
                    53:d9:be:ed:12:28:e5:3f:9d:c3:c7:bb:d0:62:24:
                    bd:e7:73:46:74:fb:93:e8:8e:86:6a:c4:63:1b:84:
                    9c:f1:43:cf:69:2c:75:8c:14:05:61:10:24:3c:ea:
                    ec:c3:54:8f:95:a9:a5:59:d4:26:29:69:97:56:87:
                    c2:a0:46:96:45:04:9c:01:3d:19:46:73:9f:ad:4e:
                    00:cb:81:c6:b5:2d:f3:0f:9b:08:91:0a:ef:1d:b0:
                    0f:18:3d:d0:8d:0a:15:cb:da:d3:62:86:ff:71:05:
                    d4:6d:76:74:f5:6e:61:35:c4:2a:e8:90:c3:b8:02:
                    f2:fe:67:36:a4:5d:98:35:3e:0d:32:85:d2:24:7f:
                    bc:7c:2f:24:e2:21:8a:21:67:51:cb:6e:1d:90:a1:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:97:16:B7:D2:6F:C6:6D:6B:75:FB:04:00:3A:7D:8B:55:FD:D7:E8
            X509v3 Authority Key Identifier:
                keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:49:e2:2a:af:58:8f:c4:96:91:12:9c:c5:52:df:a2:4d:74:
         81:73:00:fb:dc:5b:ed:93:6b:1f:de:84:1f:a3:ec:ac:a4:e0:
         26:d9:64:71:a5:90:81:59:56:cb:31:ce:6e:0d:97:06:13:91:
         1e:7e:1d:df:2f:25:ce:17:d8:6a:fd:3b:40:11:41:68:e1:09:
         ba:36:7c:1f:ed:3e:9d:b2:92:58:45:96:07:8e:3a:31:35:49:
         d2:73:e8:cc:71:bc:75:68:71:ec:bb:27:13:45:ff:33:dc:46:
         c2:b9:e1:16:93:d5:ff:fe:80:bf:0d:3b:09:ea:11:31:c2:18:
         79:f7:db:94:be:f7:c5:80:68:77:a1:b3:12:23:ba:9d:a7:e7:
         db:5b:fa:47:f1:49:5c:cd:68:ea:ad:43:37:13:9d:1e:c8:e0:
         9c:16:6c:5a:5f:66:cc:b4:6b:60:cd:bb:2b:bd:71:8a:b9:7e:
         f7:37:8b:10:05:23:42:0b:96:23:66:42:a4:70:19:28:e2:91:
         bf:9c:4d:f9:28:74:81:fd:4b:cc:ce:f1:fd:5f:65:5f:fa:ce:
         26:3e:b3:e5:6a:76:69:f0:36:b3:8d:3e:8b:64:b1:8a:ac:0c:
         66:4c:90:c9:5c:3c:3d:61:98:21:77:fe:c5:17:d5:ca:0b:7e:
         ca:3b:f8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ07vP90iTyh0mQRJnxrnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Yjc3MGVhYzhhNzM2M2Y0Y2I4YTg4YzJlMzZlMmQ2OTRi
MzkwNjgwHhcNMjUwNzI3MDMwMTA5WhcNMjUwNzI4MDMwMTA5WjAzMTEwLwYDVQQD
EygxNjk3MTZiN2QyNmZjNjZkNmI3NWZiMDQwMDNhN2Q4YjU1ZmRkN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVRfiPLCJRSMMfQwi2bnTE0yJMD
Nau+xQLUHVd3fZBiNNYRo7egKaFgnVktpFhXX0LEzSNSUcuDHFuky3lQJl2jGiNe
x2kVUWvfYoZ9+EK1HyoRAM17WVjpWxSXiEqQbduTZ8RmuoNT2b7tEijlP53Dx7vQ
YiS953NGdPuT6I6GasRjG4Sc8UPPaSx1jBQFYRAkPOrsw1SPlamlWdQmKWmXVofC
oEaWRQScAT0ZRnOfrU4Ay4HGtS3zD5sIkQrvHbAPGD3QjQoVy9rTYob/cQXUbXZ0
9W5hNcQq6JDDuALy/mc2pF2YNT4NMoXSJH+8fC8k4iGKIWdRy24dkKHrmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaXFrfSb8Zta3X7BAA6fYtV/dfoMB8GA1UdIwQY
MBaAFEe3cOrIpzY/TLiojC424taUs5BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAt
ZjdjNTM5ZmM2MDE4LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YzRmNDQtNTQ5Yi00NTVlLWI1MjAtZjdjNTM5ZmM2MDE4
LzEvUjdkdzZzaW5OajlNdUtpTUxqYmkxcFN6a0dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0niKq9Y
j8SWkRKcxVLfok10gXMA+9xb7ZNrH96EH6PsrKTgJtlkcaWQgVlWyzHObg2XBhOR
Hn4d3y8lzhfYav07QBFBaOEJujZ8H+0+nbKSWEWWB446MTVJ0nPozHG8dWhx7Lsn
E0X/M9xGwrnhFpPV//6Avw07CeoRMcIYeffblL73xYBod6GzEiO6nafn21v6R/FJ
XM1o6q1DNxOdHsjgnBZsWl9mzLRrYM27K71xirl+9zeLEAUjQguWI2ZCpHAZKOKR
v5xN+Sh0gf1LzM7x/V9lX/rOJj6z5Wp2afA2s40+i2SxiqwMZkyQyVw8PWGYIXf+
xRfVygt+yjv4eQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:05 2025 by rpki-client