Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          +yWQYLEAsYcNnRcDdnDyXo+XLYOZBKxU0gegdANmODo=
Subject key identifier:   E0:4F:0B:9B:2E:A7:E6:19:DB:20:36:67:28:B4:BE:74:DE:BB:36:07
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       019849651CEE719D5E9B3D52BC05BB1CD862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          1591
Signing time:             Sun 27 Jul 2025 01:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:19 +0000
Files and hashes:         1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: lGHb4pFZ/PJ2bchQfDEI1fKmf7DRrLoRcIA95bmxeX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:1c:ee:71:9d:5e:9b:3d:52:bc:05:bb:1c:d8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Jul 27 01:00:19 2025 GMT
            Not After : Jul 28 01:00:19 2025 GMT
        Subject: CN=e04f0b9b2ea7e619db20366728b4be74debb3607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:98:07:67:4e:26:48:3c:54:e7:4a:a6:01:
                    c8:50:ad:e7:69:8c:f8:2a:18:1f:69:3a:31:ef:91:
                    d1:66:11:f3:f8:9c:07:0f:e3:ff:2d:4c:f5:57:af:
                    22:28:a2:e9:71:bf:43:44:64:12:b3:97:85:f2:3b:
                    82:93:75:23:3c:05:cd:b8:d6:07:76:40:42:b7:37:
                    63:92:61:5f:21:3a:b0:29:a8:58:b4:0a:d2:10:20:
                    d5:93:ae:48:bb:ad:a0:ac:f8:1f:a4:a4:b6:e1:12:
                    99:c1:56:a3:5f:ab:86:ce:f9:5f:9e:5a:97:ba:8d:
                    08:82:77:66:9b:dc:e2:7e:5b:78:52:2f:8e:ad:cc:
                    5a:bf:3c:ba:f2:57:60:f4:88:07:25:5e:83:ce:56:
                    1d:af:43:22:7b:a7:16:02:31:00:0a:b1:05:ff:bb:
                    cb:54:8c:16:4b:cf:4c:40:dd:3f:c5:fb:a4:9d:96:
                    41:f4:61:96:9d:47:54:c3:03:78:3b:09:cd:51:fa:
                    13:8d:01:05:9c:1e:9c:93:7b:bb:51:fa:fc:fc:81:
                    44:d9:91:e7:34:5c:f7:3a:87:19:67:1b:94:21:ce:
                    e9:25:cd:ab:0d:97:cf:a9:b3:a2:76:fe:34:3f:5a:
                    9b:a2:28:ce:ad:60:44:a2:68:5e:27:96:8f:13:97:
                    71:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4F:0B:9B:2E:A7:E6:19:DB:20:36:67:28:B4:BE:74:DE:BB:36:07
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:8e:d6:63:e3:78:bb:3f:14:e1:a3:aa:08:dc:55:e7:dd:
         e5:8e:a1:80:50:f3:34:e1:a1:10:8c:d6:04:4f:ce:71:e3:7f:
         58:e8:2c:98:da:55:a1:13:aa:0c:16:8d:a4:47:f1:56:f3:65:
         f0:78:0f:d8:eb:86:fd:dd:84:5d:0c:ce:6e:25:34:f7:6c:2c:
         f7:3c:9f:14:a4:23:72:bb:5c:ef:3b:52:49:be:a6:48:bf:dc:
         c9:ca:f3:93:58:ad:29:83:d8:28:80:33:97:eb:0e:25:9f:c9:
         38:e3:3c:df:71:6c:71:2f:ab:0f:e2:a4:fd:9a:e3:55:da:92:
         cf:7f:1f:2e:2f:64:a2:67:22:b3:bb:2a:4f:e3:d9:07:53:04:
         dc:03:72:1c:5f:12:6e:03:74:e2:0e:de:c5:ec:01:60:8c:a7:
         f0:da:4d:ee:94:19:9f:cd:a4:bf:dc:be:2d:36:6c:82:91:01:
         2e:c4:29:e9:bd:09:39:01:c7:89:41:d7:25:ec:4e:16:75:1a:
         f4:3b:85:47:e4:9b:43:3b:c5:56:ec:b0:fa:36:2e:35:bc:ae:
         0e:02:f8:4e:fd:26:d0:89:d7:78:0d:7b:95:c0:1f:dd:ed:a4:
         3d:05:b1:08:e4:c2:bf:3c:a5:09:e3:9b:cb:31:02:70:fd:b5:
         a7:84:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:57 2025 by rpki-client