Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
File:                     rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json)
Hash identifier:          4wZ+F31jN1dWyw1c1qmw1vXOCP0E+FMSP5d5AyP0ZvU=
Subject key identifier:   38:C3:0F:AD:5E:74:72:C2:9B:02:22:8E:C2:8E:D2:46:BA:2A:39:EB
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       0198D4733E1AB603742B6E7CE5F8B8ABBDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 01:02:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:59 +0000
Files and hashes:         1: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (hash: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=)
                          2: XA_piEc4HEvUHExh_2CSkkKu2EE.roa (hash: o4y+DZ7Kqo85gSPTmaUUa/xs87y4f7OVpkKcmJxleCE=)
                          3: f8xBUwiIZuwlbLideHYCraA5b80.roa (hash: 80zoqn9Od9Yp6Ppqm8QLXbeCtAS1Mylgf7fSAtsOaVc=)
                          4: lR6zP5U5RH-kGUiT4tee76n_n7U.roa (hash: d+2joVrqEnxO1Au13OpUY3xGwfVao9EUryyrW7jhHKE=)
                          5: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (hash: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=)
                          6: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: jTgyAdC/J7ZTi3lwrYUN8rFl8OnpUBV07s8zpv98XmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:3e:1a:b6:03:74:2b:6e:7c:e5:f8:b8:ab:bd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Aug 23 01:02:59 2025 GMT
            Not After : Aug 24 01:02:59 2025 GMT
        Subject: CN=38c30fad5e7472c29b02228ec28ed246ba2a39eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:8d:16:4a:2c:f6:c8:aa:b1:aa:5f:5e:0f:
                    b8:79:ca:f3:8b:a8:b2:ec:21:05:3e:e3:8a:54:5b:
                    99:9d:92:f5:b0:63:58:b8:e0:bf:d9:b5:e4:d3:f4:
                    d9:9b:6e:c7:a6:d7:e9:50:59:5f:7c:0b:0c:68:0d:
                    dd:5d:81:fd:3d:5f:34:78:7e:8c:30:b5:85:e2:6d:
                    cb:41:cf:7a:32:b9:a1:73:bc:50:29:e1:49:b2:c6:
                    cc:12:bc:aa:3f:be:98:d4:ea:3e:62:dd:b0:72:ef:
                    04:9b:e8:7b:37:28:8f:d5:b8:08:9b:76:90:ae:0b:
                    10:ed:6f:8f:31:76:c7:17:21:39:7c:83:8a:54:7b:
                    d5:f1:cd:02:38:24:8f:4e:57:39:32:51:44:68:28:
                    32:b6:10:c1:92:20:45:60:e2:ea:ad:97:04:58:4a:
                    a3:8e:3b:f3:54:ea:53:5f:6d:32:ca:1d:ac:19:54:
                    97:7a:80:71:f6:c3:2a:73:3a:bb:78:89:e2:d4:2e:
                    af:9a:37:3e:c1:7e:6c:89:31:ed:49:78:3d:8b:bf:
                    d5:9b:7d:45:a9:be:a5:5e:3c:82:ae:78:2f:18:9d:
                    94:8b:00:51:36:bf:8b:b7:8a:9b:5d:be:dc:72:71:
                    b7:fb:b3:24:d7:65:89:44:1e:ae:37:1d:63:68:ea:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C3:0F:AD:5E:74:72:C2:9B:02:22:8E:C2:8E:D2:46:BA:2A:39:EB
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:55:ad:ab:2a:fa:b6:fd:ea:4d:0d:bc:53:cf:90:a3:bc:94:
         87:b6:46:03:55:b8:e3:f6:c1:44:a9:3f:de:1b:ee:20:f3:5a:
         83:ac:c8:3f:89:48:11:d1:03:42:2a:09:03:d7:98:88:2f:6a:
         f4:1d:11:57:66:fa:a3:9d:d5:ed:15:c1:99:1d:c6:de:60:e2:
         88:cb:ba:15:3a:71:96:e6:f6:dc:16:d0:8c:ec:7b:23:ea:b9:
         83:7a:39:92:28:41:a9:76:80:f7:39:da:fd:c1:68:a7:4f:8a:
         5d:cb:fe:69:c6:06:b0:5c:d0:50:9e:eb:9b:18:38:fe:76:54:
         ca:9d:94:2d:47:be:32:3e:7b:a8:82:21:d6:0f:26:08:73:09:
         00:62:58:22:5f:04:18:44:c0:ed:64:46:d9:17:8a:57:27:15:
         a6:61:0b:f5:fe:72:ef:81:56:b9:40:30:da:4f:c0:53:e7:bf:
         cd:27:09:ee:59:02:58:2f:8a:35:10:32:65:cd:c1:b1:6a:95:
         a8:16:cf:6f:3d:39:71:98:9f:4d:1b:6b:f7:50:9c:3c:5f:e0:
         6a:eb:64:4e:86:1c:bc:96:ff:6a:9a:f2:ba:6c:80:71:e0:f7:
         d2:93:ba:00:38:de:06:42:40:f5:ad:26:ee:52:b8:4e:14:97:
         dc:b1:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:16 2025 by rpki-client