Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          /ofsc4cF9Um7hqiUk+OiP6q0vd87JoJ8Hn6DFukfOCg=
Subject key identifier:   EE:EF:45:10:93:3F:50:68:91:B8:2D:08:98:15:8E:81:53:0D:0B:74
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       0197CBE0609E7DE9571D61B3F3ECF4E5982A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          159B
Signing time:             Wed 02 Jul 2025 16:02:48 +0000
Manifest this update:     Wed 02 Jul 2025 16:02:48 +0000
Manifest next update:     Thu 03 Jul 2025 16:02:48 +0000
Files and hashes:         1: 08MOvb96w4xsKgP9JS0zoI8sRTk.roa (hash: 8gdw/ohva2RMhv163mHOocjNP3BJgaz4YyRqUuNJ7fc=)
                          2: EcfJ1jayPFQ3t0p16goPKaqtjcU.roa (hash: a5FoEd1+215WBmQs6vvzPYdx4+KFtw5yrsSUYmblCm4=)
                          3: Feoglcvw_6-C4xgxUoU6eiA0vbo.roa (hash: i5QN1v0aIKZsC1I8BX0SBzxPphQ7cFRhZicwbqLkWoI=)
                          4: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: jIjEqF1VMgkaG91L/PiPVBQMi6jCsrtbhTxbOhorwaw=)
                          5: scHcnv6TrwaRFnxyoieAy0wdLy0.roa (hash: KW0/f/Bc0ZybPczgbDkkTfSw75mnRXJrQAuIsFRlAcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 16:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:e0:60:9e:7d:e9:57:1d:61:b3:f3:ec:f4:e5:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Jul  2 16:02:48 2025 GMT
            Not After : Jul  3 16:02:48 2025 GMT
        Subject: CN=eeef4510933f506891b82d0898158e81530d0b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:ce:e5:f3:22:fe:05:30:c3:9f:53:6b:73:
                    3c:06:c2:4c:ca:90:18:02:b2:a5:0b:32:3b:36:0e:
                    9e:29:3e:77:a6:7d:61:37:5c:2d:35:d0:14:23:fa:
                    04:9a:cf:f2:c3:09:a8:53:95:6f:26:7f:31:2b:ea:
                    50:74:60:1b:55:f7:42:66:05:22:c2:f7:dc:75:fe:
                    b8:55:09:3d:80:18:7b:12:47:b2:2e:bb:7e:98:60:
                    84:dc:6c:46:ff:ec:c2:46:76:7c:5a:4b:1d:cd:45:
                    3b:7e:7c:5a:0a:ac:7b:50:59:b1:f9:9f:be:16:10:
                    14:b4:ca:0f:99:1f:0b:e1:57:62:7c:31:5a:38:96:
                    48:0b:f4:e9:21:48:42:3e:40:f3:06:7d:fd:61:fb:
                    16:d1:30:ab:91:1b:57:0c:79:a8:f2:42:7c:a9:c9:
                    cb:9d:ca:54:9b:44:d2:eb:01:54:ca:d8:d8:5a:ac:
                    34:c8:47:7c:7a:77:ea:eb:b5:9f:4b:50:06:c3:8f:
                    85:b3:10:c7:3f:cf:8d:0a:c3:24:65:ea:4d:c3:76:
                    7a:cf:84:c3:a5:22:1f:be:a9:65:a8:00:b1:45:a5:
                    b6:f0:92:62:49:8c:22:a6:9e:33:8d:ce:2e:73:56:
                    8a:94:11:ab:a7:53:87:89:0f:fa:9f:01:32:4a:d4:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EF:45:10:93:3F:50:68:91:B8:2D:08:98:15:8E:81:53:0D:0B:74
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:6f:a3:34:a9:c2:5d:09:4d:fa:12:15:a5:46:e9:ce:fe:
         00:73:be:de:ac:ad:f2:b0:f0:2f:09:82:7a:09:34:41:c4:41:
         b1:7d:bd:b0:ca:76:cd:ef:8a:5a:b7:cc:20:b0:c9:36:b3:05:
         37:92:0d:38:e5:44:a9:17:b0:b4:a1:dd:2c:75:9e:1b:47:6b:
         5c:66:87:a0:f5:d9:0b:14:f2:c2:92:6f:11:bd:56:a2:7d:60:
         f6:1a:a9:ce:cf:6c:31:a8:fd:84:3b:2d:0f:af:36:49:f6:d0:
         c5:58:ca:32:66:19:80:95:c4:39:e0:a3:f5:86:0b:0a:2d:ce:
         1b:9d:f8:54:1c:d1:c6:fb:8f:27:c4:ad:9c:0d:0c:37:74:bf:
         8b:48:e3:a2:9d:cb:61:64:76:64:89:c9:cf:d2:33:0d:a0:4f:
         1c:c8:d2:59:65:98:25:c3:6f:d5:c7:d3:ec:04:13:d0:1e:d5:
         9d:ec:06:ed:0b:6f:5f:75:d8:59:1c:96:44:6a:02:3b:66:97:
         31:8e:ff:37:82:1e:c3:e8:65:6b:6c:e5:b1:3c:7e:71:64:c9:
         52:4c:63:44:32:8e:ee:16:3f:fe:9d:d4:d2:06:c9:f5:cc:02:
         90:97:e3:af:0f:42:59:5b:a4:e4:84:9f:57:b1:d6:79:65:05:
         74:e1:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:41:55 2025 by rpki-client