Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          CBSiwPaebDEC2J+atRboy4HrJ4ZToinq9ZrSqt93Dso=
Subject key identifier:   19:B8:58:BA:A9:BA:F9:C9:5E:4B:58:5B:B0:AE:F7:60:56:3E:36:46
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019848C040ABE4A77ED11FA61ACAB9A22CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          1608
Signing time:             Sat 26 Jul 2025 22:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:15 +0000
Files and hashes:         1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
                          2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
                          3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
                          4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
                          5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
                          6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: CV4oVWgEauh0OMn2yhkc/iXjkP0tPjo22XIVP1u3Rfg=)
                          8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
                          9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
                          10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:40:ab:e4:a7:7e:d1:1f:a6:1a:ca:b9:a2:2c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jul 26 22:00:15 2025 GMT
            Not After : Jul 27 22:00:15 2025 GMT
        Subject: CN=19b858baa9baf9c95e4b585bb0aef760563e3646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:0e:7c:39:cd:c3:e3:29:e1:d3:6a:1c:3d:
                    d4:69:7d:8f:3d:1a:ee:34:30:85:77:93:a9:20:de:
                    ee:7d:89:13:49:dc:38:7b:e0:96:12:1b:29:58:70:
                    74:bd:d8:15:be:29:2a:24:e5:76:d5:55:16:24:d6:
                    9b:ab:b5:0f:92:d4:12:6a:80:fd:84:60:de:7a:49:
                    07:35:0b:ce:38:dc:e4:b7:32:8a:7a:5f:b0:11:15:
                    66:ea:79:fa:98:c4:a4:f1:2d:c9:d6:64:bb:be:0f:
                    d2:18:a5:40:04:62:d0:8d:59:bc:89:02:b0:68:0c:
                    9c:45:b4:8f:dc:88:e0:ee:b3:02:9b:52:05:38:7d:
                    73:e3:cd:c7:27:ad:07:4f:5f:8d:a3:12:b4:40:a2:
                    58:ff:db:0c:4e:1a:81:e0:7c:d7:0c:95:d2:09:7d:
                    73:18:b8:b3:e1:74:fd:65:b2:0e:43:cb:7d:5d:5b:
                    b2:b0:88:32:38:2e:88:70:77:d0:3f:db:d2:5a:e1:
                    32:1d:ac:a1:18:ca:a3:89:a3:08:6a:4c:b7:d0:84:
                    a3:b8:a7:71:6a:0b:d6:71:18:54:8d:0f:13:23:97:
                    4e:61:97:ae:64:ac:ac:d0:08:9e:1e:79:14:6c:3b:
                    a6:dc:06:73:97:c6:d8:68:84:1f:22:bb:71:5c:4e:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B8:58:BA:A9:BA:F9:C9:5E:4B:58:5B:B0:AE:F7:60:56:3E:36:46
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:30:e4:10:65:ee:f1:d0:4e:6d:e4:38:54:d5:cb:57:69:
         de:07:9a:c9:06:db:e6:4a:a8:a9:02:36:57:4a:2f:f8:32:60:
         78:4d:bd:4d:b2:44:bb:e3:3e:ec:8b:4f:c8:e5:c4:5a:27:dc:
         67:01:47:24:78:4f:e4:0a:e5:e9:ad:93:3a:12:1e:75:47:8a:
         09:65:62:1d:49:96:8f:dc:0c:55:93:9a:a3:57:f6:50:56:7c:
         bf:33:6b:d9:dd:75:71:a7:09:3b:db:00:5d:ca:c4:2d:f6:34:
         c0:b4:1d:90:65:63:dc:5b:b7:a0:e8:cf:0c:ff:ad:57:84:ec:
         0f:a5:27:15:50:3e:43:ad:1f:59:01:b1:cf:2a:22:f0:4e:30:
         de:e8:ac:4d:16:ef:b6:ba:5b:49:d1:63:1c:ad:c3:a3:ec:ec:
         b7:b3:8d:76:2a:2b:f4:c9:cc:4c:e7:bb:1a:0b:5f:63:38:ed:
         e0:4c:ef:55:cb:bb:d9:0b:cd:21:2c:fc:dd:26:b2:55:7c:29:
         06:70:19:d6:38:60:37:6f:b3:59:69:1f:05:ca:3d:af:22:43:
         e6:98:7c:78:5b:18:4b:62:70:a6:19:e4:9c:99:ee:28:44:a0:
         d0:58:17:f6:90:53:c3:9f:78:ed:14:21:6a:15:e9:92:ba:b6:
         47:cf:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:18:28 2025 by rpki-client