Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
File:                     1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft (raw, json)
Hash identifier:          cvhrEomi382qbMYhSQxxqlPEsbhtRZCxDB32+5Yp5Dk=
Subject key identifier:   D6:6A:1C:A6:B6:5C:22:A0:10:77:BA:C9:FC:DF:56:C3:92:8C:7F:70
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Certificate issuer:       /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial:       0198D473CD49FB392E4675636968389F5D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:03:35 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:35 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:35 +0000
Files and hashes:         1: 1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl (hash: 1nF9G3pxh58CtAOx0PoKgtV5ny62Sncw+cWfeYY8XC4=)
                          2: HpYep1gyuglubkg27rH0_NPEYfk.roa (hash: eknsEEDWFIUmysvI1SqfOomMLn1u1uKJE0YncED6Hxo=)
                          3: P8E9Ou4g1WbTKObdDwcArgBdv5g.roa (hash: jEoo4eK/vJf03qD8uvHcjuGFNdhu1O0hJ9v27A3yEo0=)
                          4: pM8rrfbLw8gBuT9MppMBPtFFKlM.roa (hash: ioCVW6t7ze0VBB3sFaN026IrAp6OLLgUf56gkcAIXz0=)
                          5: qkEX-Kg40A3qQ2kkYyX2gfh1PGs.roa (hash: og5sz8ZyyZWxCY26JVGs9nTzuHebJDo/OXt0OqQcO4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:cd:49:fb:39:2e:46:75:63:69:68:38:9f:5d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
        Validity
            Not Before: Aug 23 01:03:35 2025 GMT
            Not After : Aug 24 01:03:35 2025 GMT
        Subject: CN=d66a1ca6b65c22a01077bac9fcdf56c3928c7f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:db:0b:3c:27:06:26:9c:25:68:c6:3c:13:
                    10:96:b0:4c:84:6a:56:3e:2b:e8:ba:9c:cf:a6:f7:
                    18:5a:4c:b6:76:a6:46:9c:fd:ba:b8:ea:a5:65:1b:
                    0e:19:5d:59:cf:40:bc:43:92:51:57:6e:9e:d1:a7:
                    ef:d7:1b:a1:66:35:57:17:6d:79:c9:a5:a3:99:e4:
                    d6:ba:1f:ae:1f:43:d4:60:ad:9a:87:31:58:72:49:
                    17:8e:b8:af:fd:97:26:f7:1f:47:bf:0d:76:d6:0e:
                    83:d3:de:6f:1d:36:ed:7e:7a:e0:1c:c0:84:66:71:
                    6e:59:8a:2b:12:c9:99:fc:07:e3:ea:22:a8:fe:13:
                    9c:77:23:3d:9d:d5:20:91:58:12:41:ef:1a:ae:7d:
                    02:c7:8d:3d:38:c1:19:aa:9b:d7:68:68:4b:53:1c:
                    b2:1d:80:c1:21:02:dc:5f:64:f1:fb:8f:07:37:6b:
                    9f:bf:a3:85:ce:a2:fb:27:b8:03:2e:63:66:c1:4f:
                    18:2a:ab:b6:fb:ab:25:f4:24:4c:16:72:c7:5e:ee:
                    c2:60:9b:96:49:ac:87:b8:01:8a:ae:50:88:1f:f6:
                    ab:0c:d5:39:2b:c9:ba:45:5b:e9:57:57:0f:66:a2:
                    12:34:94:6c:8a:15:ec:27:e5:86:d1:be:68:6f:00:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6A:1C:A6:B6:5C:22:A0:10:77:BA:C9:FC:DF:56:C3:92:8C:7F:70
            X509v3 Authority Key Identifier:
                keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:58:82:b7:97:ec:0f:79:2c:eb:68:ce:b1:c9:10:eb:40:c9:
         ed:65:f0:78:e4:19:39:f8:11:fa:79:64:c1:2d:fc:4e:e2:c2:
         69:d0:aa:d5:4f:ff:0a:ba:86:ab:eb:b6:ae:6f:31:a3:4d:90:
         3d:23:96:40:45:ea:b6:ae:08:74:3f:c1:9c:7f:c1:15:9f:d3:
         35:9d:b9:c6:85:d1:0a:fe:d3:45:dc:f5:36:05:5b:99:58:97:
         53:c3:4b:ce:b9:b3:3b:2e:3e:10:c8:fc:d5:e5:5e:d2:be:c6:
         ee:33:54:37:c6:52:d2:8d:bd:79:51:34:7e:1b:25:32:96:74:
         bd:36:ca:57:1a:ba:bf:d8:23:18:30:32:a0:5b:32:a5:59:4c:
         08:07:0e:d1:1d:79:26:53:7e:c2:17:e0:66:7b:33:82:54:9d:
         c9:c3:ba:ad:44:af:87:1c:ca:55:2f:ad:84:76:12:a2:34:c9:
         b3:0a:9e:7b:df:8c:27:bc:41:69:f8:e4:ee:c6:31:b0:36:fd:
         e0:40:7a:2f:77:d4:f4:9d:e7:38:06:0c:bb:d7:23:4d:48:6a:
         a4:f3:03:5d:aa:52:91:e5:7e:58:fb:5b:a1:6b:01:4c:92:f7:
         37:88:27:e3:29:14:6b:df:94:b6:43:4c:20:80:21:90:cc:fb:
         cf:0c:a7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:01 2025 by rpki-client