Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          F/tMKDxKZfCmtFqzG7gu/yBkNc69C9n3oLVZGjb7o+Y=
Subject key identifier:   6A:B4:A3:CE:5D:1D:20:86:74:9F:27:A1:25:8C:ED:B3:28:9B:58:32
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       0198D47301BB9824BA248A0D04CAAC526419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          1691
Signing time:             Sat 23 Aug 2025 01:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:43 +0000
Files and hashes:         1: 2lKqRDbSTv8qR1uCwwl64QtEkCA.roa (hash: qCro2ay0I1/Ysy1pm/KJhHJx3gyNdZdHfpdwnLoByMc=)
                          2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
                          3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: udmpB/v1v50VAqF476oHP6KxX8w8t3rVQBuw8hA7DM4=)
                          4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
                          5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
                          6: iyS2JnXtsNdJf5e1S9ojUsd5BNY.roa (hash: aFnwamQ2oQPi/IvrrPt/RGBWO8+ZWgyDLcYhIaUPHek=)
                          7: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
                          8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:01:bb:98:24:ba:24:8a:0d:04:ca:ac:52:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Aug 23 01:02:43 2025 GMT
            Not After : Aug 24 01:02:43 2025 GMT
        Subject: CN=6ab4a3ce5d1d2086749f27a1258cedb3289b5832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:6a:4a:c0:db:2a:71:51:bc:79:8c:b0:17:
                    1a:81:25:6a:c0:60:50:ba:83:9c:52:fe:b1:43:49:
                    82:ab:c6:39:43:f1:74:04:90:b6:93:82:cc:bc:1b:
                    d2:66:70:01:30:97:e4:2c:c3:0a:a3:d2:44:4d:88:
                    bb:93:e8:27:57:f4:ad:3c:6d:b1:ad:b1:26:03:75:
                    91:66:78:62:0b:f0:aa:d2:e6:b3:6e:19:74:b6:10:
                    c7:69:bb:52:ee:c0:02:12:6a:1d:8b:bf:3b:9d:e8:
                    07:da:de:cb:ea:b7:c0:fc:07:5f:f3:f1:db:ff:69:
                    f8:38:7f:e9:0b:49:0b:87:a7:9f:2c:9a:d8:c1:ce:
                    17:5a:67:8d:d1:ff:93:70:93:c7:89:a3:47:dd:28:
                    d2:d1:e0:f5:98:15:90:7e:26:04:64:64:1c:e6:5c:
                    c0:92:4f:7e:5f:7b:f7:43:3b:24:36:ab:bd:c2:56:
                    f5:44:d6:b9:f3:64:07:84:88:aa:8a:b6:59:d6:83:
                    db:a0:4b:10:fe:bf:ad:89:21:f3:f3:93:43:1f:2f:
                    d2:4d:d1:62:f7:31:9e:77:4a:e6:36:15:51:66:97:
                    29:25:89:09:17:2d:f7:52:ba:5a:eb:d3:28:60:03:
                    67:c7:2d:d7:ab:7e:82:2e:fc:01:14:34:d2:14:71:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:A3:CE:5D:1D:20:86:74:9F:27:A1:25:8C:ED:B3:28:9B:58:32
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:60:43:84:d0:c1:14:54:62:90:b6:a4:e1:a8:90:af:fe:
         86:e7:fb:0e:6e:d1:b5:da:f4:b6:90:6f:e5:b8:33:3d:e1:81:
         26:0c:c8:35:bd:cd:f9:51:02:42:3a:1a:bd:72:67:42:ca:5d:
         70:f4:5f:b7:a3:79:72:0f:ce:b6:50:26:2c:85:79:fd:84:f8:
         42:d6:ad:e8:3e:66:6b:67:22:4a:a3:fa:9b:75:8a:07:b2:81:
         6c:ae:a3:06:3c:ee:b9:40:fd:87:23:b8:8b:90:e6:18:6f:84:
         6e:f8:14:54:35:e7:71:39:e5:6e:db:de:42:93:c1:2e:4f:a7:
         f7:bc:49:f3:b0:27:2f:48:e7:c4:6f:0f:f2:61:b8:8e:5a:a4:
         79:07:14:04:06:83:3c:09:db:ac:6a:c4:35:bb:40:28:d9:b4:
         35:9b:74:51:77:f9:83:52:e5:8b:1f:31:45:19:09:a3:a3:8f:
         0f:34:66:cb:53:b5:86:09:f6:cd:72:67:7f:6f:43:e4:5e:f8:
         fc:92:b7:b2:d2:fd:94:f4:a8:2c:4a:8b:bb:53:8c:b2:4a:a3:
         a2:b5:2c:e5:03:18:5b:f2:bd:74:71:45:b0:7b:77:95:9a:41:
         c5:af:91:1e:a6:ac:6c:da:f5:59:f8:40:8e:36:ad:30:0a:f8:
         31:a5:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:00 2025 by rpki-client