Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          X6YUjh16xJO3CCeboxIHPMstIzfDdoz9xlk4smPoU/4=
Subject key identifier:   82:C5:2F:C1:EC:89:01:69:18:4F:D9:9D:F7:59:7D:A7:BE:52:9A:C5
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       01984AE58BD5F521F75AD98117499FB665DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1618
Signing time:             Sun 27 Jul 2025 08:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:14 +0000
Files and hashes:         1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
                          2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
                          3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
                          4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
                          5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: xXBNkNFbvS2q5Du7hYUC55oUMHUibQWGdo/mvGSwwyE=)
                          6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:8b:d5:f5:21:f7:5a:d9:81:17:49:9f:b6:65:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Jul 27 08:00:14 2025 GMT
            Not After : Jul 28 08:00:14 2025 GMT
        Subject: CN=82c52fc1ec890169184fd99df7597da7be529ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:07:1e:18:18:ee:2c:d3:c7:b7:bb:4e:2a:
                    91:1c:ea:58:8f:7e:a5:4b:09:20:b3:d0:5b:36:75:
                    43:e1:34:9d:0d:e7:d7:5f:77:27:26:fc:52:59:22:
                    29:47:aa:f0:4f:4c:41:b3:5b:2f:7a:51:12:da:be:
                    5e:e5:a8:c4:06:ff:36:e4:44:a1:fd:4a:f0:db:a3:
                    d7:0c:a2:e6:a6:9b:3c:ae:0f:b0:14:69:1f:a5:f6:
                    95:c3:0f:d5:e7:f5:ac:9c:8c:2c:86:bc:22:47:cc:
                    16:f3:fe:e0:cf:8f:b6:82:43:7e:d6:5b:76:87:9c:
                    c8:40:c0:31:be:c4:7f:fc:62:00:98:1d:37:3b:fb:
                    2b:fb:3b:ea:45:43:87:24:fc:df:ea:02:ad:c7:24:
                    a3:c3:08:5a:2f:ea:5d:6f:60:b2:78:0e:fe:0e:34:
                    65:9a:3a:4e:d5:1a:31:e6:4e:98:46:72:73:ca:92:
                    ed:dd:b9:e4:b3:ae:ac:4e:09:ef:55:9b:1a:08:0a:
                    52:69:32:0f:af:0e:06:e2:eb:38:58:8b:ff:10:32:
                    42:4b:43:2c:c1:20:9b:a3:f4:b9:bc:d5:c7:ac:25:
                    83:35:77:64:8e:28:48:6e:51:16:65:3d:1b:96:6a:
                    c3:a3:af:34:50:8c:2c:cd:cd:c0:ec:d1:48:eb:5e:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:2F:C1:EC:89:01:69:18:4F:D9:9D:F7:59:7D:A7:BE:52:9A:C5
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e9:5c:9f:cb:55:79:c0:2b:39:e8:dd:c8:ad:e9:5d:40:42:
         81:ef:1a:05:47:4f:c5:d6:77:24:c8:b9:43:c1:bb:b3:d9:a9:
         87:af:09:65:7e:de:ea:cf:25:3a:6e:d6:c3:bd:d5:e3:ed:a5:
         2f:84:69:b2:1e:d5:96:5f:6f:e7:63:ad:27:f3:94:f5:9b:ed:
         58:e5:3f:7a:20:5f:2c:b1:94:61:22:31:ef:ac:2b:8c:26:dd:
         c3:dd:24:73:8a:aa:1c:78:2d:67:65:04:8e:12:f0:87:02:a7:
         f5:35:5b:ff:1a:6e:f2:33:5a:87:46:33:e8:e2:e6:fc:89:e3:
         2e:ab:8c:58:14:65:1f:70:15:46:8d:87:3e:17:ec:c1:b3:2a:
         cf:e0:f0:e1:40:1d:f2:7e:0f:7e:60:48:72:06:7b:ef:26:6e:
         19:c9:75:b6:3e:dd:79:59:7b:7b:aa:d8:4a:0f:73:5a:55:37:
         22:be:57:f6:46:15:1c:2e:2c:00:e6:ec:dc:cc:b7:fb:45:dd:
         2b:b6:37:bb:1f:bc:02:de:f6:1a:1f:6b:e8:1c:3c:2e:bf:46:
         56:75:0c:8c:12:e8:7f:30:ff:0f:f1:20:f4:f1:27:6f:3c:88:
         2e:fd:98:52:71:fc:cf:81:f6:64:1b:21:b5:8b:ac:f7:08:9c:
         b7:a8:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:51 2025 by rpki-client