Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          MEbQ7qyBNr4jwpHkFyWXVTGEVcbMjsH0dHFt1G/O2EU=
Subject key identifier:   E2:95:73:1F:71:1C:AE:E8:BF:CE:7D:01:E3:EC:8A:B3:D0:93:2F:A1
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       0198D6CE12739D1264C829852271212CCB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 12:01:26 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:26 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:26 +0000
Files and hashes:         1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
                          2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
                          3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
                          4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
                          5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
                          6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: j9t/uG3Hp+LG+QR+w/Yyls/G9yBMmicNTPDTkXauXTc=)
                          7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:ce:12:73:9d:12:64:c8:29:85:22:71:21:2c:cb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: Aug 23 12:01:26 2025 GMT
            Not After : Aug 24 12:01:26 2025 GMT
        Subject: CN=e295731f711caee8bfce7d01e3ec8ab3d0932fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:2f:76:80:f0:d0:5e:54:60:26:a6:54:0e:
                    05:3c:15:6c:af:49:87:9d:43:69:c3:7b:a8:88:6b:
                    88:1d:d1:1f:e3:48:c4:8b:5f:da:1e:79:36:09:e3:
                    bf:98:3c:75:73:51:8c:2d:95:8a:ff:bb:22:93:7f:
                    a9:5f:08:7f:7e:80:5f:cf:f1:53:d8:95:6c:8f:8a:
                    7f:31:f6:9a:3a:12:39:4f:39:09:1f:c3:0a:48:3b:
                    39:8c:cf:d4:eb:43:e7:58:50:41:d9:4e:ee:ae:4c:
                    56:82:c1:3b:63:d7:7e:5d:81:12:b4:18:0b:c9:5a:
                    cb:e9:79:29:08:5a:1d:77:90:41:ae:d5:5c:63:bc:
                    56:b8:19:2f:e4:b7:b9:ea:f4:f9:8c:cc:3b:41:a9:
                    b4:86:11:cd:8e:9b:60:96:8a:ad:0a:31:d6:46:d4:
                    03:e1:95:ab:4f:46:0d:e9:1e:71:ad:90:78:97:bd:
                    4b:e5:66:12:f0:72:fd:74:80:96:a6:6c:9b:ba:51:
                    57:b1:94:db:a4:61:c8:22:b0:ef:d1:12:60:ea:3f:
                    53:60:c1:ca:76:be:0d:94:e3:60:85:86:96:54:6d:
                    8c:fa:e9:50:d9:55:1f:3d:02:da:ef:94:b7:13:99:
                    a9:39:2b:2b:df:95:e0:ca:80:f5:11:e0:bf:eb:a4:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:95:73:1F:71:1C:AE:E8:BF:CE:7D:01:E3:EC:8A:B3:D0:93:2F:A1
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:86:43:89:cf:a5:2a:c7:cd:29:2c:af:da:86:cb:9a:98:
         ec:01:1d:82:91:54:bb:bf:ed:67:60:40:9c:bf:d2:4d:83:04:
         94:fd:82:69:39:ca:f6:ee:63:c7:65:66:33:7f:89:d0:7b:e5:
         e9:1c:41:f6:9c:2e:55:bb:52:ce:21:6e:60:11:31:04:db:7b:
         5a:a1:68:b7:28:e6:55:9f:4e:70:ac:be:22:6a:24:8f:c8:b5:
         45:59:56:ce:07:50:bc:77:7f:d8:01:5f:63:aa:21:27:8d:fb:
         cb:8a:9e:4b:25:d5:f8:52:3e:79:0a:6d:7c:54:b1:16:3c:f3:
         cf:7c:1d:aa:12:ee:36:ba:60:f7:98:9f:6e:d9:a0:4e:34:49:
         3f:08:8a:41:c9:b8:00:18:60:a5:26:ec:af:a9:b3:cf:a9:1d:
         b3:f4:8f:8e:5a:7a:a4:81:33:db:99:7a:34:73:d4:32:c5:e6:
         70:05:3f:75:a6:7b:f1:76:05:b8:31:6c:e0:78:5b:e3:83:9a:
         75:7d:93:fd:0c:60:cb:dc:d0:f7:26:0a:f5:f1:a9:33:35:b8:
         ad:e1:54:42:6a:08:d4:44:86:af:fb:e8:e8:c7:01:7b:2b:83:
         c7:56:4f:a8:3b:8e:41:33:1e:42:be:f7:d6:e7:c8:73:c2:eb:
         8e:44:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:44 2025 by rpki-client