Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File:                     F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier:          u9YEl0BEEpLABQ9PGtkQs8vdNbC8p/WKpE+WzTNPQb4=
Subject key identifier:   16:56:FA:A6:F7:19:EF:02:FA:AA:D0:5E:2E:5C:12:10:28:B8:E6:FC
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       0198D4DFEB9428556CB22FBC7CD3902EE064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 03:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:41 +0000
Files and hashes:         1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: F2dd4qZsZpE0lXaYlCXI4EONC3voossyo6W7AYPuqgQ=)
                          2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
                          3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
                          4: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (hash: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=)
                          5: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
                          6: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:eb:94:28:55:6c:b2:2f:bc:7c:d3:90:2e:e0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Aug 23 03:01:41 2025 GMT
            Not After : Aug 24 03:01:41 2025 GMT
        Subject: CN=1656faa6f719ef02faaad05e2e5c121028b8e6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:b5:5b:52:1c:90:3c:37:b2:bc:a2:38:77:
                    5f:a4:1f:a4:85:0b:a3:bc:2f:4f:d1:59:1d:7a:7e:
                    f5:e9:e4:4e:75:21:90:82:7a:62:b2:d5:86:14:56:
                    83:6d:7d:f0:11:31:03:72:7f:b8:1e:f9:aa:c5:95:
                    6b:b9:54:7d:88:4c:dc:4f:dc:66:b6:c8:4a:e8:6b:
                    da:15:91:ed:0c:de:68:89:70:41:bc:29:bf:67:a2:
                    0d:20:c2:af:6c:1d:ba:0e:8e:87:02:8c:d9:88:96:
                    cb:31:fc:db:1f:e6:fc:9d:e2:c3:d2:c9:a6:c4:3c:
                    25:6c:4a:6e:4a:48:a0:71:8d:a7:e1:7c:3e:74:cb:
                    ad:e8:ba:32:a9:dd:09:bb:3f:35:f1:70:e0:b9:43:
                    8b:80:5f:60:47:8b:36:b5:b3:78:05:61:92:de:60:
                    a7:36:6d:6c:90:72:a9:ca:65:f4:4a:e6:3e:79:07:
                    b4:76:9a:54:45:cc:0c:c1:2d:1d:b8:43:26:ce:4c:
                    81:57:24:1e:3e:d4:a8:3d:3e:80:fc:f5:e0:26:2c:
                    82:0a:e5:70:54:04:f9:70:b3:88:d7:76:8f:52:b8:
                    81:3d:5a:78:b8:e2:6f:ee:b8:62:43:11:f5:40:11:
                    c1:ee:00:31:41:c7:aa:f1:d1:d2:9c:07:0e:3b:f8:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:FA:A6:F7:19:EF:02:FA:AA:D0:5E:2E:5C:12:10:28:B8:E6:FC
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:67:c6:57:d4:a4:ef:9d:df:31:6a:5e:58:13:b8:9d:4d:
         6f:d1:11:13:56:2d:60:76:7d:15:af:82:72:c2:22:d5:84:8f:
         5e:0b:e1:21:81:eb:7d:c5:5e:2f:36:ed:a2:a7:f9:40:7b:b3:
         7e:99:66:d9:f0:bd:e3:ed:e1:30:b8:82:a6:5e:59:81:aa:e4:
         bd:2b:93:a6:4b:7d:ba:80:c3:20:b6:ac:c2:3f:3a:b7:9c:53:
         86:9a:c8:12:c4:47:64:da:f9:c9:c1:d3:ea:99:40:37:d2:cf:
         cb:4a:22:32:ae:15:b1:47:aa:2a:1b:43:65:69:8d:3a:e3:d5:
         b3:f6:43:20:a2:07:32:06:29:c4:7a:a0:bb:ff:25:95:ef:37:
         ed:f7:d4:72:80:2f:9b:6d:4e:6b:58:47:89:df:30:76:d7:ec:
         45:f7:45:04:1e:04:eb:8d:3a:aa:50:39:aa:93:0e:bb:37:c8:
         09:f2:11:ce:5d:e0:97:a7:00:ed:f6:1b:0a:15:24:5d:ce:f5:
         04:9a:9d:6e:17:6d:4e:a7:02:e3:08:6e:25:be:f4:d8:9b:33:
         33:dc:b7:75:ef:93:2c:6b:0a:c3:6c:9f:ea:fe:6c:a6:ae:f1:
         5b:d1:8f:5e:5a:00:72:53:bc:60:7d:2b:d4:9f:60:0a:c9:de:
         e9:7d:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:40 2025 by rpki-client