Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          a0OCekPJL9h5n/oSDnLz7/nkyszSToW0t+zmMlSPIvA=
Subject key identifier:   F8:05:47:03:86:0E:73:A2:81:12:B8:DF:C0:AA:1F:F1:B0:19:25:AF
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       0198D66018828C5D72BA5507957AB04CA319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          0723
Signing time:             Sat 23 Aug 2025 10:01:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:18 +0000
Files and hashes:         1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=)
                          2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: Y2/CnL2+CsfsIlTOSgx3oCZpZRZRh68AX1dnjvblc+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:18:82:8c:5d:72:ba:55:07:95:7a:b0:4c:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: Aug 23 10:01:18 2025 GMT
            Not After : Aug 24 10:01:18 2025 GMT
        Subject: CN=f8054703860e73a28112b8dfc0aa1ff1b01925af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:65:76:ec:31:ce:f1:45:2a:64:9e:62:68:
                    ed:a8:8d:b0:52:e6:cb:71:a5:79:ae:24:ec:db:fa:
                    a7:bd:7b:85:f8:0b:fa:0a:11:48:32:fa:91:eb:64:
                    36:84:55:52:24:09:d5:8f:5d:02:b7:37:4d:0a:5f:
                    39:5b:1e:ac:73:ae:29:bd:0a:00:2d:b2:d7:89:39:
                    72:a6:4b:81:53:0a:8b:1a:9d:5a:c4:83:f6:bd:f3:
                    20:57:58:f2:63:3a:96:85:47:38:85:b7:65:c5:20:
                    5b:75:d4:06:21:4a:43:bd:dc:63:e3:d1:eb:a4:69:
                    9c:d3:ad:2a:6f:70:7f:ab:1c:ee:07:3f:60:92:6e:
                    15:24:04:e8:4f:3d:0e:f9:33:f0:cf:ea:41:a3:7c:
                    af:a1:97:9e:f3:c4:af:bc:1b:0e:ea:af:88:84:89:
                    e5:c3:20:98:d5:5b:71:ac:89:68:8e:94:b7:e9:f4:
                    55:87:e3:43:5f:8b:c1:1f:4c:62:3a:99:ba:1d:f1:
                    d8:05:d8:c3:da:9e:71:52:5d:b4:7c:0d:bb:31:80:
                    08:99:4f:58:90:6b:9b:d1:e4:09:ce:4f:e3:7f:99:
                    53:0b:3b:45:83:ae:63:c6:64:7c:8c:3a:fa:4f:75:
                    fa:2e:fd:29:af:97:0d:4e:8c:ae:ad:39:d3:8d:63:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:47:03:86:0E:73:A2:81:12:B8:DF:C0:AA:1F:F1:B0:19:25:AF
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:0e:89:d8:d2:5d:9f:80:aa:a4:13:03:02:44:21:84:78:
         6d:51:db:93:e1:84:45:25:9a:29:a3:1f:03:23:fb:ba:00:1d:
         62:1a:c9:4d:7f:6b:4f:d3:5b:3f:e9:90:f9:53:2a:0d:28:e9:
         68:1a:9b:7c:65:fe:aa:fa:de:48:a5:b9:8c:c8:05:a1:e5:68:
         8d:7d:b5:8b:d3:49:b5:91:65:cd:1c:0d:39:52:da:a8:a4:bc:
         35:0b:67:8c:8e:e1:32:e6:01:65:22:96:73:59:06:44:23:66:
         1e:2d:e4:9b:f0:73:4e:9f:3f:3b:42:d9:cf:dd:15:da:e5:15:
         a6:27:f0:34:ad:57:3e:46:fb:a2:02:c3:05:75:30:dc:ec:00:
         e1:8b:70:2c:72:5f:35:c1:c0:39:dc:24:fe:3a:7d:a0:d3:f0:
         a6:7e:f8:a6:7f:91:0f:24:47:3f:72:70:7a:c3:e1:42:70:39:
         1d:dc:bc:8f:78:13:94:dc:67:a1:e1:06:b4:94:46:d7:79:d4:
         92:e8:e9:60:22:36:ca:28:c8:46:aa:43:16:2b:ce:1b:d3:ed:
         7f:15:6d:c9:0d:0d:ac:17:6b:4c:df:8d:2b:6e:0f:9a:4d:1b:
         70:43:72:45:23:57:14:86:79:2a:c6:a3:ad:1a:96:18:0f:54:
         5a:f3:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:00 2025 by rpki-client