Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File:                     R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier:          OITlhdznFgg6a/gqMBqB/L/bkF7o8BYUmMjMTdSsvn8=
Subject key identifier:   2C:FB:9D:E0:BF:D0:D1:88:19:87:E9:BC:C4:3F:03:76:E8:26:7F:18
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer:       /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial:       01993492B6169A1E81823827BC436A36166C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number:          15E7
Signing time:             Wed 10 Sep 2025 17:00:53 +0000
Manifest this update:     Wed 10 Sep 2025 17:00:53 +0000
Manifest next update:     Thu 11 Sep 2025 17:00:53 +0000
Files and hashes:         1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: HNih2sU01wV5wEi17dFdJOm4KIDvorUaufO5f6jmDhw=)
                          2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:92:b6:16:9a:1e:81:82:38:27:bc:43:6a:36:16:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
        Validity
            Not Before: Sep 10 17:00:53 2025 GMT
            Not After : Sep 11 17:00:53 2025 GMT
        Subject: CN=2cfb9de0bfd0d1881987e9bcc43f0376e8267f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:96:bd:15:24:56:99:0d:f7:0e:5d:77:27:
                    23:83:71:33:d9:49:0c:b2:d7:9b:05:aa:b8:66:e8:
                    9d:b9:ab:b4:3e:df:a9:d0:da:ad:b5:8a:63:6d:13:
                    74:16:b6:17:e1:31:7f:e2:76:fe:e9:09:11:17:80:
                    e6:12:1d:af:59:bd:62:7c:a9:09:eb:34:15:93:78:
                    43:df:45:ae:df:92:14:f1:aa:39:d6:96:92:99:c0:
                    d0:91:73:68:e9:dc:e3:1a:f1:a1:cb:b8:44:8c:44:
                    63:97:88:ab:e2:b9:15:72:b1:67:63:f5:6e:fa:f0:
                    8c:63:53:c1:60:6e:11:8c:4a:8c:af:4f:32:9a:c3:
                    69:72:ec:65:57:e4:0f:4a:a7:96:29:1f:d2:eb:b8:
                    e5:0c:c4:ab:dd:eb:6b:77:27:e4:b8:c3:ad:e6:24:
                    f8:66:21:99:37:18:f1:7a:8e:15:83:42:b0:3c:9c:
                    ca:8d:aa:51:c2:21:ee:26:aa:3b:08:41:41:3d:84:
                    c4:4a:25:ce:88:fd:d5:94:d7:ad:3b:c6:d0:de:13:
                    3e:aa:1a:ca:07:51:9c:62:cd:47:20:5b:4c:be:b8:
                    cd:90:65:4a:4c:8c:2e:02:69:fc:38:54:5d:27:fe:
                    20:56:23:bc:98:28:09:60:7c:aa:96:85:05:3d:3f:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FB:9D:E0:BF:D0:D1:88:19:87:E9:BC:C4:3F:03:76:E8:26:7F:18
            X509v3 Authority Key Identifier:
                keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8f:19:10:a6:a7:14:1c:91:c2:7a:b1:2c:c9:f6:d3:bc:9d:
         d1:0f:be:fb:df:0e:22:ae:ea:9a:2d:3b:32:68:0f:0a:f0:e8:
         75:de:68:07:ac:64:8d:ec:8e:a6:38:f2:85:e5:06:39:f6:a7:
         ed:4f:06:73:8e:47:58:81:a4:50:51:7e:10:fd:8c:b0:75:b6:
         f8:e9:8c:e6:91:83:19:21:ef:42:12:1c:0e:c8:74:0b:1a:f9:
         91:5c:c7:9b:d1:ab:86:78:bf:54:1a:0d:15:cc:a8:3c:fe:e7:
         8a:0c:12:65:3d:50:40:71:4b:c6:0c:ba:c0:d5:64:cc:f2:16:
         c3:fa:f8:b9:5a:56:bd:c3:64:ec:77:39:46:eb:a7:ac:2f:95:
         1c:e3:84:eb:24:91:df:13:31:ad:73:74:7a:ad:00:e2:16:98:
         08:7a:45:45:49:86:47:79:0c:26:89:a9:ee:2a:e2:a8:de:e2:
         e6:d2:53:00:f2:43:98:ef:ad:b5:92:74:99:19:7a:fe:04:98:
         81:7d:fa:b9:6e:07:6d:e8:ab:82:72:c4:91:9f:b6:70:8e:8b:
         41:0a:11:db:59:1b:b9:19:1f:1b:c2:3d:0d:fd:eb:43:e7:f7:
         9a:f2:d1:87:d6:22:97:ea:ec:9a:b0:b6:0d:6e:22:fa:4c:3a:
         4d:e4:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:11:01 2025 by rpki-client