Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
File:                     MpbYU2ObwBkplCk-veCYBdLWIqQ.mft (raw, json)
Hash identifier:          Wqyz+u8h8QFcEE8vlZcAWaQ2xLDqxgk5vekK+YPeXsc=
Subject key identifier:   D7:9E:01:51:C3:FD:DB:EA:B0:F7:1F:CD:0D:F8:50:EF:B5:2D:E1:69
Authority key identifier: 32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4
Certificate issuer:       /CN=3296d853639bc0192994293ebde09805d2d622a4
Certificate serial:       0198477721D723B7AAA07CBFFC1AAC02FE20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 16:00:46 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:46 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:46 +0000
Files and hashes:         1: MpbYU2ObwBkplCk-veCYBdLWIqQ.crl (hash: aOtijD7yvcMpIc/bOaLExFGQDA4mmF1gvrKN0W0p8wM=)
                          2: hTnUv0N90doM0ZMOLyyFEOW9iK0.roa (hash: YJzqmH02+AW23mfkqCHZcxj82Owa829HDO8rFi0lEGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:21:d7:23:b7:aa:a0:7c:bf:fc:1a:ac:02:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3296d853639bc0192994293ebde09805d2d622a4
        Validity
            Not Before: Jul 26 16:00:46 2025 GMT
            Not After : Jul 27 16:00:46 2025 GMT
        Subject: CN=d79e0151c3fddbeab0f71fcd0df850efb52de169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:6d:3f:f5:b0:39:4b:76:e5:c0:68:36:9c:
                    8d:b2:87:c3:45:3e:a6:4e:f7:af:b6:e9:26:09:87:
                    32:d2:48:2a:4d:c2:51:50:dc:22:49:80:9e:8d:3a:
                    b4:aa:53:50:13:56:49:ce:c8:a5:96:83:0b:19:71:
                    79:74:3a:d3:06:91:19:fa:30:51:d2:d6:20:6a:2e:
                    bf:a8:bc:20:e7:47:7d:ec:5f:17:5d:df:6f:ec:d9:
                    d4:9e:1f:d1:6c:ba:55:da:57:b6:c8:bb:c9:d1:0f:
                    01:92:ed:f7:68:79:8b:1f:22:e0:eb:c5:3d:7b:15:
                    8f:03:a8:71:c0:e6:34:8f:11:2a:6e:10:43:f7:60:
                    8d:f7:b9:02:68:d2:4f:82:70:a2:05:bc:78:7e:a6:
                    d2:dd:d8:b0:bc:2d:f3:a5:ce:93:19:fe:bf:e3:26:
                    48:b3:25:af:22:1c:97:f9:c2:60:04:db:5e:54:03:
                    2c:47:71:09:89:2d:88:26:03:8d:7a:90:41:91:85:
                    a4:2f:e8:91:2e:65:65:c3:32:a1:17:24:a2:35:db:
                    1e:05:47:69:97:f5:5a:85:06:56:f2:ca:6a:75:f4:
                    20:b3:d5:a9:b4:a0:b9:7f:82:10:61:f5:d0:9b:fe:
                    87:9d:75:bc:b9:e3:09:bd:79:09:ba:34:bd:2f:94:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9E:01:51:C3:FD:DB:EA:B0:F7:1F:CD:0D:F8:50:EF:B5:2D:E1:69
            X509v3 Authority Key Identifier:
                keyid:32:96:D8:53:63:9B:C0:19:29:94:29:3E:BD:E0:98:05:D2:D6:22:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpbYU2ObwBkplCk-veCYBdLWIqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/66f07d-adca-40b0-a0a0-e761819f475e/1/MpbYU2ObwBkplCk-veCYBdLWIqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:d6:3e:23:45:ab:a3:0f:83:86:eb:ed:e6:e1:48:88:77:
         f4:77:6b:71:de:60:62:4a:83:46:24:3e:a0:91:b2:14:76:14:
         68:8b:b8:2d:d7:11:df:7a:79:7a:34:ef:d2:f3:8b:07:ae:6d:
         aa:4c:03:bf:50:d2:70:42:56:55:c7:f5:8b:8b:b3:d1:de:a7:
         d2:0f:a1:a7:44:bb:69:3c:2d:96:8b:c8:75:c0:f5:b4:80:2b:
         ce:a9:50:2d:7b:e0:2b:17:2e:1b:73:a1:ea:90:a4:90:69:56:
         9c:b9:31:aa:6c:81:39:6f:c2:bf:f2:1f:be:c0:1b:7b:c0:44:
         bb:b8:9d:88:07:91:4b:29:db:ea:73:06:0b:ac:27:70:93:cf:
         be:cf:c5:db:c2:44:da:15:16:91:14:6c:47:28:d6:f2:42:45:
         e7:55:93:43:ab:0b:90:bc:41:1a:8a:9d:f1:ca:aa:b2:9d:e1:
         80:26:d3:3e:1b:34:7a:c7:2e:69:4b:86:dd:fa:e5:7c:c9:60:
         ea:2c:9b:3e:3c:6b:b6:0d:6f:75:76:45:e8:6e:be:7f:65:7c:
         b2:d3:e4:35:1d:ad:bd:cb:ba:5b:f9:70:44:18:95:6f:35:0f:
         ca:de:4a:24:7c:1d:15:bb:b4:aa:a0:a4:89:ac:ed:c5:15:df:
         3c:a5:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:29 2025 by rpki-client