Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
File:                     mpLTBwi51OjHwoyX-AN8gCcUTEc.mft (raw, json)
Hash identifier:          V5Ac9azW4T2lRllzOFP+j35elwo3dk28PVyT6Wy90dc=
Subject key identifier:   DC:90:34:A0:D4:E5:24:7E:DA:03:AF:58:63:AB:76:37:C3:B7:E9:47
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Certificate issuer:       /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial:       0198D54DE796EBB9F04A5D93608E5B5D7094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 05:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:49 +0000
Files and hashes:         1: Od-Up9G1FWem-yoSr_pXW5rnVIA.roa (hash: vWn4KDX8+1TqyTBBcDwsTTYdGzuVvyYM5vL1dIvw2nw=)
                          2: mpLTBwi51OjHwoyX-AN8gCcUTEc.crl (hash: H3sM2gJiBD+NxvVz5wMGZp0BLCvSi1alQVufAQa9gkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e7:96:eb:b9:f0:4a:5d:93:60:8e:5b:5d:70:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
        Validity
            Not Before: Aug 23 05:01:49 2025 GMT
            Not After : Aug 24 05:01:49 2025 GMT
        Subject: CN=dc9034a0d4e5247eda03af5863ab7637c3b7e947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:ac:a8:39:4f:d1:25:d8:2c:fc:81:38:29:
                    7d:ce:be:00:0b:f8:64:98:33:a3:30:5c:b8:fc:bf:
                    78:8c:ff:5b:d8:b7:aa:f1:2c:b1:d4:8c:5b:6f:22:
                    0d:3d:7e:d0:0d:ef:93:eb:cf:70:4d:7d:96:5b:79:
                    60:08:17:ca:f8:98:41:1b:47:b0:a4:2b:ac:e1:fb:
                    2b:b4:fc:5d:48:cf:6a:8b:73:32:5b:e8:ed:dd:1d:
                    17:b9:27:b3:59:dd:2b:81:7e:ad:ac:82:19:3a:36:
                    c0:b5:43:81:a1:07:9d:1a:cf:8b:b1:a3:f6:53:81:
                    64:64:c1:af:3c:ad:19:a3:c1:ca:2f:e1:c6:a4:69:
                    ca:b8:72:2f:a4:e7:09:97:44:e6:d8:13:f5:cf:25:
                    9c:c1:cf:45:73:01:cb:6f:8c:be:a6:46:41:7d:e4:
                    53:f0:c4:10:c3:a5:96:fb:d9:2f:8a:be:73:9a:d4:
                    4b:44:d4:e1:dd:60:93:88:c5:c8:80:51:2e:08:d8:
                    4c:42:3c:cc:a2:72:a5:a2:97:35:3e:1a:56:c8:f1:
                    02:18:f1:9b:17:59:3c:7b:56:c2:d9:08:3e:43:81:
                    ba:52:b6:2d:68:25:91:7c:46:72:4a:c0:89:ad:6a:
                    7e:63:8b:6e:73:2c:90:35:e2:c7:0c:25:c1:49:ce:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:90:34:A0:D4:E5:24:7E:DA:03:AF:58:63:AB:76:37:C3:B7:E9:47
            X509v3 Authority Key Identifier:
                keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:37:60:b8:9e:71:9d:ba:67:ae:89:5d:2a:b7:19:bf:a0:24:
         5a:22:21:49:3b:15:a3:4a:29:1e:4b:e5:89:1c:20:fa:65:16:
         60:68:5e:25:49:03:77:45:75:fc:68:ae:a4:aa:e1:43:68:5e:
         c2:17:08:75:cc:98:28:aa:5a:05:bd:ce:4e:b3:16:e6:7e:5c:
         06:f0:60:c6:18:65:3e:ab:dd:9b:34:32:bf:2e:84:de:64:d0:
         db:cf:59:e0:56:5c:57:56:d0:bf:54:b4:8c:db:ce:16:1e:89:
         a7:e3:1f:d5:c7:99:1b:ff:40:a8:5e:a8:a4:e7:75:0e:7a:c3:
         3b:0a:72:1e:c2:39:da:1b:39:c2:d3:c2:83:07:18:36:6c:c8:
         fe:5c:09:e9:de:6e:4f:21:d5:bd:78:32:85:a9:59:d0:aa:f7:
         58:72:64:88:86:5d:0c:58:d0:73:f9:73:4e:0f:de:68:5a:9d:
         58:0f:84:a7:10:52:48:95:df:17:4d:34:f2:ed:68:93:a4:2c:
         97:16:95:29:da:93:11:eb:97:ab:83:af:76:f1:f4:50:71:4b:
         c8:70:75:82:9a:ef:5b:74:be:68:e2:bd:02:41:4a:3e:06:da:
         84:bf:1b:0c:bd:7a:09:94:88:cc:d8:4b:cf:f5:d6:12:8a:26:
         35:9e:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:26 2025 by rpki-client