Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File:                     R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier:          3b4NzbmnXClvZHqA8Uq5+9BUw0nLRDjx8ZOj124eLTY=
Subject key identifier:   2D:69:32:DF:C5:41:41:0A:52:25:B4:8F:DD:D2:D1:01:0A:78:B4:69
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer:       /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial:       019888B22B3EB7AD13DA8DAC7392B1DF84C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number:          158E
Signing time:             Fri 08 Aug 2025 08:00:34 +0000
Manifest this update:     Fri 08 Aug 2025 08:00:34 +0000
Manifest next update:     Sat 09 Aug 2025 08:00:34 +0000
Files and hashes:         1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: DgxFtYJPTA3WIhPzk6hqZkvltipRaKdx7mNi+rNZtP0=)
                          2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:b2:2b:3e:b7:ad:13:da:8d:ac:73:92:b1:df:84:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
        Validity
            Not Before: Aug  8 08:00:34 2025 GMT
            Not After : Aug  9 08:00:34 2025 GMT
        Subject: CN=2d6932dfc541410a5225b48fddd2d1010a78b469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:4a:f9:03:59:a2:2b:85:71:f5:10:f9:a0:
                    d0:fc:f8:2d:91:e8:76:5c:e7:8c:6f:c4:9d:e2:3c:
                    f9:04:ae:d9:ed:2f:4b:1f:6e:c4:dc:a1:2b:9b:05:
                    6c:da:eb:60:36:12:06:dd:8e:97:96:c0:d9:16:0b:
                    be:dd:a6:70:38:e0:23:9e:1b:63:4a:04:66:f2:f9:
                    a4:ea:dc:22:d8:c8:40:37:d6:0f:43:a1:52:59:d5:
                    b8:09:13:2e:26:c7:39:79:ac:18:c1:a6:03:99:29:
                    38:27:10:5d:02:b8:67:3f:0b:a2:a5:15:a0:e6:08:
                    1c:73:c3:68:d3:e9:5a:e4:c2:95:e5:a1:37:54:bf:
                    48:01:86:02:ed:f9:f4:67:c7:9b:bc:26:fe:52:0c:
                    cd:63:f2:86:ef:77:fe:be:22:4e:11:bd:31:65:c4:
                    c5:41:2c:8c:6a:78:c2:f0:ee:bd:6d:68:41:53:95:
                    ca:fe:8c:3d:4e:7f:2c:f8:8a:75:e4:48:4e:f3:a2:
                    1e:5c:c0:ac:fc:51:2b:c2:1c:b0:d6:03:b5:59:21:
                    7d:5b:b3:73:bf:97:20:53:0a:47:c6:c4:59:4d:37:
                    ad:46:f6:90:97:43:3d:18:ca:8a:c8:f0:a7:50:6c:
                    3f:2c:4c:27:96:60:c4:d9:42:fb:1d:b6:99:5d:fd:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:32:DF:C5:41:41:0A:52:25:B4:8F:DD:D2:D1:01:0A:78:B4:69
            X509v3 Authority Key Identifier:
                keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:36:11:14:bb:76:32:8d:17:2b:65:38:09:f9:cd:bf:09:
         62:75:ea:ca:f0:00:76:7a:4d:04:04:76:b8:63:a4:37:ed:6c:
         9a:c1:b9:67:97:71:e9:33:d6:b9:d9:d5:cf:94:63:69:1b:3e:
         c7:c7:41:b1:9f:cd:06:d4:b8:1e:65:5c:dd:5b:60:88:3a:4d:
         93:7f:91:cd:01:db:a3:d7:40:53:6c:1a:98:ec:af:8a:bd:ec:
         df:1b:80:5c:15:55:f7:a3:07:65:78:64:e0:5c:bf:6c:90:11:
         74:78:25:0b:d7:21:4a:b3:b1:28:92:57:34:64:b5:bf:e3:77:
         3d:e6:c7:cb:85:4a:07:4c:26:87:e3:4a:89:c9:d0:9d:3e:3a:
         e6:01:1d:73:cd:49:f9:8c:34:7d:64:a1:7b:d6:ef:25:5b:b2:
         50:69:e2:6f:f0:67:39:5f:3f:d1:80:90:0d:4d:f8:c5:f8:8e:
         ed:70:36:c0:0b:4f:aa:b0:e8:05:c6:e9:78:1f:5c:bd:3e:ae:
         68:0e:0d:f6:ab:be:64:91:ec:12:cf:04:8d:e7:48:dc:63:79:
         b4:37:24:83:86:6b:88:24:b1:1b:e4:e9:88:ea:de:30:b1:f5:
         8d:74:c9:72:20:c9:e5:17:e5:77:c8:70:24:77:d5:51:87:0e:
         3f:63:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:09:40 2025 by rpki-client