Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          /X4cD3BYXNkRuHMcQfJqGQh+jTTBXkKbXNf+Xv6s0WY=
Subject key identifier:   01:78:7B:66:47:1F:61:30:D5:98:62:14:5D:A8:E5:71:16:1F:9A:1D
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       0198499C57D87E6804D16D4BB7E6862DD7CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          1600
Signing time:             Sun 27 Jul 2025 02:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:39 +0000
Files and hashes:         1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
                          2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: 6XsYuTbT3H7scmpErTkOeWXD5pkesVThDCLxSUW7Mgs=)
                          3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
                          4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
                          5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:57:d8:7e:68:04:d1:6d:4b:b7:e6:86:2d:d7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Jul 27 02:00:39 2025 GMT
            Not After : Jul 28 02:00:39 2025 GMT
        Subject: CN=01787b66471f6130d59862145da8e571161f9a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:dc:cf:aa:c3:41:92:b6:ec:6a:9b:7b:35:
                    5d:85:0e:bb:95:d1:25:94:e0:b6:80:78:2f:5e:47:
                    36:6c:a0:9e:f2:b0:8d:85:69:2b:3c:99:db:90:cd:
                    45:d2:1d:5c:98:58:bf:1a:2a:70:e0:e1:2a:c1:b1:
                    c4:f9:a9:38:27:2f:8c:94:8c:f0:63:23:75:18:98:
                    26:52:94:d5:47:43:37:67:d2:04:74:b1:85:ab:16:
                    8b:e1:be:66:aa:4e:af:ad:fc:5a:9a:1f:e3:0b:f6:
                    f8:a2:18:9c:e4:4c:ec:83:ea:4d:a8:1a:67:0f:d6:
                    8d:d7:02:1a:af:25:b5:66:86:86:bb:ae:f6:8c:78:
                    a6:5b:76:7c:ff:74:73:e2:2b:09:c5:37:48:91:aa:
                    3b:01:a6:be:42:81:69:43:d6:91:62:bb:d1:36:e6:
                    93:4a:43:53:be:c3:47:13:5c:9b:03:b9:81:b0:0c:
                    07:39:a7:ea:a8:bf:a8:65:25:ec:b9:3f:6d:97:45:
                    69:c6:70:24:35:43:4b:73:86:22:1f:d8:0d:92:35:
                    67:0f:13:8c:a2:4e:8f:d4:d0:43:4d:95:c7:e8:bf:
                    c9:26:b1:b3:a3:a8:0d:cb:60:08:86:15:82:dc:d7:
                    8f:8d:c5:84:de:e3:a4:9c:29:e4:ed:2a:0f:91:f5:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:78:7B:66:47:1F:61:30:D5:98:62:14:5D:A8:E5:71:16:1F:9A:1D
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c8:93:3e:26:ce:ba:8b:8b:e3:14:d5:10:49:f3:9c:74:48:
         82:a3:f1:96:26:1b:55:c4:86:2e:ab:e7:89:b0:ee:bc:99:bb:
         34:52:4c:56:10:6c:60:54:cf:57:ed:36:e2:21:fc:5c:45:3e:
         fd:93:ea:10:53:81:d0:6b:5a:c8:ee:e5:68:66:e5:1d:b3:e1:
         02:83:36:d4:0e:e3:93:55:fe:6b:33:cf:5a:46:9e:84:10:89:
         09:49:91:af:c0:85:5d:d1:e5:1c:86:19:49:f5:cb:37:6f:9f:
         47:0d:dd:5a:e9:1d:14:17:7d:52:59:19:6f:2c:0d:d6:cb:0c:
         4a:4c:93:ec:21:e3:32:df:2e:f3:bb:8b:3d:a3:45:94:b9:27:
         a0:b2:e0:f0:13:46:f1:6d:f4:54:12:f2:ba:ca:7b:46:67:b9:
         6d:18:ef:2e:15:75:db:5d:d7:71:52:bc:4d:d5:dd:76:a1:55:
         66:72:92:fa:9a:c2:cc:eb:69:25:4d:6c:64:40:e6:fb:ff:fb:
         67:42:54:de:9c:42:f0:15:16:e3:54:4e:bc:13:f0:62:cf:ff:
         59:cc:81:a9:32:6a:aa:65:cd:c8:83:78:81:f7:1c:51:3a:16:
         5a:8f:40:fb:6f:2e:12:a2:43:30:af:63:96:58:f3:0c:5d:50:
         98:c0:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:25 2025 by rpki-client