Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          wO+0tfo8NYMALU/BSmJMTF1NnbkzMo/XqDdMhqgwGN8=
Subject key identifier:   0E:69:45:EB:F5:17:DC:ED:5A:3E:C5:7B:5D:16:E7:BD:D5:32:A0:2F
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       0198D5BBF0FC90230D23BB0C3152CD5D44B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 07:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:00 +0000
Files and hashes:         1: 0_4kPqijH_S1Eq86-B5t4Qptkkc.roa (hash: monnJnatCyTOeVv1VvBMMHzgkVsFi5krNSX8ZQ1sFsY=)
                          2: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: 0imXbPRH5Lz70yKjBVDouGF6P15JMM8UOTGv5EZoLiE=)
                          3: F4UI4ybOifBfn-xOfyHAde2Mj9c.roa (hash: 0PCH6BF7/3q43D682K2lKa/7ZVqoTmH59+HT5oGtsRc=)
                          4: WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa (hash: 3lu/ayfZLYDj8vnQ7f7Xh2AT2XdViQ0lLouzSMEvwU0=)
                          5: _PqP39FzftfO-7VLMM2dmTLrMcs.roa (hash: CJ+28nkgf4oNGdqZSE90eYJxAT+csrK+YiNrA00VE1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f0:fc:90:23:0d:23:bb:0c:31:52:cd:5d:44:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Aug 23 07:02:00 2025 GMT
            Not After : Aug 24 07:02:00 2025 GMT
        Subject: CN=0e6945ebf517dced5a3ec57b5d16e7bdd532a02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:f3:df:d3:3a:de:42:92:63:f8:e4:e7:f8:
                    c2:e5:c6:7d:5f:10:d7:19:55:89:17:4a:cf:e6:8d:
                    b8:29:2d:0d:26:c7:32:b2:3b:81:c5:83:ed:53:ba:
                    ab:fb:d3:43:a3:22:2f:71:dd:41:70:d0:b0:f5:fe:
                    ad:9e:a3:93:4c:bd:11:89:a2:d7:34:70:1a:26:b8:
                    cd:35:ed:58:94:b1:23:d7:0b:a9:27:8a:1a:b9:a6:
                    60:28:53:d3:5f:22:c9:67:70:5d:89:57:03:e3:2a:
                    f2:50:d2:47:84:13:c7:71:19:92:18:bf:9d:b2:85:
                    50:41:f5:2b:f4:7a:a8:d0:43:bb:1d:64:4e:fc:1b:
                    89:5d:ee:72:c4:a8:ab:8d:6e:a7:90:f9:b6:50:0f:
                    cd:52:58:ad:1e:d9:2d:96:3c:7e:b8:0a:54:98:24:
                    1f:e5:6c:e2:c5:9b:bb:d0:4f:04:ee:41:55:25:1d:
                    3c:77:51:72:00:ba:3a:43:d4:50:45:a0:5a:67:d4:
                    0e:1b:7c:16:4a:f7:8f:8c:6d:5e:8e:b4:58:f2:a7:
                    04:eb:5a:a6:71:e6:dc:d5:38:64:e3:42:95:d4:c9:
                    89:4a:ff:8f:75:1c:7b:24:69:ec:08:89:5c:67:d4:
                    cf:89:2b:e5:02:1e:35:7b:c3:2c:2d:f6:02:87:eb:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:69:45:EB:F5:17:DC:ED:5A:3E:C5:7B:5D:16:E7:BD:D5:32:A0:2F
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:db:e8:73:66:6b:df:b5:3a:96:09:60:ad:e3:6f:3e:16:0d:
         41:4a:cb:3a:01:21:c1:d0:5d:ec:a4:a9:04:7b:45:4b:60:b0:
         2c:68:d6:85:db:94:17:82:47:8c:8c:af:db:74:1f:62:ee:29:
         d6:7b:8a:9f:23:18:8a:50:b1:e3:47:77:1f:ff:3c:10:b2:1f:
         2d:0d:d7:62:1f:eb:d7:7f:2f:b7:90:9d:37:51:e1:8a:96:b3:
         1b:cf:88:86:d8:d1:1c:d4:d2:2b:a8:db:d7:b6:e6:35:db:aa:
         dc:45:ef:43:97:77:3e:31:e0:70:a9:f5:9f:0f:9f:db:22:cc:
         42:18:5b:c3:aa:e4:54:95:ca:63:5e:77:75:06:32:b2:6f:42:
         a6:dd:32:19:4a:d6:bf:4a:dd:46:16:6a:58:dc:e2:71:0d:e9:
         e4:c4:cb:ca:be:dc:76:3e:5f:be:91:6f:fe:06:32:fd:e7:5b:
         24:24:23:ca:42:ef:b9:32:e6:52:fd:ff:83:f5:92:de:96:7d:
         15:80:24:22:20:ed:b8:41:c3:8f:28:d6:33:30:31:bd:92:41:
         be:bc:d6:a2:cc:11:23:d9:74:4e:5c:e6:a8:6a:fd:63:2e:27:
         6c:73:2f:75:9b:6c:14:f6:98:71:92:9a:e8:17:bf:4f:99:8d:
         e2:4a:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:11 2025 by rpki-client