Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          GyqxKC7QG+1bzB4fp9FJUO+6+Nn3joJe1Ri8p4NbmUE=
Subject key identifier:   8F:5D:3D:46:4F:5D:AF:F7:32:EE:50:63:F9:0A:00:09:17:70:7D:BF
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       0198D5159999E339A3F92FBA85488A344A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0598
Signing time:             Sat 23 Aug 2025 04:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:19 +0000
Files and hashes:         1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=)
                          2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: SKHqEDAu58FaE29ChaFD3FwcnQ8ZEgDpJbh+kgRQrOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:99:99:e3:39:a3:f9:2f:ba:85:48:8a:34:4a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: Aug 23 04:00:19 2025 GMT
            Not After : Aug 24 04:00:19 2025 GMT
        Subject: CN=8f5d3d464f5daff732ee5063f90a000917707dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:e3:37:85:98:8e:92:87:84:4d:0b:9a:1b:
                    9f:65:0b:42:76:41:17:07:c8:25:63:34:df:ed:0a:
                    15:f0:16:8d:95:bf:c5:12:3c:a2:50:13:b0:a1:21:
                    d3:d0:d6:85:15:42:32:e1:37:50:3e:f7:77:29:24:
                    84:4f:97:84:3b:65:3c:7a:3b:37:f0:3f:18:c3:86:
                    0e:84:b4:db:e9:b2:5e:3c:e7:4d:af:5a:1b:cb:cf:
                    51:ea:bf:12:8a:86:e4:94:f8:6d:a3:e2:f3:50:6d:
                    fe:df:99:9e:25:29:50:ec:60:4d:67:50:31:41:7a:
                    26:1e:70:16:23:d2:92:ba:ba:54:d8:96:71:32:33:
                    33:a9:22:65:1e:fd:3d:c5:de:38:c8:1d:f4:49:9a:
                    c4:23:08:bc:70:49:55:88:a0:05:c4:c1:80:eb:1c:
                    ff:4b:ec:54:d4:25:f8:4a:d2:87:9b:52:9c:bc:47:
                    ca:95:c8:0b:14:92:35:bd:bc:4e:80:23:3d:99:d7:
                    65:28:01:fc:2a:51:1d:a1:85:27:15:4d:ee:57:89:
                    d1:17:f1:c0:e6:3b:2a:af:5a:9d:2d:9e:51:a6:e7:
                    9c:98:71:05:e5:98:37:d6:c0:04:e1:c5:98:4f:5b:
                    7b:89:7d:fc:08:b9:4d:cb:34:16:9e:54:ab:52:f6:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5D:3D:46:4F:5D:AF:F7:32:EE:50:63:F9:0A:00:09:17:70:7D:BF
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:94:cc:f5:bd:d3:26:8a:ab:44:73:b0:69:ea:d6:08:ce:58:
         6a:12:9d:a7:07:ff:b5:3f:0e:00:23:3e:3b:0b:71:91:07:73:
         16:6d:da:f5:2b:7c:00:e7:7e:85:ed:9c:8d:69:83:36:df:18:
         54:b0:f4:01:af:a8:5d:4c:28:0d:2d:a0:4b:42:d3:11:13:56:
         53:4d:a9:38:18:f3:2b:b5:b9:a3:72:e7:46:37:30:a2:d2:73:
         f8:f0:62:f1:b9:13:86:25:b4:5c:a0:ce:86:38:9d:19:9a:84:
         b6:0e:8c:ac:e0:8c:9c:25:44:00:41:54:e1:fa:82:e3:a4:88:
         e9:94:d8:14:49:0a:c0:8e:fd:2f:a3:e7:7f:c0:67:ad:05:4b:
         94:2d:57:34:b7:1c:12:02:b4:a6:7d:a1:e3:9c:8b:79:8a:09:
         94:a7:de:34:3b:cc:6b:8f:1e:32:4f:93:61:48:6c:5a:e4:f2:
         03:63:41:30:ad:fe:25:20:13:9c:e7:91:9a:8d:6b:c8:db:52:
         4c:56:7b:c0:fe:1c:0f:20:e1:2e:fa:50:a6:9b:55:70:d9:9c:
         d6:72:ed:16:bb:c0:57:5c:21:9a:00:6a:95:f0:84:c2:f2:82:
         08:27:76:8d:c1:5f:d0:fa:cb:75:72:e6:00:f4:fa:87:0d:e1:
         14:5e:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:03 2025 by rpki-client