Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File:                     Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier:          CGKqJv6nDGMOGlHotb9hrU+aqlwSYlyy2vfAq8ElHac=
Subject key identifier:   A5:B3:04:58:B8:44:F0:53:DE:E8:7A:37:66:A6:0C:C8:27:32:80:3B
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       01987E2F108914859894969DC2CAAB9F765D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number:          1620
Signing time:             Wed 06 Aug 2025 07:01:10 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:10 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:10 +0000
Files and hashes:         1: DivuYSIZ0IbHdUyOmrKzT5RvjmU.roa (hash: KjjcUzYlaXAgYY3xR+AgJhW+w3tZ/CR+0bNP9/27Jqc=)
                          2: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (hash: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=)
                          3: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (hash: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=)
                          4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: YJJNI71TybtDUx2umbcdLTjP2ahuVjVk+0W9pALsEWU=)
                          5: NVPuKIwqd6rXOALhTsUic2d4hlA.roa (hash: T7Dyc87WaeHKY9kvTOaXHf9jWNh88eWIMhxiFozXzd0=)
                          6: ZFAYM9mu8jS6R0AyRbdSE1lnwbA.roa (hash: tJHXTlE43Al/Bk06k42NooyquRAu3ree+mY4auRgVIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2f:10:89:14:85:98:94:96:9d:c2:ca:ab:9f:76:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Aug  6 07:01:10 2025 GMT
            Not After : Aug  7 07:01:10 2025 GMT
        Subject: CN=a5b30458b844f053dee87a3766a60cc82732803b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:61:a9:5f:e3:bc:73:13:bd:a0:b7:62:c1:
                    66:c7:9f:98:92:2b:89:a3:af:13:21:84:41:53:29:
                    47:21:3b:f0:4c:8d:82:80:fd:70:3f:64:d2:8a:52:
                    a5:d8:1c:26:72:29:69:53:ad:5b:ac:d7:08:0f:65:
                    53:ac:c0:b2:5b:0f:41:e1:dc:8b:75:67:a1:c9:c9:
                    e1:12:cd:02:46:5c:fa:1e:a4:53:0a:8b:f1:63:c0:
                    7f:ef:66:d0:d3:25:4b:cf:bd:3f:db:91:ad:6b:67:
                    0c:67:f1:6c:6a:70:cc:ad:72:9a:d4:df:9d:95:14:
                    26:ee:7c:8f:09:e2:f8:1d:3d:74:e2:24:d8:d3:cf:
                    49:71:b1:bd:76:26:7d:4f:a0:a1:24:fa:0f:75:b8:
                    03:be:f0:9b:61:e5:07:ad:51:ca:6e:36:cd:b5:7a:
                    db:62:8a:e1:33:b0:04:ec:8d:53:ec:0c:2a:71:bd:
                    d6:e5:91:a2:59:b1:7e:53:a2:c7:2e:bf:21:6a:d2:
                    a3:83:66:66:b6:16:b0:48:fa:e9:e3:66:fa:3a:f0:
                    e2:f5:dd:f1:04:8a:2c:23:81:06:32:fb:05:eb:51:
                    1b:a9:31:c6:df:fd:e9:43:6c:a5:3b:d0:78:0c:9a:
                    98:ff:38:7c:c1:dc:f2:bb:e3:b5:6f:d8:bb:8d:a9:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B3:04:58:B8:44:F0:53:DE:E8:7A:37:66:A6:0C:C8:27:32:80:3B
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:b0:1d:2d:a6:fa:52:4b:e6:7f:e2:20:f5:51:2d:02:58:
         fa:fe:eb:75:f9:64:bc:c3:9a:63:22:86:ea:80:e1:5c:0e:16:
         fa:02:b1:80:63:fc:0c:c4:e1:d6:49:cc:fc:92:89:6d:8a:25:
         11:66:df:40:4f:25:47:52:99:c3:6b:6a:9f:4c:0c:af:52:1f:
         cd:c0:4f:23:68:24:1f:50:3a:1e:50:de:f6:05:aa:aa:22:97:
         9c:13:12:4e:07:89:d7:4e:ca:3f:a5:99:cb:e4:b4:c7:a3:30:
         c3:7e:10:47:bc:f6:a9:75:82:61:5c:a8:a0:3c:02:22:e6:0f:
         a4:86:4f:4a:db:53:82:89:43:78:4e:7e:e0:03:4c:f0:fb:62:
         10:e4:e8:a6:5d:de:c6:80:8e:10:ab:86:f7:bd:3f:10:86:df:
         a4:90:e5:f2:c3:c7:4f:93:34:b3:fe:12:09:73:92:93:09:29:
         43:bc:97:5e:63:67:8d:fc:ea:03:d3:b3:24:94:19:f6:f7:25:
         b8:86:31:e9:7e:e5:d9:cb:bc:50:1f:81:fb:f9:8d:93:90:19:
         48:e7:1f:82:ac:14:08:cc:80:60:1d:50:5b:1d:33:cf:ca:63:
         6e:a1:ec:92:37:4f:11:70:81:e7:e9:98:d5:3b:fa:88:39:2f:
         74:b2:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:29 2025 by rpki-client