Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          igB/PLPh3xHbdGs5lVj0BIVCRnrR2WpdfWCEhMNp+mM=
Subject key identifier:   9C:AB:07:B1:92:55:2B:3F:C4:BA:4A:A5:21:27:94:1B:51:AC:14:8B
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       0198D5156A573E7EF7360026BF7A0B07AF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          1667
Signing time:             Sat 23 Aug 2025 04:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:07 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: jTMogBHLLPsP7KkqlZVuouSoBeuLplva81aU9jxU3tY=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:6a:57:3e:7e:f7:36:00:26:bf:7a:0b:07:af:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Aug 23 04:00:07 2025 GMT
            Not After : Aug 24 04:00:07 2025 GMT
        Subject: CN=9cab07b192552b3fc4ba4aa52127941b51ac148b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:44:10:96:7f:5f:bb:50:f5:98:8d:a9:97:
                    56:b3:30:91:ff:9f:43:73:9a:65:4b:84:f1:1d:7c:
                    03:a8:25:e1:1c:58:18:73:0c:c8:d1:c6:95:f1:2b:
                    6a:26:6e:2c:ad:29:35:8b:21:78:e1:69:d7:7f:74:
                    13:db:ba:64:e4:25:c3:02:01:56:ee:4b:87:a7:a1:
                    19:cd:a9:e5:22:74:99:e1:aa:fe:c3:6c:26:41:60:
                    44:cd:61:0b:43:49:d3:a6:f4:20:9c:53:b7:08:3f:
                    ab:eb:53:16:21:e3:d2:67:48:de:ba:1e:24:02:3d:
                    6c:04:83:1a:63:86:4b:15:2f:0c:c3:ef:7a:8f:c4:
                    a7:f4:04:9f:03:06:df:f0:26:0a:79:d9:c1:9f:5f:
                    bc:5f:8c:e7:90:96:a1:69:15:52:9a:ef:a4:8e:d6:
                    39:6a:51:fe:a9:4b:31:af:ed:3a:f6:5f:8d:b7:42:
                    1f:f6:81:d5:a8:f7:f7:3f:c0:57:64:7d:94:dc:72:
                    9e:cb:95:8e:e8:03:de:fb:a4:7e:a5:ff:d4:51:5e:
                    bf:24:da:20:e0:48:b5:71:60:11:1c:fb:37:d3:41:
                    9b:26:aa:d8:b2:55:55:5a:42:cc:ae:70:7c:2e:05:
                    ca:21:99:51:b2:96:fe:42:5d:0b:0a:83:73:2c:09:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AB:07:B1:92:55:2B:3F:C4:BA:4A:A5:21:27:94:1B:51:AC:14:8B
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8c:9f:bb:f5:6f:78:98:31:e9:da:cd:ec:8c:8b:52:36:1e:
         6f:58:40:d2:17:37:57:3d:a6:86:3a:9b:13:a7:ba:1f:43:4e:
         b8:f1:6a:e4:04:b2:30:ff:93:4f:2d:a8:a8:cd:b2:78:6f:56:
         8e:0b:7d:2c:d7:19:23:9b:42:53:6b:ca:5b:2b:1c:3f:0f:0e:
         e2:7e:8f:0f:8c:b5:9a:92:d3:47:ea:11:be:6b:86:21:e9:a8:
         39:21:da:d5:b1:06:ec:f2:1b:56:df:55:90:1a:58:a6:9a:80:
         19:42:ee:a8:b5:da:17:6e:72:5c:0e:17:bc:9e:6f:7a:e0:84:
         90:08:81:74:aa:f5:a7:c7:97:dd:eb:0e:12:9e:b3:b8:63:5f:
         e4:34:1e:1f:db:5c:89:f4:90:46:fb:58:2e:85:1b:6d:c4:15:
         8e:44:5e:6b:f9:7e:c0:40:ee:c7:34:99:3c:d3:c4:32:04:4c:
         47:78:56:19:90:eb:3a:67:ae:60:62:ae:92:c5:d6:db:85:3d:
         91:96:5e:22:df:62:18:78:1a:1e:5a:d1:ab:a0:e6:bb:7e:17:
         6f:ea:62:29:cd:af:71:ae:af:47:44:cd:8c:e5:ba:5b:bf:fe:
         51:43:f3:db:ab:35:7c:54:bf:da:8b:ce:f8:1a:4d:4d:8b:c6:
         4c:cb:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:38 2025 by rpki-client