Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          vspGh7OR/T9FWakuQTnWt3cWEXgH4H6/Q1T+lhPu6ag=
Subject key identifier:   F5:3D:07:46:F3:6F:CB:D1:62:41:19:F4:26:2C:1C:C6:FE:C1:0A:BE
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       0198D5BBEB257B541DB2AC65DB47B308BE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          1652
Signing time:             Sat 23 Aug 2025 07:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:59 +0000
Files and hashes:         1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
                          2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: ENCuos3MHzAqQumKzUSHa2xBz98wQky1BH5GYE1LI7U=)
                          3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
                          4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
                          5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:eb:25:7b:54:1d:b2:ac:65:db:47:b3:08:be:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Aug 23 07:01:59 2025 GMT
            Not After : Aug 24 07:01:59 2025 GMT
        Subject: CN=f53d0746f36fcbd1624119f4262c1cc6fec10abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:1d:5f:ab:51:76:19:d1:cd:d7:ec:b3:71:
                    50:ab:fe:e9:2c:85:0e:8b:06:82:cb:b9:9a:0f:8a:
                    07:ec:38:2e:74:08:ec:9e:5e:45:88:cb:9e:12:2d:
                    b4:d6:a2:2e:b3:56:69:af:35:21:94:79:95:bd:af:
                    07:13:fa:e5:43:1a:69:cc:63:9c:01:86:2d:ca:2b:
                    6b:4b:73:aa:4f:92:56:ce:36:e7:5b:e7:93:60:8a:
                    d1:c3:ce:3d:3f:ab:e9:2c:87:c2:89:b5:21:7e:8d:
                    bf:cc:16:21:d5:4b:03:65:a2:d3:7e:d8:b0:70:08:
                    10:a3:79:2b:f8:08:c7:3a:96:8f:ab:38:6e:3e:6d:
                    14:9e:c9:c0:f2:4a:6e:8e:6c:88:77:d9:0b:8d:dc:
                    78:33:90:60:a8:13:e2:77:57:4d:f4:f0:d1:3c:55:
                    66:44:cd:95:35:1c:92:2b:f0:04:00:a4:03:4c:3b:
                    58:a9:6c:ff:dc:36:2f:9b:1f:f4:de:d7:82:cf:66:
                    ac:ab:7d:c3:62:42:e4:26:2c:5c:5a:65:af:13:1f:
                    ef:3e:97:7a:34:44:3c:e6:25:8d:ec:53:3a:fe:fe:
                    ed:b5:e9:7e:1e:4b:94:f9:cb:54:51:99:96:69:52:
                    48:a5:45:7f:ef:03:36:3f:d5:28:38:69:f2:87:6a:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3D:07:46:F3:6F:CB:D1:62:41:19:F4:26:2C:1C:C6:FE:C1:0A:BE
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:84:37:b0:92:3c:47:e4:ed:e9:e5:b2:56:a1:02:be:46:53:
         67:e0:ba:c2:8f:46:da:79:7f:b2:11:4e:ba:22:56:ab:0a:38:
         27:d9:4d:7c:2e:b0:0e:50:c0:96:21:a3:72:44:ac:70:56:4e:
         6f:08:03:c0:7a:ca:d2:dd:4e:21:97:64:08:00:84:46:69:0d:
         d0:49:67:11:3a:ad:51:76:5f:48:7a:8f:3d:66:c2:cf:aa:b0:
         1c:19:ba:00:3a:33:77:8c:5a:d6:3d:ae:f2:13:2c:88:05:9f:
         50:b4:62:14:9b:48:0c:07:e6:d6:7d:c9:25:9b:77:14:71:e0:
         0c:0f:de:d0:05:41:c2:2f:35:42:68:af:96:3e:17:36:88:07:
         9d:df:9d:b1:03:1c:9a:10:d5:5a:e4:8d:e6:67:30:ac:1a:80:
         17:ac:29:43:04:fc:ff:de:d3:7e:fe:ec:b3:36:4b:ea:21:d8:
         93:36:8a:25:a4:26:90:52:88:f7:92:36:76:11:df:ed:a1:80:
         08:6b:00:4e:ce:64:0e:3b:e6:67:a5:3c:aa:00:50:60:4a:9d:
         c3:ac:9b:17:0e:9d:a9:e1:a3:71:2e:57:71:11:11:1c:79:bd:
         89:e0:1a:a3:ec:a0:6b:a1:1e:df:ad:63:d9:f4:53:8c:86:c6:
         71:66:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:26 2025 by rpki-client