Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          8ZscNS6tjxhKlFWdbwY9UIXol4rEb08QX5HHbVjgC1w=
Subject key identifier:   39:71:71:36:72:0B:76:59:F7:6F:84:15:41:AF:40:93:31:AE:D9:79
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       019874F54954033102026258481A4F3655AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 12:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:28 +0000
Files and hashes:         1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
                          2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: h7XgWwPAAwvRIv3NZgdFnAxjETjZnK3XgLBjtU2i9Bc=)
                          3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
                          4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:49:54:03:31:02:02:62:58:48:1a:4f:36:55:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Aug  4 12:01:28 2025 GMT
            Not After : Aug  5 12:01:28 2025 GMT
        Subject: CN=39717136720b7659f76f841541af409331aed979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:e5:89:7c:9c:57:d4:47:1c:cc:66:6f:69:
                    1e:6c:39:99:94:d2:26:95:c5:b7:17:70:d9:a8:0c:
                    b5:65:84:5a:84:dc:c7:54:77:56:1f:65:30:e7:3c:
                    25:84:dc:e1:99:99:93:4d:93:48:29:d4:ee:30:84:
                    9a:84:64:ec:07:42:84:96:27:85:f9:2e:a1:e1:52:
                    ce:41:01:06:ac:75:fc:4f:d0:e4:dc:7c:39:2d:6b:
                    a0:59:86:41:9b:10:92:93:a3:64:1c:aa:d5:96:d0:
                    9a:12:15:f7:fc:27:f5:45:6a:ee:7a:fe:ac:a3:76:
                    04:44:6e:7c:69:89:c7:01:18:4b:47:87:3d:56:86:
                    f3:c3:a4:c3:6a:b6:4b:01:a3:2b:c5:ad:c2:19:ca:
                    bd:10:69:b7:42:87:df:66:a9:e2:7d:6a:7b:ca:b6:
                    17:2a:77:98:2f:ff:41:9d:b3:31:3d:c4:79:c1:21:
                    79:1d:a7:bd:d1:59:23:6d:eb:c1:77:ca:d7:18:94:
                    8d:cc:fe:0d:ff:1c:bf:11:d7:ac:c9:3a:4b:ef:e0:
                    30:11:5f:42:00:c3:df:73:ba:b3:59:48:42:d9:86:
                    5f:66:cf:0b:b3:2b:2c:a3:db:ce:c7:fa:15:a1:05:
                    09:3d:42:1b:47:55:d7:f8:21:8d:fc:4d:81:29:fe:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:71:71:36:72:0B:76:59:F7:6F:84:15:41:AF:40:93:31:AE:D9:79
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:19:eb:d4:2e:e4:4d:a5:81:5a:fd:e0:41:73:50:80:26:03:
         82:53:88:ee:fb:ce:5d:85:42:02:ae:99:0a:86:50:96:fb:1b:
         27:de:51:25:98:ff:ea:c2:49:8a:57:13:a2:7c:af:5b:72:91:
         82:c3:7c:18:64:35:de:a3:4a:c4:88:e0:e6:02:fc:47:42:4c:
         9b:e7:9f:df:1c:96:a2:a0:d2:c3:54:96:5e:33:db:6b:bd:cb:
         69:ea:4b:07:1b:5d:2b:71:ab:03:aa:d8:2f:f4:0a:43:3e:e1:
         a7:0c:b6:63:e1:f1:8b:d2:8c:aa:2e:93:f9:c9:6a:2f:fb:39:
         40:04:3a:f0:5d:17:22:70:99:19:5e:3e:3f:e0:f4:15:30:69:
         d6:14:ff:b3:40:0f:74:0f:2d:0c:dd:d9:f1:84:18:8c:2b:eb:
         b2:59:0c:02:21:25:1d:97:bc:de:01:92:d6:49:0b:8c:d8:48:
         69:f1:c1:5f:ff:89:e4:17:88:b3:2d:ab:d0:61:6b:15:9a:4a:
         ee:dc:81:63:a4:b0:5a:8f:7d:65:2e:7c:f9:f6:4f:25:4e:f6:
         e3:36:63:b7:70:d3:96:46:04:d1:85:ee:95:18:06:d0:4c:a6:
         d1:e8:87:ec:81:60:ba:79:c1:ac:2c:4e:93:cc:f4:50:48:ad:
         09:aa:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:12 2025 by rpki-client