Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
File:                     1E3mWXWbAnQSSntIHQl2hAt63gY.mft (raw, json)
Hash identifier:          pze3ngGKUAY0OUOatZG73RdAwjdJvLmRAsV1Tp5Lu7s=
Subject key identifier:   80:E2:44:85:33:CA:81:5B:A4:54:49:1F:DE:98:E6:A3:62:7D:08:BD
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       0198D4735EA525F774F793F4D8C9894C6CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
Manifest number:          1658
Signing time:             Sat 23 Aug 2025 01:03:07 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:07 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:07 +0000
Files and hashes:         1: 0bM8wmEzzUjWs4OaG_Eh1byq32Y.roa (hash: AxFzxaM8hmPYvCrIt6Spf+I6m25vebXD/RSMRn2bzqw=)
                          2: 1E3mWXWbAnQSSntIHQl2hAt63gY.crl (hash: M6RHouLpVFYD+4AgkjUfFDk/9WvHTI4dUsCGFxCqaRA=)
                          3: 4WJWIXQl6DfjK6AaWL3Rp2i--vQ.roa (hash: KhbbWhBCJSYZ246VIWEuaLq193n7KxuY5H2uWCzNGyM=)
                          4: Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa (hash: RwfcwRXpnx31U4+i4QeLKY1jHwhSpDJgw+RTcxZ9RmQ=)
                          5: f89IkbsT4t8xQ8Vr8r9EM5nSnpM.roa (hash: bYMkqRm/XIBC4pGyPYMxXyN5mvSRhEimuvJb89lZFUE=)
                          6: zYIoyh8ar-bEEwLiwjL6j6tRS3k.roa (hash: NHYJZNfTf0pdFvHvOLws6gIK1AxJDJZ9yK2nJisMlZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:5e:a5:25:f7:74:f7:93:f4:d8:c9:89:4c:6c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Aug 23 01:03:07 2025 GMT
            Not After : Aug 24 01:03:07 2025 GMT
        Subject: CN=80e2448533ca815ba454491fde98e6a3627d08bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:26:fc:c2:99:73:8d:c9:87:7b:d6:5e:a6:
                    4c:f1:71:ae:cf:38:d4:76:f9:ff:ba:ae:66:42:1b:
                    16:aa:5a:70:23:00:2f:7a:ff:2a:dc:e1:a6:e6:e1:
                    07:3a:1c:cf:6b:87:4a:78:9f:7d:65:fb:be:8c:78:
                    b8:af:1d:c3:9d:7b:c1:d5:aa:4e:85:e7:f1:7d:e2:
                    95:67:42:c6:53:0a:e5:fb:68:b2:1c:80:60:ee:3c:
                    03:bb:87:4d:cb:0c:48:48:b2:46:23:6f:c1:3e:1a:
                    63:9d:68:93:24:a3:4e:78:66:c4:1a:ed:03:92:3d:
                    b9:31:2a:de:22:bc:0e:ff:b2:05:1c:68:2d:0f:98:
                    7d:99:01:0b:d1:9a:b3:e9:ed:98:c9:5e:12:7e:af:
                    8a:bb:54:0b:a2:2f:aa:c2:7c:8e:2d:76:06:6a:f3:
                    04:9e:6d:61:21:32:d7:57:47:3a:58:a7:b5:bd:04:
                    3e:87:cc:3a:04:ad:5a:a1:a3:d9:11:46:68:1b:4b:
                    1b:67:19:81:a8:83:3d:b5:04:ac:6a:af:99:dc:38:
                    ef:0f:3a:48:16:83:6a:93:91:5a:9f:ef:44:7e:ef:
                    18:10:9c:69:cc:a3:3d:2c:b7:a6:64:a0:85:4d:21:
                    c5:f4:e1:f5:06:4e:a6:f5:e6:bd:e2:50:3e:fc:1c:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E2:44:85:33:CA:81:5B:A4:54:49:1F:DE:98:E6:A3:62:7D:08:BD
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ba:34:61:45:45:7a:63:f9:34:db:77:6e:ff:d9:6b:7f:12:
         7e:a5:49:a3:60:a6:52:34:49:6e:b0:4c:5c:73:41:8e:dc:cc:
         42:2c:8b:df:6b:72:61:ac:97:e0:44:df:35:31:ab:79:af:9e:
         73:79:f8:67:e4:92:d6:ea:d5:6b:05:d1:2c:2c:7b:e8:6c:5b:
         74:91:6d:3b:ec:8f:e4:21:2c:91:c6:9c:87:e6:10:ed:1d:20:
         81:d8:d0:f7:ea:a9:d2:9d:06:2d:b5:18:e3:e9:5f:8e:89:2f:
         58:72:a1:cf:ae:83:93:d3:2d:97:70:78:b6:be:6e:e6:9e:c2:
         1d:f9:6c:8d:eb:4c:3e:2a:a6:cc:dd:d5:fb:57:54:91:4e:4c:
         2e:98:e2:62:55:fc:8f:e7:b8:36:c0:35:2e:26:ce:be:36:da:
         3c:f0:b9:fc:90:5d:cb:71:43:36:75:4b:20:01:af:5b:c4:e8:
         3d:81:97:5b:0c:e4:64:6d:26:a9:94:12:ad:a0:69:e8:df:a6:
         66:7e:70:7a:4b:f0:77:21:46:f9:30:ca:8a:61:0b:94:23:3f:
         c1:ac:94:c6:17:64:24:3a:25:3f:be:f2:41:ca:b3:0e:75:fd:
         e1:4e:9b:55:9d:07:d6:30:8d:61:bb:6f:9f:34:73:b2:c4:9d:
         bf:28:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:29 2025 by rpki-client