Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          i0Hzzqzf0xQlPPO5lk0lxRACAdLhWt5DYGX5vLhvaRE=
Subject key identifier:   E5:B9:50:BD:0D:A5:CA:FE:06:A2:86:22:29:C3:DA:F6:A9:C8:16:95
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       0198D5157E8E34C2628DA23D6D6D400736C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1655
Signing time:             Sat 23 Aug 2025 04:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:12 +0000
Files and hashes:         1: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
                          2: QVRWqhYUwIkNvJnwNn5ilovQsG0.roa (hash: ECIpmtTYGjYR3kRGmh6WnnV42XGn8NJAMdwXjOT27zA=)
                          3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: JE2e6qymnUdGf3WF3llR54qOR2gwkIRmhicigGymWN0=)
                          4: Y9K3JlofK8POwOywRHQ-b7Rojd0.roa (hash: abVW39/CWooNu9JnN4E4q2eaNvJVrXWE5ieZckwkUSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:7e:8e:34:c2:62:8d:a2:3d:6d:6d:40:07:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Aug 23 04:00:12 2025 GMT
            Not After : Aug 24 04:00:12 2025 GMT
        Subject: CN=e5b950bd0da5cafe06a2862229c3daf6a9c81695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:ce:39:19:b6:be:de:ed:85:25:b0:1e:0f:
                    31:2b:62:40:36:50:14:a4:af:9d:27:1e:b9:24:68:
                    b4:3b:14:d1:2a:ff:c6:2c:db:5d:3f:8b:e0:b6:17:
                    cd:4e:40:0c:ec:86:cb:e8:33:84:9d:b5:ba:d9:71:
                    11:39:f2:e7:37:c9:60:28:9f:04:db:cb:b9:6f:8d:
                    94:39:23:fc:81:23:b4:04:e3:fb:d9:be:94:6e:2f:
                    2d:d7:41:17:88:b1:f9:7b:6a:7f:35:75:64:2a:40:
                    52:44:d7:1c:f3:ce:09:78:7e:84:83:cc:e8:87:8e:
                    ea:d0:2f:b5:cd:52:6c:99:a3:53:e4:d3:07:0d:2b:
                    2b:a7:05:31:ae:7e:42:4b:3a:94:47:94:b7:71:d6:
                    4b:b5:db:cc:ff:d5:8d:a0:e9:92:70:f6:6c:7c:be:
                    69:e5:c3:3d:21:52:57:c5:3d:0f:ad:d6:d5:f5:94:
                    1e:c5:23:a4:88:56:df:ef:b8:d3:16:ce:b1:3c:d2:
                    b5:1c:cd:25:62:e5:1d:67:db:13:0d:8a:45:38:d2:
                    ec:ac:e2:b4:86:d4:81:e3:47:ad:15:a0:6a:fc:ec:
                    42:a1:c3:d7:7e:10:b4:1d:ad:ff:e4:84:ea:44:77:
                    a3:de:62:c5:39:ff:f0:14:76:55:36:e4:6e:54:23:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:50:BD:0D:A5:CA:FE:06:A2:86:22:29:C3:DA:F6:A9:C8:16:95
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a7:4b:25:7f:21:80:86:32:9b:f6:18:ef:02:e2:f5:07:f8:
         d8:37:6a:64:75:08:81:82:69:0f:93:41:18:ab:3e:61:e9:30:
         3c:02:43:e4:f0:50:e9:6e:ff:d6:2e:49:3a:03:ac:45:05:ab:
         6c:8d:19:09:c6:09:6c:48:cf:f0:7b:58:f1:a7:5f:03:7b:51:
         15:c2:9b:26:4b:99:5c:ab:6b:ab:49:cb:f2:d1:58:aa:54:21:
         58:f0:55:9d:0f:3f:01:dc:2b:f1:d5:01:8d:e6:3c:a3:f2:a0:
         e3:ac:75:58:00:1d:9f:90:d7:62:bc:ec:df:5a:1c:d4:b3:fd:
         c4:56:33:ea:b1:35:ef:99:6e:ca:0a:19:7e:aa:d2:65:9b:86:
         08:1d:b1:6c:fd:fc:48:c9:bd:e3:0b:50:6f:5c:35:6b:42:54:
         e1:d0:83:f8:0e:10:8c:2c:a0:44:d9:0c:95:d2:60:ab:79:f7:
         a9:a9:4c:fa:2c:6d:b5:b0:b3:32:ba:77:3b:e1:06:5e:81:83:
         f6:23:a0:5c:6c:bf:8d:69:13:af:25:bf:bc:52:7d:f2:c9:0c:
         b8:c8:2f:ab:39:69:ad:0b:b2:8d:15:6d:30:7b:6c:ad:42:ad:
         df:b0:38:52:6a:dc:96:04:24:4d:71:6e:a9:de:5b:df:04:bc:
         70:77:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:28 2025 by rpki-client