Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          cl+5FjnMJnpFUkbMIO6GWxaHLDTJyL8hjxXQAU9qmUQ=
Subject key identifier:   D3:E7:7F:51:4C:1F:CE:9D:1B:53:04:B6:14:E7:09:9A:F8:91:F1:3D
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       0198D705AFC757FD50FDEB751DB321F86EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 13:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:10 +0000
Files and hashes:         1: 32tWRXd7sO9k5rDBN5-KceN_jmg.roa (hash: yWKy4xisA4DT9Zfa2KiXtKt3hApiSXHoCFqZyGn6vOg=)
                          2: ElC-6BWKIscUitjfAAuE6V-GosE.roa (hash: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=)
                          3: GBGBlAFSzLuNFgNx2x_0D_5DQmg.roa (hash: NZPhbRaB5eM/voPBrZEMV3C9aUgwFS3iIgWGfN4cNI0=)
                          4: IUfsA9WUIh_drsK7CEvgRpo35z0.roa (hash: +jKjtuQptzEAVzSdULkJ5A8HWf8sGmcVbiqzXEqShbg=)
                          5: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: y5JLbdb99WNe/8n0ApSjDe95iDI3Pa0GWAjqprmbraE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:af:c7:57:fd:50:fd:eb:75:1d:b3:21:f8:6e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Aug 23 13:02:10 2025 GMT
            Not After : Aug 24 13:02:10 2025 GMT
        Subject: CN=d3e77f514c1fce9d1b5304b614e7099af891f13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:a0:79:a7:50:fb:18:6a:01:a1:64:e6:88:
                    d2:3d:dd:c1:59:98:e3:83:ae:36:eb:5c:02:8b:31:
                    75:fc:b5:83:7e:82:39:2c:22:7e:fc:70:1e:8c:b5:
                    c7:2c:ad:23:3c:d1:ab:71:96:79:3e:8b:48:dd:2e:
                    05:e8:c0:22:8e:5c:7c:6d:9d:ee:b4:0d:e6:73:84:
                    98:ab:a9:42:71:08:86:5e:c0:62:63:8d:c2:d1:b2:
                    06:f3:b3:99:60:bc:a1:0e:23:01:8e:07:ba:43:8a:
                    ae:bc:64:82:72:c7:1b:d9:65:78:00:a9:59:f5:93:
                    0b:99:16:8b:91:cf:ff:0a:bf:f0:e6:53:cf:d3:bc:
                    cc:df:ff:60:3e:e2:43:bf:9a:99:52:62:16:26:28:
                    38:f3:f7:83:ff:44:08:49:f5:57:41:4a:4d:25:23:
                    2d:6b:c2:50:da:c3:6c:17:2a:87:b1:ef:a6:1f:0d:
                    66:2f:c1:84:b9:e6:e2:3e:2e:53:ca:a7:7d:d7:26:
                    e6:fe:58:62:9b:e2:6f:05:3c:29:30:06:95:b5:d6:
                    c6:cd:51:63:dd:eb:c9:64:90:3c:76:31:f1:a6:d4:
                    c3:4a:4b:57:28:9b:6f:9f:fb:33:bb:06:98:bb:08:
                    da:1b:8b:67:ad:ab:a0:e9:c8:da:92:3c:39:bd:4b:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:7F:51:4C:1F:CE:9D:1B:53:04:B6:14:E7:09:9A:F8:91:F1:3D
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:f0:fd:cc:22:d5:b4:c1:29:79:47:56:60:de:de:ad:83:
         d8:bc:6b:b8:61:19:13:b3:42:64:26:65:c4:04:84:f1:7d:82:
         61:5c:c0:9d:5c:3f:ae:ef:a9:78:70:1e:64:5f:7e:f1:c8:32:
         af:1a:ff:ef:5d:bf:22:8a:e1:11:17:5b:7d:1a:9d:ab:99:03:
         b1:8b:0e:26:d2:a1:f4:6e:6e:e7:cc:3a:c8:54:e3:36:d7:03:
         33:2f:bd:c8:45:be:c5:c2:98:01:a4:57:bb:6b:b0:d8:e0:c1:
         b8:f8:02:95:83:40:aa:e1:86:cc:45:c4:e3:ce:4c:b3:82:5d:
         e3:ce:9f:81:c9:d4:fc:cf:61:70:6d:a0:fe:4a:f7:52:6c:ad:
         1f:09:06:c4:c4:26:eb:1b:04:92:04:9d:3e:0c:01:f9:b9:35:
         4c:8d:e2:1f:7d:da:e9:48:30:bf:a0:15:2d:62:f5:e5:29:d0:
         67:9c:91:34:69:35:32:67:e3:92:5e:f8:e5:bc:33:3e:8a:d2:
         9c:1d:cc:4f:cc:fb:55:d7:01:ab:ae:83:22:6a:30:68:1b:cd:
         a7:68:23:be:1d:bb:3d:be:aa:c6:74:ed:64:26:63:68:3a:43:
         aa:fc:47:ef:93:bb:2d:ca:e9:17:55:91:60:f6:d8:08:b5:59:
         db:e5:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:48 2025 by rpki-client