Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          45iEzK/dk9sdi3lBRS6gHLv/LGse5rG3g//yB16HRjg=
Subject key identifier:   B7:1F:FC:11:C9:86:C7:A4:25:38:5B:B6:36:FD:CE:6F:3C:47:07:A2
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       0198D54E82F518F9405C513CD9A30B743DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          1338
Signing time:             Sat 23 Aug 2025 05:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:28 +0000
Files and hashes:         1: 8d3irncdHLZkdRnMP5XTaUSwUDg.roa (hash: rzsl5FRJP8PNH7SlWyQWAee7OQ1otGN4ArKngJgMF9U=)
                          2: Xs9T6PK5ijOVxCmCgq_6E2A__nQ.roa (hash: S5Af46ICAzl/XprWaWxfdUsVmQ9qZwM6fg2ZXROy37M=)
                          3: c54NoWEXWRQA-dbSZ-8W6mQyP8E.roa (hash: nRoWd4CNF6uxWBOBAy58vxnhfOJmaxOekRUGTIQqLKA=)
                          4: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: Ve+WsrNbwIVP2xlBUSbP+QIpV7e30kSY0hXNgO6PNfA=)
                          5: yODnLhtEhpSHZKcWtftsr2wrfHM.roa (hash: vGS7Y/f4ssyV0t0WiPGg8Dqt5gZnLrzS3R4VljxDfWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:82:f5:18:f9:40:5c:51:3c:d9:a3:0b:74:3d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Aug 23 05:02:28 2025 GMT
            Not After : Aug 24 05:02:28 2025 GMT
        Subject: CN=b71ffc11c986c7a425385bb636fdce6f3c4707a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:b3:7f:1f:b0:91:19:e2:59:b9:7b:2a:c2:
                    60:8e:51:f0:0e:e0:c4:a0:0e:39:b6:82:92:39:9f:
                    d8:2a:09:d8:93:f0:82:2e:a7:45:d0:32:39:61:1c:
                    a0:9f:fc:0f:9a:68:b5:41:e6:0f:2f:e1:26:dc:2a:
                    b4:82:54:36:f7:ed:d0:f8:cb:74:84:d1:a7:e4:d7:
                    f5:fa:25:24:87:60:01:e3:5c:a6:bc:1a:59:ce:94:
                    1a:03:5a:fb:59:f6:d1:99:ce:6a:b9:53:39:87:c0:
                    06:b0:d4:cd:6d:ce:eb:b5:b3:79:d8:8a:ee:f0:3b:
                    1f:f1:55:b6:a0:99:3d:25:c3:9d:24:02:48:16:28:
                    e6:03:59:b8:b0:99:36:ae:34:5e:bc:f2:fa:ca:88:
                    78:a2:40:7a:b4:ed:f1:38:ab:4a:70:a5:4d:56:5e:
                    53:21:82:80:7c:14:d7:5e:cf:38:a4:0f:52:70:4c:
                    bd:11:6b:3b:1d:a4:77:12:e2:f9:77:73:49:c6:06:
                    dc:e6:2a:46:17:40:45:cf:fd:58:b1:2b:d8:4d:08:
                    be:80:3f:b6:b7:d7:94:5c:f5:32:57:8e:6c:66:67:
                    96:1c:e7:db:35:5f:e3:cc:ed:c6:e9:b0:30:da:ba:
                    ac:12:7f:ff:57:fa:20:10:92:65:11:0e:2c:6f:d2:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1F:FC:11:C9:86:C7:A4:25:38:5B:B6:36:FD:CE:6F:3C:47:07:A2
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:56:74:50:1f:fc:31:b0:83:6d:9d:f3:ad:7f:23:77:0b:
         32:23:73:16:08:47:68:7e:d5:4b:48:17:a6:fd:f2:a3:6f:c7:
         dc:38:ba:77:e6:a3:a1:2c:cf:2a:bb:c8:e1:ba:bd:29:62:70:
         1f:99:1c:7d:dc:db:6e:64:95:b3:10:81:75:97:94:5c:67:0b:
         3f:55:ac:5d:78:69:21:5b:43:91:96:7f:b3:a5:91:d6:15:1c:
         b6:2e:67:7e:eb:44:c0:f3:80:f9:0e:0f:1c:f5:19:9a:a8:02:
         ee:ef:ce:e0:78:c4:9b:81:20:ba:6f:99:8e:39:c4:e5:f3:ed:
         70:92:8d:ea:8c:ff:63:59:d9:3b:56:28:e6:06:0c:83:23:fd:
         2d:76:8f:ee:e3:7f:ec:9a:80:83:f7:9b:cd:29:69:b8:71:c8:
         19:55:f1:37:cc:e3:80:4c:f8:74:fc:3f:c5:43:fc:2a:d8:c2:
         c5:6f:d8:35:78:9b:87:8a:ad:6b:bb:2b:be:3a:c6:94:90:5c:
         cc:80:9d:f0:d8:0d:0b:a8:17:eb:09:1f:28:1e:30:3e:90:1f:
         d1:21:5e:56:1f:1c:2e:08:f3:61:0e:9e:d7:34:07:88:00:ec:
         27:4d:ed:7d:1f:01:8b:87:22:8d:ae:cc:3e:15:05:bc:35:53:
         26:37:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:05 2025 by rpki-client