Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File:                     7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier:          4mTiO5ruGNxLySgrOmFDgjyWK7jS8702EpUmEswdMfw=
Subject key identifier:   C6:AF:33:A7:FC:56:83:8B:F3:DC:69:07:A0:AE:5B:D2:05:6C:C9:25
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer:       /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial:       0198D7060BFC423A347995A1E6B6250AFE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number:          1658
Signing time:             Sat 23 Aug 2025 13:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:34 +0000
Files and hashes:         1: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (hash: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=)
                          2: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: 92MCCCS6QIalj6bmTXpy+gxpnEmITxrV/icggv6/bg8=)
                          3: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=)
                          4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:0b:fc:42:3a:34:79:95:a1:e6:b6:25:0a:fe:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
        Validity
            Not Before: Aug 23 13:02:34 2025 GMT
            Not After : Aug 24 13:02:34 2025 GMT
        Subject: CN=c6af33a7fc56838bf3dc6907a0ae5bd2056cc925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:52:6b:fb:d8:4e:11:19:92:9f:e3:7f:ad:
                    f7:5c:9c:96:21:c6:ea:d8:0e:c6:c2:23:95:ce:77:
                    47:a4:bc:a9:df:c4:d8:61:7e:96:74:18:61:f2:01:
                    12:0c:e6:a7:e4:7b:e0:3f:48:a4:00:f7:b8:df:2d:
                    99:f4:ad:b2:88:f9:b0:7d:a7:88:2b:45:d5:4d:50:
                    67:e1:8d:00:a5:fe:d9:28:a2:92:ac:fb:5d:41:e8:
                    43:16:31:5d:f6:f3:d8:f4:6c:ea:70:9a:2e:68:56:
                    8e:16:c9:90:e9:2c:c5:f5:e8:be:8e:3f:8e:f1:3e:
                    d9:3f:3c:d8:e7:05:a1:9e:cb:36:b2:68:78:2a:a2:
                    9c:03:d1:45:e4:90:e1:fd:22:72:67:74:23:98:dc:
                    e7:72:3b:ee:97:d2:1b:fa:dd:3e:fb:e9:2e:ef:0d:
                    bd:cf:ba:97:0e:b6:ea:a0:76:e3:bc:c8:b6:a5:1f:
                    68:04:6b:5a:1f:a4:cf:5e:ac:56:8b:6f:06:fe:b3:
                    bf:a0:b9:fd:82:6b:48:a3:53:af:5b:f0:ad:a5:98:
                    f0:31:c7:3c:fa:04:06:9d:70:1b:4f:83:37:e7:98:
                    02:c8:03:6a:fe:f7:1b:50:94:11:60:9b:36:64:dc:
                    a0:43:c0:33:7f:46:f5:31:fe:3a:e5:82:a1:0e:ef:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:33:A7:FC:56:83:8B:F3:DC:69:07:A0:AE:5B:D2:05:6C:C9:25
            X509v3 Authority Key Identifier:
                keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:dd:69:37:2f:bc:bf:2b:6b:65:19:06:e6:6c:86:96:3d:
         f1:03:7a:79:95:0d:27:9f:2f:8d:48:c4:db:7a:50:49:80:25:
         6c:98:49:61:0b:00:5e:aa:d3:e7:97:aa:b8:8d:f8:c9:22:ce:
         74:62:d5:f9:5e:5c:af:09:bd:6b:8d:43:1a:ec:51:96:e8:46:
         df:da:26:75:f9:df:81:1a:47:49:34:c9:f9:f2:75:cd:07:9b:
         5f:d0:86:da:29:84:e4:55:3b:b5:63:42:49:b6:aa:61:36:bc:
         43:92:fe:e0:ff:f3:a2:38:67:4e:7b:71:46:e9:ca:e3:76:b8:
         07:93:37:33:5d:1e:05:52:4f:73:1e:76:73:0a:6e:b3:c1:89:
         29:f6:32:12:03:f5:a0:fd:f6:53:f9:ba:0a:34:76:e2:d1:0a:
         c8:ed:48:9b:a8:6c:c1:09:ff:60:bd:a4:e3:c2:b7:ea:b8:5c:
         cc:da:3c:4f:59:b0:6d:d9:5c:27:ff:0c:c3:61:98:00:99:36:
         f9:c7:5c:1c:13:99:3e:a6:7a:5d:9d:d7:fe:3a:04:54:c7:a5:
         03:9f:4b:ea:74:f4:d0:83:b9:9c:66:b9:45:05:d6:fe:82:27:
         05:0b:e7:28:34:0a:9b:c8:7a:03:bd:2b:37:ba:dd:a7:11:24:
         a1:99:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:02 2025 by rpki-client