Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File:                     i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier:          7bcnIw1PMzHKVUvk6EeKxoXs+Ju427+fIliISExHbwQ=
Subject key identifier:   D7:CC:B9:4D:7E:C6:50:F8:4A:BE:11:79:0D:7B:2F:5B:A3:29:9F:49
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer:       /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial:       0198D583F5B3D30D130550D82E4FC618AABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number:          0A57
Signing time:             Sat 23 Aug 2025 06:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:51 +0000
Files and hashes:         1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
                          2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: KyMDMmRJedGtp3TT/UTikToA+795xjXOgDdcVgKOCBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f5:b3:d3:0d:13:05:50:d8:2e:4f:c6:18:aa:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
        Validity
            Not Before: Aug 23 06:00:51 2025 GMT
            Not After : Aug 24 06:00:51 2025 GMT
        Subject: CN=d7ccb94d7ec650f84abe11790d7b2f5ba3299f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:c5:56:a4:f6:ef:b1:e9:79:92:07:0a:23:
                    9b:5c:06:e0:e1:c6:d8:3a:bd:e1:e8:ed:52:18:e4:
                    f1:1b:7c:45:05:d6:8e:eb:79:9b:24:f5:fd:85:cd:
                    d6:49:f8:e7:4b:9b:76:ed:22:be:a7:cc:83:d2:d6:
                    f2:44:b7:6d:53:17:a1:fc:de:53:06:50:03:8b:1c:
                    a2:7b:dd:00:3d:27:8a:86:a1:24:96:f2:dd:6d:7a:
                    02:e7:df:55:e7:17:cd:17:5c:d8:ba:10:87:ce:3b:
                    c7:a1:45:16:3e:87:65:f0:cb:80:7a:e1:45:7c:0f:
                    26:f8:9c:dd:84:7d:0b:32:c4:98:bb:1e:2a:e5:85:
                    c2:bd:a3:54:39:d1:d8:ea:f5:f6:1e:5f:f4:6a:d7:
                    7a:ad:5c:9d:59:a2:dd:cc:a6:ec:3f:9f:73:58:7c:
                    56:9b:ac:a8:9b:74:fd:25:54:ce:73:f9:57:f3:86:
                    e1:69:bf:0d:e3:a1:32:bf:0f:54:81:43:4d:87:21:
                    46:71:bb:a2:8e:2f:7d:4c:a4:b2:2d:45:5e:d1:c3:
                    5a:ee:90:f6:57:0a:20:3c:b2:54:e1:54:cb:b8:8f:
                    c1:d6:91:cb:a8:40:32:d6:90:2e:c4:ec:07:54:50:
                    02:a7:15:19:3f:88:b7:99:a4:eb:7a:7b:1e:6a:5e:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CC:B9:4D:7E:C6:50:F8:4A:BE:11:79:0D:7B:2F:5B:A3:29:9F:49
            X509v3 Authority Key Identifier:
                keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ad:a4:6e:b1:dd:69:88:f8:d5:0c:1e:fd:74:7b:6e:75:b4:
         93:93:06:7a:0a:00:c8:e9:ab:c0:be:28:21:ce:44:e8:13:6c:
         49:11:b7:b2:47:e6:a9:dc:bb:e9:32:74:9e:68:74:fe:16:98:
         2b:f6:f5:17:b9:3c:da:f6:ab:dc:73:3d:17:07:8c:72:34:a7:
         af:87:1a:59:ad:c3:bd:e4:b8:00:09:b4:f0:fa:93:97:0b:d6:
         37:d1:68:58:44:aa:71:a4:d2:b4:85:f0:4b:43:85:5b:43:93:
         ea:f7:83:05:3a:38:48:de:dd:16:e3:7a:13:32:df:47:45:fb:
         7a:1e:ad:e0:8e:26:2b:3f:e4:13:d9:bd:2b:69:bb:0e:78:c9:
         84:b9:02:f1:33:9f:85:b4:01:3f:ef:40:ae:b6:8e:81:af:85:
         29:9a:60:8e:6e:cb:1a:ae:74:8b:36:e7:14:dd:64:e5:82:55:
         a5:34:c2:09:d6:14:36:4a:f3:37:ab:56:95:c0:4a:09:1d:1b:
         69:95:ac:6a:8e:10:e2:ff:be:c2:4b:06:a5:97:f3:70:c1:13:
         0f:46:90:c4:f2:2c:25:0f:21:2b:2b:52:82:79:19:5e:f0:73:
         4f:bd:b2:84:9b:64:3a:d1:b8:00:7f:0d:48:a2:ea:e4:2f:7d:
         42:85:04:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:15 2025 by rpki-client