Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          bNfPPiMtyRey83sIMKa7xJ5/DlPq55HA1vW0lFu1MRU=
Subject key identifier:   37:60:9A:D7:50:04:8E:AB:D4:41:B4:40:C9:49:8C:CC:2A:43:4D:99
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       019845897245C4925893864BB19B6742E1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 07:01:32 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:32 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:32 +0000
Files and hashes:         1: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (hash: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=)
                          2: G3ZIKi5NlW3jvdkfzVqAJ4xyXOo.roa (hash: rwjhfMhSY3LA1PgrA0qmqDeuJnCpkzyImzevDSh2Ji4=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: u09bXaLlZUoEJOPlETjvg/CJsMk+CwF00jHU4tx1+so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:72:45:c4:92:58:93:86:4b:b1:9b:67:42:e1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Jul 26 07:01:32 2025 GMT
            Not After : Jul 27 07:01:32 2025 GMT
        Subject: CN=37609ad750048eabd441b440c9498ccc2a434d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:cc:30:37:ec:b8:a8:83:c8:f2:d0:50:ba:
                    a5:28:40:d6:92:f2:2f:15:38:cb:5e:92:8a:69:5f:
                    b9:1b:36:d8:59:d4:c9:b0:f0:60:b9:f3:0b:06:b5:
                    fe:8c:61:f4:a2:66:1b:4e:85:5f:ee:7e:38:ff:d6:
                    21:eb:6a:31:0a:82:9c:ce:c7:33:a0:74:cd:50:24:
                    de:d0:44:e0:c0:4f:f6:13:21:a8:14:1e:10:4f:d4:
                    2c:ba:cd:18:94:db:1c:a2:47:b6:14:88:f7:0f:50:
                    7a:52:82:1b:79:42:a3:23:de:a8:eb:2d:d2:60:ed:
                    78:12:d4:e8:26:79:ea:d1:ca:40:b5:70:8a:da:0a:
                    ca:11:0a:53:a4:bd:1a:61:99:bd:65:54:b6:64:78:
                    18:de:73:49:21:23:85:09:a0:33:0c:e1:75:a2:fc:
                    0b:f3:15:3e:a7:e5:7b:1c:25:be:01:7c:34:f3:65:
                    a8:5f:a3:2c:e5:d8:02:50:c8:2a:cb:70:1c:e7:e4:
                    7e:4f:a0:fc:2e:c8:9a:23:33:69:4f:bd:fd:dd:a3:
                    8a:bd:6b:07:4e:6c:c4:89:48:f7:97:e9:e8:d0:59:
                    8d:49:ee:da:42:c2:eb:9b:c9:0e:11:63:be:5d:95:
                    ad:19:e4:ba:12:9e:a3:4a:f6:e1:ee:1f:b7:a3:8a:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:9A:D7:50:04:8E:AB:D4:41:B4:40:C9:49:8C:CC:2A:43:4D:99
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:92:f6:3e:4c:c6:03:03:4b:ed:ca:c5:63:34:2f:20:00:
         4f:13:3b:42:5b:a0:c5:ae:2c:19:de:ab:39:b7:75:ae:64:dc:
         28:f1:b5:ab:78:e4:98:a3:91:12:46:75:46:f1:55:99:94:f9:
         bb:5d:a9:eb:09:d4:d7:2f:45:b1:33:4f:c6:0e:56:f3:a4:38:
         71:7d:a8:84:25:d1:f7:48:b3:90:a4:c1:7f:10:3d:de:76:f5:
         fc:8e:7b:11:71:22:4f:32:70:83:f8:14:e3:24:48:94:45:f8:
         26:a2:c6:7d:dc:09:77:45:e2:19:ee:7f:0b:73:cb:c7:6d:70:
         69:26:6a:96:3e:76:2d:1d:d9:69:9e:93:e3:85:f5:89:1f:75:
         bc:39:08:6f:da:ac:62:ae:2d:87:a0:51:38:0a:60:3e:9d:b0:
         93:fe:49:85:4a:ae:e4:4d:48:62:99:32:a2:7d:9a:e9:b9:4c:
         46:fb:b7:88:4f:fe:b4:6a:fc:01:d2:57:8a:0b:4d:39:f2:99:
         70:76:b8:20:b3:03:8b:e6:c8:ba:17:56:b2:4d:d6:85:43:2c:
         67:c5:7c:57:51:34:92:72:dd:b0:a6:88:da:1b:ad:74:73:6f:
         29:42:b7:8d:d1:67:a9:50:79:a9:dc:8e:9c:2b:72:ff:79:23:
         62:11:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:09:04 2025 by rpki-client