Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          b812A56g03loqkWUN9uJ2ntOiLJolxvRybEsDmKCDro=
Subject key identifier:   33:4C:FB:EE:7F:9D:D1:DC:9E:E8:72:57:E7:F5:A9:56:47:55:08:DC
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       019847E531F96056B62ABC72B3444954A031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 18:00:59 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:59 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:59 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: JRuDUK7HwU+C+IsPOJdNixqwqs06aGRorLgw38wuaBw=)
                          2: u07_9pXlmAHNvZNIHp40fo4J9fA.roa (hash: 204TNJbYlIMXBCvMgIFRQa54vmawR7NJf6FejBBRQA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:31:f9:60:56:b6:2a:bc:72:b3:44:49:54:a0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Jul 26 18:00:59 2025 GMT
            Not After : Jul 27 18:00:59 2025 GMT
        Subject: CN=334cfbee7f9dd1dc9ee87257e7f5a956475508dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:29:32:5e:2e:e3:db:5c:af:83:1a:ca:99:
                    90:15:21:b8:65:5b:ac:81:39:9d:a0:db:2e:d8:65:
                    06:66:a3:c4:b4:a8:3a:f6:7f:e6:dc:ac:79:3e:7f:
                    d5:88:47:75:75:b0:dd:e4:27:d7:8d:fc:30:e0:62:
                    48:38:98:67:5d:e8:8e:27:93:fc:b4:45:f2:02:7e:
                    f1:34:d8:1b:22:6e:dc:4a:41:be:9f:92:19:09:59:
                    88:eb:31:df:3f:d8:5e:2e:ff:66:26:60:3b:11:e7:
                    d1:c7:10:b9:8e:0a:48:4a:7f:45:d0:fe:fe:96:2c:
                    ea:9f:34:00:84:8f:9b:9b:0c:f5:42:fb:67:8f:10:
                    25:7a:ce:80:a7:63:24:c5:ff:a8:5d:5d:08:29:81:
                    ec:f1:5a:45:65:0c:26:83:51:6a:54:25:1a:df:45:
                    8e:52:bc:96:c7:8c:d5:71:b1:55:6c:9c:da:57:60:
                    e1:2c:4d:c9:7a:00:6d:eb:d3:e5:8b:9a:f1:19:8f:
                    e3:cc:45:57:ed:d2:d3:96:42:53:cf:19:02:63:ba:
                    d3:b9:06:3f:73:3d:e5:ad:c6:df:3c:f3:62:f0:82:
                    31:57:81:92:2b:d4:5d:59:e5:8b:64:53:94:d5:b4:
                    04:9f:a1:2f:ea:32:bb:dd:ec:32:61:71:54:5b:1b:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:FB:EE:7F:9D:D1:DC:9E:E8:72:57:E7:F5:A9:56:47:55:08:DC
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:50:22:cf:b1:36:de:3b:18:a9:a0:2f:8a:14:f6:3f:06:e4:
         e4:c7:84:ed:64:83:70:29:7a:68:7c:35:8e:25:8b:a2:27:12:
         c3:a1:33:79:34:19:57:9c:e3:0a:5a:46:15:b0:8d:5b:61:90:
         aa:61:cf:16:1c:d6:0e:6b:28:5a:1c:df:7f:f3:83:46:6c:93:
         85:3c:48:a1:4d:58:cb:01:85:8c:30:bb:7c:e7:f6:bc:db:35:
         d3:cf:13:fb:52:b2:20:bc:d0:d3:50:13:8f:6d:23:54:0c:91:
         0f:26:27:21:0f:f5:8d:39:f8:6a:83:62:e6:e3:2e:ec:97:5d:
         c8:6f:6e:ca:c3:2a:05:c4:bc:22:82:e1:16:06:7d:00:25:1b:
         19:7c:4b:1c:01:a9:d1:8b:a3:c2:da:4e:1d:31:34:d3:f1:a3:
         12:db:eb:b5:9f:1c:25:c8:cb:2e:ad:7f:57:e8:3b:fb:98:d6:
         7b:4b:6d:44:73:5b:ea:de:5d:0c:cb:07:2d:d4:97:a5:8d:96:
         ba:1f:57:b3:90:e2:b6:4a:1a:11:b4:a7:aa:90:6e:79:32:a2:
         e0:c3:c4:9f:db:1a:71:13:23:bf:f2:94:35:0b:94:08:95:06:
         e9:de:2c:d3:dd:8c:ee:86:53:18:0b:52:79:ec:d0:f6:30:26:
         68:bc:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:02 2025 by rpki-client