Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          n9ppYjJoT0EGu1AJK7P0Q1ShAfN79HV0QlPURksQRtw=
Subject key identifier:   34:0F:E0:5B:BA:23:91:F4:09:73:6A:C2:D8:B3:23:1A:C8:CF:E3:6A
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       01984966F7106FB77D781CC3F1D27A48080E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          1604
Signing time:             Sun 27 Jul 2025 01:02:21 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:21 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:21 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: F/IRXHQfXY6Rly8ohgRSMgqkRSaRU37s2Ur8ZSi2HlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:f7:10:6f:b7:7d:78:1c:c3:f1:d2:7a:48:08:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Jul 27 01:02:21 2025 GMT
            Not After : Jul 28 01:02:21 2025 GMT
        Subject: CN=340fe05bba2391f409736ac2d8b3231ac8cfe36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:65:d7:6f:b8:78:4b:0f:43:d7:61:08:89:90:
                    4a:a7:bd:dd:eb:52:dc:aa:9a:17:55:30:3c:ac:66:
                    a9:95:4d:50:c3:71:a2:12:21:e6:e4:01:8c:26:68:
                    a4:29:df:2b:55:78:b3:2e:38:a4:2e:8e:d1:58:39:
                    2b:06:f7:5d:10:6c:c8:2a:50:3e:b9:3e:0b:da:d7:
                    d4:18:b0:f0:6c:0e:c2:91:8e:bf:ec:25:a5:0f:d9:
                    56:6f:db:ea:80:c4:d5:d6:30:84:8d:24:3f:6a:65:
                    88:16:d2:a1:fd:0a:8a:84:29:09:09:74:2b:e6:6b:
                    e8:d5:83:e3:6b:4e:83:e3:0f:10:2e:cb:0d:11:dd:
                    2d:1a:af:aa:07:99:2a:b7:59:bf:54:08:8a:01:56:
                    b1:cf:4f:35:4c:b8:8f:cc:18:25:73:98:82:a5:f2:
                    00:5b:2c:1a:ba:08:ed:77:b0:eb:4e:f9:ff:91:5d:
                    80:c2:fe:10:90:9f:fe:7f:ca:60:e9:fe:44:81:6b:
                    10:50:99:95:3f:0d:db:bd:bf:96:60:68:d6:e6:97:
                    17:17:f9:fb:43:61:31:66:3a:6e:6a:db:83:fc:0b:
                    ba:92:66:0f:2c:ca:2e:da:de:fd:40:11:46:94:5b:
                    2f:85:1f:3b:b1:e6:e4:6c:c9:3c:e6:cc:b0:70:82:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0F:E0:5B:BA:23:91:F4:09:73:6A:C2:D8:B3:23:1A:C8:CF:E3:6A
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:a4:83:46:81:8b:58:f0:87:c8:0c:0c:9f:3c:51:bc:c8:
         71:8d:2a:59:89:51:bb:3b:37:d0:e4:80:dc:3a:a6:6d:e5:20:
         35:49:5a:0a:d2:d3:75:93:f5:00:54:dc:34:20:ae:8f:10:3e:
         90:06:f3:24:ea:86:d5:12:1b:60:b5:11:c4:0a:bf:19:a5:dd:
         3a:a7:e4:54:64:30:5f:07:63:64:62:76:ab:1f:75:6b:ee:57:
         01:cc:10:69:cc:80:ee:2b:e6:ff:3c:93:f6:63:93:7b:31:a2:
         37:8c:6d:a5:f6:27:8a:88:51:d8:83:0a:33:c1:e9:8d:72:e4:
         46:64:58:2d:0e:85:f5:d6:7d:9d:55:b7:36:c4:fa:94:00:2b:
         14:16:11:77:db:bd:50:3f:98:fc:7e:cd:19:fc:f6:83:de:56:
         f1:45:9c:7c:3f:cf:ea:67:00:01:cf:57:c5:28:13:2e:a0:95:
         db:89:c3:6f:f9:a2:8a:d9:74:12:4e:e5:7d:1d:73:0c:69:ff:
         54:1f:4b:53:57:72:d7:11:80:3f:48:9f:d7:23:09:23:62:e5:
         da:5b:57:2a:05:8c:5d:6a:c4:f7:ea:ae:c1:df:f8:36:5e:85:
         c4:65:5e:9c:25:ef:7e:dd:88:11:4f:07:d5:ee:80:e7:cf:f9:
         91:4e:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:35 2025 by rpki-client