Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File:                     7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier:          YiLRJDsmesA2aQ4L3+OE92Bx1AYJHS7bMIrABUbXbnk=
Subject key identifier:   2E:0E:7D:65:5A:AB:CD:66:2C:CC:5B:3E:8F:03:37:36:13:0A:76:7D
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer:       /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial:       01987C0A53EF79A1F601D0693BA276C646A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number:          1627
Signing time:             Tue 05 Aug 2025 21:01:48 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:48 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:48 +0000
Files and hashes:         1: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (hash: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=)
                          2: 6h2yqqYWrRghoIoxZYGFzpWfew0.roa (hash: U+lnqoe9GQk5UXj86Etet1S1TemuykTuT7gj4NeX2wA=)
                          3: 71BeoRLY37qqGRrW0q7PaZ4MISA.roa (hash: q87wHV6L3WsqVGDtFfCxv18cXyNSbCqzEF0eTOVfAv8=)
                          4: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: lfU20t4/IXyRw9+1IZU+DqOiIvLO+ocObbYQNwFW2yU=)
                          5: Z2fOpxeOdQMYHdkDGfltSVuJwJQ.roa (hash: cNSmYsaFbWz1KHK5w6io+60UGsIvpGDu7K4HhPw9GkE=)
                          6: iXWiAu38fSPYWYABMk3KTWR8J94.roa (hash: PeV/ss1h89xDLD9aBvw1HJFSN2Rx7428f2qqc6I2rMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:53:ef:79:a1:f6:01:d0:69:3b:a2:76:c6:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
        Validity
            Not Before: Aug  5 21:01:48 2025 GMT
            Not After : Aug  6 21:01:48 2025 GMT
        Subject: CN=2e0e7d655aabcd662ccc5b3e8f033736130a767d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:5c:43:1d:5b:1d:9e:ef:6e:9e:5f:c2:f7:
                    c1:0f:17:7b:1d:00:4f:c8:cc:52:12:ae:7d:2c:2f:
                    af:39:90:9b:4c:a9:68:6f:3b:45:8e:72:b8:70:79:
                    5c:6c:1e:b1:bd:43:3c:7d:3f:9d:5b:70:c5:23:9e:
                    4d:c3:63:b5:62:4e:63:4d:d1:fd:a3:15:c9:cf:be:
                    06:05:ad:bc:30:2d:55:15:28:e1:89:6e:9c:0d:db:
                    88:60:de:10:06:f6:ad:3f:b2:17:8b:e8:0b:ee:90:
                    2d:21:83:80:1a:23:55:f6:33:0a:84:44:07:1a:58:
                    7d:6e:d1:9d:e0:5b:7d:ea:f8:47:54:8f:28:d9:68:
                    6d:28:ce:36:37:cf:20:b3:29:18:ba:fe:50:23:fd:
                    71:4b:1c:08:cf:2a:8e:a6:8e:72:60:79:d6:a7:7f:
                    ff:49:40:53:8e:5a:5f:81:9e:cc:f5:62:9e:43:97:
                    40:08:e4:0a:d5:bc:ce:9b:2e:26:eb:3e:42:d8:77:
                    df:fe:2e:eb:c1:3f:7e:23:82:72:3c:0a:aa:43:bf:
                    97:71:cb:79:0a:82:3c:88:6d:09:be:0e:47:28:8b:
                    4a:c1:16:31:ba:93:5a:b7:3b:64:b8:62:16:1c:9a:
                    1d:12:6a:8b:40:3f:71:1a:a2:78:fe:5f:ca:dd:cd:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0E:7D:65:5A:AB:CD:66:2C:CC:5B:3E:8F:03:37:36:13:0A:76:7D
            X509v3 Authority Key Identifier:
                keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2c:51:d6:c3:1a:70:cb:e5:61:18:fe:b2:69:1d:bf:59:2f:
         a4:63:b8:a5:2e:8c:3e:19:06:35:a1:a7:f7:82:e4:fa:1b:0e:
         59:26:e2:c7:23:8a:01:9c:c7:01:23:9e:20:64:a8:53:1f:bb:
         b8:72:2d:75:90:33:f2:0b:fd:65:77:ac:05:ed:33:c3:f9:31:
         34:11:64:51:ce:03:d0:0d:9b:11:aa:7e:d1:1c:32:83:19:ec:
         d6:34:2e:d2:dd:a1:65:88:75:5a:b3:37:a5:7e:1a:db:f6:1e:
         62:f5:98:83:80:20:e1:fc:d8:71:5c:f6:50:13:fa:b6:e2:b0:
         f8:f6:30:9d:04:04:d5:be:c8:e3:92:19:eb:2a:22:3c:ee:e3:
         8b:ad:3b:59:9b:0b:c5:68:54:9d:65:e5:73:f6:88:ae:20:af:
         3e:8f:db:dc:7c:ee:f7:45:2c:da:ff:41:31:b1:29:d0:69:23:
         cf:48:b1:92:df:53:79:73:7c:7c:c1:cf:f2:17:80:6d:80:76:
         bc:0b:c4:cf:c5:91:86:a4:1f:79:d6:2f:90:60:de:26:04:48:
         2e:ac:ec:d7:fc:0b:ed:dc:5f:20:08:14:b0:6c:55:bd:1e:29:
         77:88:a6:bb:94:f8:9e:8b:93:3f:34:3d:44:04:a9:40:04:a3:
         0c:65:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:03 2025 by rpki-client