Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          Y0aJpp49HqzJNALw/8FMc0AudfHG0GxGw3ZJrGO6GW8=
Subject key identifier:   C8:6F:DD:F0:96:F5:A2:9E:9E:6E:0D:42:67:BD:62:8B:4A:8B:03:DF
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       0198D65FB326DEC82AF58750F4FB7C1862DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          1673
Signing time:             Sat 23 Aug 2025 10:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:52 +0000
Files and hashes:         1: 1LHZTYTL7zXSNbURJx33AGGJ_jU.roa (hash: ZCVf+uWinCAj5Wsl4w3DRqhhemyGlUb1mHPRd1We1lA=)
                          2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: MoT0On+SeLRiMxg0b762N5AE/gORlB+/mRVoL6F8FE4=)
                          3: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (hash: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=)
                          4: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (hash: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=)
                          5: DTFLEZbU53RUxpbGCJ7xpH1wiT4.roa (hash: ijyiWI9NCfuTWvoi057x4Mhna5X/5xBxTCKG7ZnDJYo=)
                          6: EhBwV4ETdq9F_mf3TtRo4dLCK7Q.roa (hash: mC580gxvB3KBFmXIOJyzC5FKQdMNmnwwmoA8fTGfjv0=)
                          7: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (hash: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=)
                          8: MI904WmPdL5oiRhP7S6FeaCAFak.roa (hash: scgaazBwq6y+Oc9C9eGo0W4xwalauzkyjxbQ4wwwgLU=)
                          9: PRQLZdsK1DQs1qv6M77wqTY-8gE.roa (hash: kluODCNS9Ohs7cHGK+NxzDBwM4XzNPkjizB01UMfLag=)
                          10: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (hash: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=)
                          11: RaS1Do31InjbQCFGnTA-YqKnIe4.roa (hash: 6QaZ0lK6HEZVx8vJm4K3nfnSTx8TNZ47FuFw64/BpII=)
                          12: beAFyhqFvuFjdXVUNjFjACkebr4.roa (hash: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=)
                          13: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (hash: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=)
                          14: kl36awhzfsop7GgELsEJo3vTqlM.roa (hash: i1Y1Q4V1qiBLr3d5jT6i7TzoPO+NTihTUU++FBZ5ox8=)
                          15: lao8bHeqDQtESMGOKFSeFdxwj-s.roa (hash: elImsTbe0o9ywVCBRni5u407KloMMvHe03FwOzsl4Y8=)
                          16: pZSrV2l3WhVw5oetxkzKTuFut08.roa (hash: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=)
                          17: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (hash: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=)
                          18: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (hash: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=)
                          19: t18vpttXogOnxguJ7pGpoYLrk2Y.roa (hash: w64HKCyG1jpJ4LOOvXrj2J1OE37lFLFqT6Q1/gy6SUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:b3:26:de:c8:2a:f5:87:50:f4:fb:7c:18:62:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Aug 23 10:00:52 2025 GMT
            Not After : Aug 24 10:00:52 2025 GMT
        Subject: CN=c86fddf096f5a29e9e6e0d4267bd628b4a8b03df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:6b:98:64:32:11:9d:4c:f4:6f:cb:7a:bc:
                    42:2c:79:65:f5:3b:36:a6:b2:9f:5a:6a:1f:d6:b4:
                    dd:9f:ce:60:3e:b9:e1:0b:59:c3:b3:d3:06:96:55:
                    34:f3:0d:6a:31:05:74:83:b1:b0:2a:18:69:90:0f:
                    1f:58:cf:40:85:90:4b:96:21:7c:bb:65:a6:d9:7b:
                    2e:7a:be:6b:e5:41:d4:cb:4d:5c:f1:cd:2c:7f:a7:
                    a3:d7:cd:de:b4:82:64:4a:7d:05:38:1e:02:e6:cd:
                    5f:de:c3:83:1d:6e:c1:4b:ed:51:d1:2c:c6:61:1c:
                    b8:61:7e:ab:a1:62:18:2d:7e:ac:99:f0:3c:c7:ad:
                    a7:ec:72:fc:1f:a2:6f:18:b0:4b:ac:98:a0:8c:8c:
                    94:b5:b4:86:0b:a1:6e:47:0b:1d:29:00:84:34:ad:
                    90:b9:5a:a9:ea:b0:bc:8d:fb:69:24:fa:7e:1c:61:
                    ad:05:dd:29:f9:4a:2f:42:00:a0:3a:90:7c:f7:80:
                    8e:ea:bc:25:58:65:93:88:33:fd:44:d4:36:13:1f:
                    0d:33:c3:b4:cc:bc:76:cc:d4:8b:b0:88:16:ea:36:
                    fd:a2:2a:be:ed:7a:4c:20:6d:02:6e:ec:31:ae:ff:
                    7e:a2:b5:3f:43:64:c0:9b:67:32:22:6e:21:c6:66:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:DD:F0:96:F5:A2:9E:9E:6E:0D:42:67:BD:62:8B:4A:8B:03:DF
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:7c:18:68:50:3e:6f:b2:d0:35:79:06:e7:c6:0c:29:8c:
         a8:25:7d:e5:7e:9c:0e:b4:29:30:f6:cd:90:5c:37:a8:12:61:
         a5:f6:f0:2c:63:e1:b9:02:f6:67:d5:49:4e:62:e6:23:4f:54:
         9a:9a:08:54:73:cf:eb:4a:f2:3a:fa:14:bf:bb:9f:72:9d:76:
         62:bb:43:ed:ea:0f:ea:f5:82:6e:70:60:18:5b:8d:30:a2:86:
         27:d0:a4:9b:0e:34:79:92:b8:df:54:6d:b6:0d:e2:a5:b5:7b:
         ac:c0:5a:cc:60:ad:7f:5e:bd:c0:d6:7c:b3:ac:bf:52:60:ed:
         29:58:ed:1f:8a:52:a3:a2:d9:91:0d:f0:a7:3b:f5:9b:96:2f:
         0a:50:63:30:2c:7e:52:83:45:fc:41:34:66:f3:29:32:4d:5c:
         60:d0:94:74:d5:96:02:a6:c3:06:f7:b4:89:47:57:7d:0e:05:
         06:72:b0:77:54:34:e7:df:56:e9:13:48:e0:ad:57:52:fd:c1:
         c1:8f:37:42:bc:c8:0f:16:44:37:32:de:71:30:6b:dc:a6:7a:
         84:74:73:85:54:10:13:c8:d0:cb:e9:1e:bb:2c:cb:89:99:5e:
         1a:46:84:cb:b9:14:a8:0f:67:19:aa:09:0c:97:97:6c:6b:7d:
         50:fa:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:08 2025 by rpki-client