Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          ZrNLZ/N46fzxH3MQgAeUBtFFJ6oNH5tT9AiuzacG10Q=
Subject key identifier:   D7:36:6B:53:F9:0E:AD:1E:FA:64:C1:3D:DB:F2:96:E6:55:DF:AD:58
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       0198D4A7D9DCA917204158E14F58F38ED5D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1662
Signing time:             Sat 23 Aug 2025 02:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:26 +0000
Files and hashes:         1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=)
                          2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: 5KBg6HEtnXjfDpH/C83JG7yLPEQ/Kqn5IyaZ/+vXruI=)
                          3: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=)
                          4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=)
                          5: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=)
                          6: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=)
                          7: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=)
                          8: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=)
                          9: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=)
                          10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=)
                          11: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=)
                          12: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=)
                          13: skmoc3tp5OkjM_6wfutQ31EoBWA.roa (hash: 0MTFYX7HC0uHcLfqYHCbppR4Ps5iN23w8VXQLkhShp0=)
                          14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:d9:dc:a9:17:20:41:58:e1:4f:58:f3:8e:d5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Aug 23 02:00:26 2025 GMT
            Not After : Aug 24 02:00:26 2025 GMT
        Subject: CN=d7366b53f90ead1efa64c13ddbf296e655dfad58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:53:83:db:84:3b:87:d0:6c:e6:30:ea:67:
                    97:b9:e1:b9:09:ac:8a:e8:f8:b5:b7:c9:26:d5:e2:
                    50:8d:ec:3f:fe:16:24:8c:fb:1e:3c:31:a2:29:a1:
                    04:56:33:d6:19:b6:90:a4:10:ce:12:15:5b:54:1f:
                    2a:9a:98:d9:57:59:67:dd:85:bc:89:03:ac:b7:02:
                    fc:f4:a1:f7:d2:45:80:bb:ec:26:ee:5b:8b:13:fa:
                    44:e5:d5:13:a6:ff:80:d7:d2:ea:af:ce:21:e5:ab:
                    46:e3:ea:b6:95:97:23:09:3f:39:0f:6a:5f:6e:03:
                    12:65:cd:77:86:c3:2e:d0:20:57:20:96:f0:e7:53:
                    ab:69:bd:b5:8d:61:2c:fb:15:00:45:fa:65:1b:95:
                    32:63:40:ac:0f:af:a0:14:48:93:4a:30:7f:07:ab:
                    e2:ae:85:89:7e:e2:9a:39:31:b4:78:85:3e:4f:62:
                    b1:db:75:a5:cd:f8:51:ca:eb:f6:25:06:37:39:31:
                    74:ed:d9:56:4c:73:5e:bb:f0:77:d8:a8:bb:e1:8b:
                    f6:d1:07:01:f7:d8:79:93:ac:62:ff:b5:1b:a5:06:
                    b2:5d:a2:7b:14:2a:50:d3:51:c0:80:16:de:30:50:
                    4f:c5:f8:66:47:3c:04:25:69:04:49:ee:65:46:8b:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:6B:53:F9:0E:AD:1E:FA:64:C1:3D:DB:F2:96:E6:55:DF:AD:58
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:0a:28:5c:b4:77:b5:01:5d:63:de:dc:20:eb:01:54:4c:
         93:47:88:98:75:ad:c1:4b:4d:69:11:c5:b0:48:17:ff:3d:a0:
         8d:1e:f7:93:eb:78:d6:86:07:72:ed:f1:d1:91:13:f2:8d:d4:
         40:e8:b6:7d:49:de:6c:1a:87:57:73:90:20:ce:f9:d2:1d:7a:
         7e:88:bd:e0:7a:4c:eb:21:c2:33:aa:85:a9:3a:43:77:40:27:
         83:3f:90:7b:6e:97:04:ee:a6:ca:2c:f3:be:28:80:d9:03:a8:
         ab:e0:dd:b7:a5:c9:5a:63:f0:6d:2b:6b:f0:d4:f7:d3:4a:78:
         d4:74:36:e9:af:cb:aa:c7:27:49:c6:78:80:19:fb:9e:32:ad:
         76:04:e8:ee:89:5f:df:28:f2:3b:f0:c0:27:4d:30:5c:e1:08:
         a7:b4:8f:18:8b:49:ec:0f:d9:1b:5c:f3:1f:67:1e:05:7f:d5:
         d3:ca:4f:32:73:41:61:0f:2d:cd:b5:ad:48:fe:7d:b6:a3:c8:
         28:10:59:b0:41:38:07:d0:d4:38:e0:3d:2d:56:96:7e:ab:64:
         fb:be:85:80:fc:5e:c5:56:ba:f2:17:b7:2d:6a:2e:97:fe:40:
         78:1b:23:ea:54:1b:84:ad:af:a3:05:b2:8b:aa:97:25:b8:a0:
         c5:4b:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:36 2025 by rpki-client