Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          qBKmJFzwzc+V/z5hTQb5p6eiHDDX718gQrfnFDuQ0r0=
Subject key identifier:   A5:BA:6F:14:5D:53:D3:79:67:46:6B:93:61:F6:AA:BE:F9:0D:E7:00
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       0198D583DAD8ED880651908A8BC6307E983C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 06:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:44 +0000
Files and hashes:         1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
                          2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
                          3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: Sq+0udzAgzombCSMWochYaJGww1J8BkXqJbxEDGnlho=)
                          4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:da:d8:ed:88:06:51:90:8a:8b:c6:30:7e:98:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Aug 23 06:00:44 2025 GMT
            Not After : Aug 24 06:00:44 2025 GMT
        Subject: CN=a5ba6f145d53d37967466b9361f6aabef90de700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:ee:fc:ae:4b:85:90:cf:07:00:29:e4:ef:
                    05:e1:29:95:45:bf:71:b6:06:62:ad:e8:fd:49:c7:
                    d9:fe:96:a4:de:5c:43:15:19:1e:39:0c:38:e8:1b:
                    7e:3e:62:23:0c:1d:2f:73:94:14:e6:87:09:ea:64:
                    d1:91:64:1e:52:0e:15:dd:b3:20:47:9c:1f:63:fb:
                    ac:42:e8:8a:6c:dc:29:d6:1c:3d:9a:ee:02:21:5c:
                    24:4d:fb:63:5d:d5:89:ae:c8:21:10:1b:ad:8e:8e:
                    98:37:70:33:6a:30:51:4d:0d:4b:cb:90:1e:b5:29:
                    91:ba:84:62:49:75:50:76:11:16:32:f5:87:de:b8:
                    0d:e3:34:e5:a1:44:9e:88:2f:4f:1e:d1:15:b1:ad:
                    db:89:6b:ad:af:01:d1:9b:99:5d:b6:f4:45:67:49:
                    ba:b2:5e:07:01:5e:67:37:22:82:a7:b8:fa:bb:97:
                    a1:50:d7:b5:5c:bd:c2:0b:68:01:5a:e2:81:ea:e6:
                    f9:ef:5f:a3:f2:28:1c:d8:21:7e:a0:e6:a0:2c:65:
                    d9:fa:8e:eb:c1:3c:c5:64:51:2c:fa:e8:9d:b7:8a:
                    04:32:42:9b:7a:63:f1:35:54:d8:34:84:81:53:ae:
                    6b:17:e4:de:1c:37:33:9f:ff:53:9c:0b:f1:cd:1c:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:6F:14:5D:53:D3:79:67:46:6B:93:61:F6:AA:BE:F9:0D:E7:00
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:84:19:bb:af:a1:e5:c6:11:53:ff:9a:5c:ef:57:88:dd:
         df:16:e1:8e:aa:85:95:cb:d8:b3:26:74:78:0e:46:26:aa:f9:
         a6:60:a3:58:e0:bc:3e:4b:31:21:96:21:8f:94:c4:0d:7c:bf:
         e6:51:d4:40:8b:29:7c:25:6f:56:39:b4:3f:ec:19:87:56:b0:
         13:d8:52:0a:a6:01:8a:8f:d2:8f:f8:36:5a:1a:20:b6:f9:d4:
         71:33:63:8b:50:96:07:0b:cf:a1:1e:67:bc:9e:e6:a5:b2:24:
         0d:f3:7c:a3:23:94:35:eb:77:27:98:20:d4:7c:1c:83:90:a9:
         d8:19:57:8a:b8:4a:70:8e:8b:d1:0b:db:bf:17:d9:c9:f9:93:
         21:f2:c3:1e:97:0f:46:ce:df:87:4d:79:84:2a:90:a7:40:66:
         7e:64:0d:4a:96:e3:5c:41:2d:66:09:d2:dd:3f:38:01:17:6e:
         98:03:85:94:91:f5:4b:26:e1:4b:dc:b9:bb:45:68:ef:f1:e5:
         93:b9:4a:03:96:e4:4f:0c:42:2a:f9:57:d5:bd:12:62:5a:7d:
         2a:03:9b:ea:9d:30:2c:26:38:dc:ac:a6:b4:f2:25:90:38:fe:
         a5:bf:be:a5:92:7a:7f:dc:d6:9e:c0:86:f1:43:8f:1d:e5:5c:
         24:1c:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:36 2025 by rpki-client