Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          7Wc5hGJW90DUkwwHSSJ1W+fRh722UN1qHqSSKFyiCho=
Subject key identifier:   4C:90:9A:85:F0:A8:B6:98:80:81:4B:04:59:7E:39:AF:52:D1:A3:62
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       0198D5BC31622EBFCDBC3C01B80C42F3946C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 07:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:17 +0000
Files and hashes:         1: 3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa (hash: nQJrfkgs7cckEJG4TEbt+aYboyegrJmZ5zK0surmR+g=)
                          2: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: QX7w4/vKRFMIIB0yHIJIdl0jHgKWYYRXYyRfFB2ZIAM=)
                          3: Yd5r_QEQ97UxrSiXvR8HMw_XBtc.roa (hash: 4WQg20bCRgaZBVClPe/ndX9hPwZNZeu+B3wqx3iNyco=)
                          4: Z4ff2msRKcb6YMtm9rlrjleZxQM.roa (hash: R/U2SPlro8qocLQcB9G60tY7YkY0sJXo2Wic6VrrpPw=)
                          5: fnP97-K5e0spzAHkfpzS7NoD9Ds.roa (hash: wyZFCBeVIhoNQXOEQL6jtOnIb8X1RT3QrCS3XSJFIsw=)
                          6: s7l_bnMW4yM__kf16EKQOzQgrww.roa (hash: /3bgCp/Da/4SFXCfZPlSInxEPHoPc1PmEApRmcXOz4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:31:62:2e:bf:cd:bc:3c:01:b8:0c:42:f3:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Aug 23 07:02:17 2025 GMT
            Not After : Aug 24 07:02:17 2025 GMT
        Subject: CN=4c909a85f0a8b69880814b04597e39af52d1a362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:ec:4e:80:7b:c4:a1:f6:e9:95:47:90:a9:
                    f7:a2:87:35:24:7f:85:f4:c2:bd:73:3b:19:00:4d:
                    54:6f:76:55:82:f5:bf:46:fe:67:48:5a:b3:2d:35:
                    f8:86:d7:0c:b8:28:65:ff:0e:96:58:97:ca:5a:70:
                    32:2b:a5:77:c8:41:44:62:3e:25:04:5d:8f:35:38:
                    29:80:15:16:80:40:49:df:90:5d:d0:58:73:83:e2:
                    0e:91:3d:6a:42:5b:2b:ca:f6:31:c7:bb:8f:7b:97:
                    58:0b:99:90:7c:62:6c:ac:bc:8d:9e:00:9a:1f:66:
                    25:7b:95:28:18:92:8f:20:23:bc:2a:50:b1:a9:31:
                    88:85:d4:5e:8c:f3:d5:56:ea:e9:5f:8e:5b:c6:5f:
                    f5:5c:6f:ba:4a:95:7e:07:a2:d2:f0:d4:fb:46:2e:
                    1a:d3:a2:32:7f:b2:aa:0a:35:f9:7a:85:b4:15:be:
                    f3:2a:cd:1d:a0:8d:6a:98:c3:9e:02:ab:41:3f:70:
                    3c:ea:58:65:b3:c7:96:c2:1e:49:ee:9c:d5:a2:06:
                    b3:c4:27:53:68:94:80:45:2d:3b:bd:4d:b1:1d:df:
                    50:d3:c9:3a:e0:9f:18:78:21:21:c9:42:23:c8:77:
                    08:17:48:ff:a0:f6:02:5c:23:23:7e:cb:04:b7:6b:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:9A:85:F0:A8:B6:98:80:81:4B:04:59:7E:39:AF:52:D1:A3:62
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:4e:12:fd:58:7f:fb:f8:be:50:54:f6:b1:22:25:b3:24:
         60:b2:e4:29:68:36:23:7d:17:a9:9b:ee:e7:4e:a2:ac:e7:f3:
         36:00:e1:0d:65:99:22:3b:13:79:c8:6a:aa:4d:13:02:c0:e3:
         50:24:1b:78:83:54:52:ce:bd:89:21:96:16:4a:df:f0:cf:83:
         aa:a2:5d:d4:9c:15:fa:4d:13:7e:3f:a5:98:93:93:65:5a:02:
         ad:bb:40:e9:5b:2a:31:1d:a7:bf:33:d8:bc:6f:c9:20:91:72:
         e2:bb:99:f9:12:93:cc:5c:88:52:07:75:a2:3f:28:cb:48:f9:
         00:1c:27:4a:95:2e:5a:6b:f3:b6:d2:d5:f4:d0:a7:ce:e9:1a:
         1b:6d:2f:e9:3b:b8:3c:a9:d2:23:59:30:bc:c3:c7:b1:91:e5:
         3d:84:22:d3:bd:29:84:e7:e2:d8:8e:cc:9e:0e:1b:9a:6b:7b:
         7e:24:27:fc:a4:1a:f3:54:22:8b:7c:71:c4:fa:b9:9f:d5:01:
         02:90:e0:46:2e:ef:8f:05:bb:ae:f2:36:14:06:95:9a:79:50:
         e1:63:c2:b5:2a:b7:21:e8:d0:0c:75:21:40:8c:ce:d0:57:4a:
         29:31:97:ec:9f:38:d1:33:e6:0b:e4:5b:93:48:11:40:3c:2e:
         3b:b4:cd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:28 2025 by rpki-client