Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
File:                     ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json)
Hash identifier:          eD8Uny/p7gvCfbqcxl2z3luCG+XE/uEgVcuzWi4Hrjw=
Subject key identifier:   31:21:C6:C1:22:28:69:EB:CB:30:A0:D5:45:A3:EE:80:00:8C:E5:34
Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21
Certificate issuer:       /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
Certificate serial:       0198D473A7E20758C80BD7B4C7CC8DEA6299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:03:25 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:25 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:25 +0000
Files and hashes:         1: Hdo0JQgTFMLfp514_zX_eH0BV28.roa (hash: 1zoX3E+YpaDl71akpZOBfWw1Iq/htQIg0CTgRLbNZSk=)
                          2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: i+qDILlYtc5GIM2dnNteyPML0fc5j56QLQYcUqR6vHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:a7:e2:07:58:c8:0b:d7:b4:c7:cc:8d:ea:62:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821
        Validity
            Not Before: Aug 23 01:03:25 2025 GMT
            Not After : Aug 24 01:03:25 2025 GMT
        Subject: CN=3121c6c1222869ebcb30a0d545a3ee80008ce534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:ca:7e:fe:78:98:30:9b:4d:7e:e0:e0:cc:
                    d2:12:03:9d:f1:57:4b:3c:2c:52:2b:cc:d3:06:96:
                    90:79:46:0c:9a:bb:9c:81:a2:e5:34:d0:bd:d6:40:
                    c1:f5:4c:da:b1:8a:d7:e1:62:ed:f2:54:47:5f:41:
                    87:4c:a7:32:9d:4c:89:0e:f6:1e:89:37:d4:32:3d:
                    df:0d:f7:0f:80:d1:c7:54:b7:45:77:67:15:05:21:
                    b2:65:4e:5b:0a:32:d7:14:79:c8:f1:9d:00:b4:21:
                    fc:44:ce:1e:0b:80:3f:a4:84:a1:ba:15:dc:6f:20:
                    8c:1a:2b:05:f3:07:12:0f:65:ec:86:e8:cb:ea:c0:
                    72:57:53:57:c2:39:28:e5:6a:64:bd:8f:df:3c:fa:
                    c3:43:df:2f:e5:68:6c:bd:2d:03:1a:e6:4b:b9:fc:
                    d3:65:ff:18:f6:46:7a:47:7d:89:3e:46:be:84:e2:
                    00:09:41:06:78:44:0d:74:d3:9d:bb:de:11:93:b0:
                    35:9e:c1:b2:f5:ca:7a:72:f4:45:2d:dc:cc:f9:20:
                    34:70:f2:17:cd:e7:23:6d:a4:44:eb:7c:72:f2:0b:
                    21:20:10:2d:31:3c:45:ba:8c:bd:e9:66:03:3c:b5:
                    87:f8:9d:cd:3c:92:c2:08:d4:40:9d:48:96:02:00:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:21:C6:C1:22:28:69:EB:CB:30:A0:D5:45:A3:EE:80:00:8C:E5:34
            X509v3 Authority Key Identifier:
                keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:7a:57:79:e0:69:23:da:0c:64:d9:66:89:2a:4d:64:ce:
         26:0a:46:74:e8:35:1d:b1:ac:59:55:77:51:91:55:3f:96:49:
         ba:7e:2b:2d:c4:9f:6f:3a:25:c2:81:da:cc:2f:45:73:4f:b9:
         16:3c:13:11:49:c3:65:8f:65:d4:6f:5d:62:a9:6e:29:4f:d9:
         49:11:a0:f4:8f:88:e5:f3:35:5c:84:8c:88:7b:05:2c:75:c5:
         b9:1c:55:74:19:f8:d3:2d:ef:6a:d3:ce:29:f4:79:83:fe:84:
         c2:e6:fe:10:36:6b:bc:4c:63:09:20:52:c9:54:dd:ce:cf:06:
         6f:ac:91:92:33:e2:0c:99:dd:2a:f3:3b:4a:4f:52:61:69:df:
         b7:4d:7e:62:70:e3:29:eb:cc:93:77:02:a3:79:51:fc:ef:21:
         cb:13:99:5b:a0:56:8d:d1:13:6c:89:39:a7:6c:95:db:c3:34:
         b1:f2:0d:6a:8c:95:a0:ec:18:34:e3:d1:d6:f1:ef:ef:0b:4d:
         fb:e1:c1:ef:af:d8:de:10:a3:3a:91:74:9a:e6:e6:5a:b9:44:
         1a:0a:e4:b4:6d:64:e6:07:b1:56:79:c6:5e:bd:4b:61:e1:02:
         b1:1d:d9:66:c2:55:33:71:80:9f:51:59:76:01:e2:ca:03:70:
         a4:21:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:12 2025 by rpki-client