Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
File:                     ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json)
Hash identifier:          cF/uHpLavFYcY1ePOJ9HuSOnUEK/ZvbBAW25BnXkdng=
Subject key identifier:   B0:AD:99:18:18:88:97:6D:58:F0:A7:4E:9A:10:2C:E2:CC:42:19:59
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Certificate issuer:       /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial:       0198499BFF5FCA1DB8A53BF40BF77ACBD166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 02:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:16 +0000
Files and hashes:         1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: +TKO5piDmcE/46/YUV2+TiIN7CwPLMtrnbXtAsDAwhs=)
                          2: oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa (hash: OUAmV9WMtswHLR9c4KKcHWFm3C1cc4HUY52wOre6m1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:ff:5f:ca:1d:b8:a5:3b:f4:0b:f7:7a:cb:d1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
        Validity
            Not Before: Jul 27 02:00:16 2025 GMT
            Not After : Jul 28 02:00:16 2025 GMT
        Subject: CN=b0ad99181888976d58f0a74e9a102ce2cc421959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:d8:b3:a9:1c:94:6b:18:19:40:65:a7:87:
                    80:1b:b3:c4:ba:54:1e:86:4c:da:6c:13:d4:b3:de:
                    a7:b6:77:88:ed:3b:c7:c0:31:41:03:c2:fd:90:3b:
                    37:ff:85:71:b6:12:a9:b2:fb:6d:d3:61:43:e6:6c:
                    bc:71:bb:43:20:a8:ef:a7:e2:68:65:26:bc:65:91:
                    de:d9:bb:dd:5a:70:4a:45:f3:3c:71:ac:ab:d9:01:
                    19:c8:a9:e4:e2:2b:0b:f2:55:d0:e8:83:57:73:d9:
                    c6:70:bc:2c:e1:ea:40:f0:cd:13:77:36:76:d7:16:
                    cb:f1:bc:33:c3:28:12:a7:95:4b:d5:c1:c9:ac:35:
                    03:a7:05:70:22:ab:e5:71:f6:18:fc:34:9d:c2:9e:
                    2d:0f:b8:28:ef:29:be:ee:cc:42:f3:eb:b8:2a:3f:
                    3f:38:57:ae:9e:94:23:92:c8:50:c4:22:ad:63:42:
                    61:e6:b9:77:3d:51:9b:d0:10:00:81:b1:c1:45:89:
                    97:04:41:6b:2f:84:77:1d:53:52:2a:f2:58:f7:20:
                    5c:dd:8c:65:9c:87:67:75:d3:18:fb:85:e9:58:ba:
                    da:0a:ee:b5:1e:31:7e:1d:76:0e:bb:02:de:1d:87:
                    33:7b:88:ee:bf:9a:7c:30:5a:35:d1:3c:30:07:ee:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AD:99:18:18:88:97:6D:58:F0:A7:4E:9A:10:2C:E2:CC:42:19:59
            X509v3 Authority Key Identifier:
                keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ee:23:1c:97:e6:be:c1:b5:79:09:66:60:b4:43:85:b8:83:
         6d:03:e6:d3:f3:4a:5d:91:7a:04:99:f5:ea:c4:51:b7:e8:2d:
         ab:29:a2:ae:20:d3:25:ac:41:af:7a:3c:2d:88:ec:f0:50:f3:
         95:21:f7:cc:98:35:62:9c:d1:96:31:0a:19:95:60:b9:dd:56:
         8b:67:12:b1:dc:56:f8:e5:89:94:65:8e:65:ac:2e:9f:9f:d3:
         a8:73:d4:55:86:22:f1:1f:88:92:cc:de:21:e6:20:d8:47:33:
         12:b9:8f:64:ae:28:0d:52:1a:95:86:be:fe:51:8d:c2:0e:73:
         60:b3:fa:75:fc:d1:c8:af:db:d0:4f:6a:60:40:10:ea:c8:fe:
         3e:28:ca:86:d0:c2:e4:ef:19:34:d2:2a:5b:b7:7c:47:8d:fc:
         cd:91:1f:b8:03:0b:2d:ad:2a:80:82:e7:68:b8:c6:8a:e9:34:
         6b:8b:ed:c0:f5:f2:43:91:20:2e:4d:41:26:b9:1d:c0:f8:06:
         2c:d5:67:ff:77:b5:ad:16:5b:56:a5:97:07:01:7a:ec:e3:b2:
         63:bf:6e:96:6d:82:28:23:73:6c:c3:f6:0d:25:4c:6b:82:45:
         38:a1:4e:e3:c5:ca:db:2d:d8:2d:e5:6b:5c:fa:e3:92:2b:66:
         e6:b0:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:59 2025 by rpki-client