Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File:                     oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier:          2eKixcJqUsr7yAL02PB0PURhCmol2jAVNZi4OlgKXnM=
Subject key identifier:   36:FF:4C:CE:43:CB:52:AC:A8:60:EB:CA:9E:56:C4:E3:C8:F6:C9:6E
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer:       /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial:       01984776E317C24A528D3080EA2CD3EC9484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 16:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:30 +0000
Files and hashes:         1: L99cT_8YQtbahh4i-nNP79DcPFA.roa (hash: +5kyh5yoNHZbQN4E1W2qiCARpK6qPNt6G4mi9GI03Hk=)
                          2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: seVCun0WLQIANo+eGsBoDopXlFOg6+vOlJCdstcTjec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e3:17:c2:4a:52:8d:30:80:ea:2c:d3:ec:94:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
        Validity
            Not Before: Jul 26 16:00:30 2025 GMT
            Not After : Jul 27 16:00:30 2025 GMT
        Subject: CN=36ff4cce43cb52aca860ebca9e56c4e3c8f6c96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:0e:27:e9:b0:a4:c6:66:43:ce:dc:97:7e:
                    1f:94:ed:57:c3:fd:d5:1b:0b:90:22:51:0a:a1:bb:
                    10:f8:f7:fc:7c:24:2a:57:cf:36:f7:d1:91:f8:08:
                    33:7d:f6:c6:f5:c9:e0:15:f9:f2:e0:fb:7a:35:ed:
                    d0:07:20:47:d7:f2:42:e8:a0:ca:ff:96:a7:53:b1:
                    b5:e5:f3:3d:e1:ab:88:90:9f:b8:7c:d5:1d:b5:2a:
                    8f:03:95:a6:bd:6c:f0:23:d8:9f:6c:35:c0:68:90:
                    ee:be:94:58:33:3d:12:e0:cd:d7:ef:76:65:aa:7f:
                    d3:f6:fa:4c:b1:de:27:3e:f4:65:28:3b:ca:b8:db:
                    17:0e:e4:05:0e:39:45:bf:02:13:74:49:c5:eb:bf:
                    4c:97:89:56:8b:9c:ac:bc:19:c8:8b:11:10:5b:76:
                    0b:f1:55:7a:5a:7f:a7:ae:12:d7:f0:19:c0:ba:5f:
                    df:b3:30:8b:58:7b:cf:2d:d7:5e:24:33:48:b5:e7:
                    1a:36:fc:22:32:ab:f4:ae:90:28:e0:1f:31:21:e2:
                    83:cb:94:49:cc:b6:3f:5a:a3:10:23:a1:db:13:f3:
                    de:0a:60:5b:38:c7:22:af:72:9c:2f:07:af:f5:26:
                    7b:38:89:ca:29:88:95:14:19:e3:bd:2a:3a:b6:e9:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FF:4C:CE:43:CB:52:AC:A8:60:EB:CA:9E:56:C4:E3:C8:F6:C9:6E
            X509v3 Authority Key Identifier:
                keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a5:f0:ca:2d:13:5a:53:4d:e6:32:9a:e6:b8:ee:75:90:c7:
         92:c1:fe:8a:00:ea:43:c7:07:aa:73:11:0e:8a:5a:4b:83:44:
         f9:8d:2b:a1:60:4d:10:e4:8a:4a:29:f0:a4:e4:9c:bf:35:41:
         7d:e3:6a:f0:77:4e:36:e8:b5:2e:8d:d8:29:d1:48:71:aa:61:
         5a:b9:02:d4:13:e4:c9:e1:a2:ba:eb:fe:fd:e7:3d:27:81:16:
         a0:82:4b:29:88:da:67:ac:fe:73:61:2a:61:b6:29:ae:e9:76:
         b1:b2:e4:a2:62:6d:b8:c7:02:d6:b3:10:6a:77:b6:79:e9:b8:
         fc:55:c6:8e:47:75:75:22:80:69:68:79:7e:21:ef:1b:39:3b:
         7c:01:3d:e7:f8:02:f5:19:3f:8a:98:31:c0:58:a7:d9:1a:d8:
         80:fd:75:5d:de:08:ae:20:4f:20:44:ba:e8:6f:59:9b:16:57:
         ff:6b:54:55:13:7f:67:fa:3e:1c:13:03:1b:e0:f3:e5:0d:65:
         bf:96:fd:7d:55:9e:9f:36:4c:7d:62:ed:83:ef:cf:ba:09:37:
         ce:8a:8d:2e:13:69:54:ec:ce:6b:44:6f:66:f0:cc:a7:81:f9:
         1d:ae:5d:32:64:81:6a:fc:93:16:17:97:9f:d1:87:5b:48:4e:
         c4:64:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:48 2025 by rpki-client