Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          13dHpXFR/u6ULRIizLYYfFY0Cox9eukknvEqV8FIt5k=
Subject key identifier:   7E:2E:A8:1E:42:E0:5D:AB:1D:56:02:F8:D3:CD:B4:13:1E:E7:26:C0
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       019848895151D57AFFDE1271A48CDB9B7597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          1608
Signing time:             Sat 26 Jul 2025 21:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:15 +0000
Files and hashes:         1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=)
                          2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=)
                          3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: WjvldN8GNTvaLzbyMhBGurkOHcOvcSxk7froZhl1Dh8=)
                          4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:51:51:d5:7a:ff:de:12:71:a4:8c:db:9b:75:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Jul 26 21:00:15 2025 GMT
            Not After : Jul 27 21:00:15 2025 GMT
        Subject: CN=7e2ea81e42e05dab1d5602f8d3cdb4131ee726c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:bd:29:e1:76:1b:12:98:cd:7f:ec:56:f6:
                    1d:93:18:6a:8b:b5:1b:a9:0f:50:8a:68:5d:2e:79:
                    06:d2:6d:11:10:4d:17:7d:f1:c5:bc:05:e3:56:a2:
                    7b:c6:e7:fc:55:cb:03:d3:70:c2:6e:26:39:ac:34:
                    fe:63:e7:28:2a:df:7f:2a:58:b7:7e:58:07:5b:2b:
                    c3:72:ae:ff:0b:a6:9e:de:af:26:00:66:98:a4:e8:
                    43:4a:df:11:30:c1:95:0b:e7:2c:b0:e4:0f:33:a9:
                    64:98:fa:1a:20:29:f3:12:97:7f:11:7b:fd:cc:25:
                    4d:22:1a:a8:45:3a:5d:4c:70:ad:be:ad:b2:74:6a:
                    18:71:a8:29:f1:c3:c5:03:fd:85:8a:3a:b8:9b:22:
                    89:ca:92:cd:bf:6f:0d:ad:12:4a:85:77:65:b9:0b:
                    58:55:8f:25:b9:f0:3c:06:e7:96:3f:f5:44:fd:7e:
                    a8:41:c0:0f:fa:a0:df:bd:28:9a:30:26:72:05:4c:
                    61:5e:9a:ef:fc:c5:01:31:c0:91:ef:13:1d:4b:eb:
                    51:89:dc:4e:c6:de:19:50:23:b0:b4:b6:a7:90:db:
                    f7:64:03:df:85:77:b7:87:61:af:7f:ad:b5:da:67:
                    f0:70:46:27:3f:90:36:6b:56:f2:f9:6c:5e:0e:be:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:A8:1E:42:E0:5D:AB:1D:56:02:F8:D3:CD:B4:13:1E:E7:26:C0
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:68:fa:34:01:b3:02:9f:59:92:40:0c:12:5a:83:cd:d6:e5:
         99:43:9a:61:1d:31:86:38:b6:00:ad:9e:2a:54:40:d3:22:0f:
         3a:ff:18:ff:6b:e9:fe:b5:00:cb:84:ee:59:19:56:77:21:15:
         27:0d:ba:b8:2b:e6:71:73:88:6d:49:c4:19:c3:90:20:27:cf:
         3e:d1:d9:3a:47:21:54:6c:8b:aa:5a:b9:c5:b6:1c:e1:d4:d0:
         e9:78:ad:50:30:8e:14:04:76:20:86:8c:83:32:9b:8e:f5:7c:
         60:32:92:e6:db:73:ff:0c:59:b4:1e:8f:ea:32:d8:54:bc:dc:
         9f:95:10:d8:c7:28:c4:d8:52:f7:1b:2f:c4:b3:c0:97:90:07:
         e8:fe:a1:f9:55:26:ff:a3:30:5d:d3:3d:6f:80:8d:82:9f:07:
         5f:bc:98:2c:5b:37:98:8f:91:56:ec:9d:bf:b2:11:5a:77:35:
         04:3f:b8:82:4b:b9:6f:c5:25:5b:76:b5:12:85:ea:90:75:14:
         d4:9c:e6:cf:7d:e1:9c:00:2d:ef:a1:e9:68:76:3e:cf:1f:07:
         ad:e1:7f:27:da:94:e3:dd:13:80:53:52:ce:b9:85:73:a6:57:
         da:e0:ba:44:f9:5e:a7:21:b6:5a:8d:8c:9e:8e:90:06:48:f1:
         30:f4:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:18:32 2025 by rpki-client