Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File:                     nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier:          bufYRLXOBDKl7Q2e9K+9N2xZE3X8sdOAGP68q1B5xp0=
Subject key identifier:   69:83:77:1D:95:27:8A:D3:03:2C:29:0C:8E:03:2F:BC:3B:81:EC:F9
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer:       /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial:       0198D8BD43CE3B3C6A6C324F2844AA856841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number:          1599
Signing time:             Sat 23 Aug 2025 21:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 21:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 21:02:18 +0000
Files and hashes:         1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=)
                          2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=)
                          3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: j5HXhiE64DDtF9/JBsUANz3+pdXLP7yUYmQEy+tjhhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bd:43:ce:3b:3c:6a:6c:32:4f:28:44:aa:85:68:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
        Validity
            Not Before: Aug 23 21:02:18 2025 GMT
            Not After : Aug 24 21:02:18 2025 GMT
        Subject: CN=6983771d95278ad3032c290c8e032fbc3b81ecf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:d1:e1:1e:34:8e:18:f2:51:3f:82:cb:9c:
                    3c:e4:e6:6c:b4:40:47:32:d8:81:ee:f9:a1:31:34:
                    f0:e8:f2:78:d7:fa:2e:dd:59:0c:cf:8e:c2:37:f1:
                    6b:5b:2a:5c:a5:7d:24:e9:c9:59:bb:fb:e7:3a:00:
                    72:86:2b:8d:96:df:93:c5:06:ad:65:97:a4:8c:18:
                    01:c4:71:70:79:3a:37:6f:5b:39:14:e0:e9:c2:fe:
                    e2:14:3d:60:3d:60:cd:c0:c4:3d:8c:23:2f:a3:83:
                    71:d4:e1:6f:39:94:21:7d:76:d4:e8:64:75:2a:21:
                    57:48:c0:f4:5c:c2:ae:92:19:db:99:9c:9a:de:37:
                    b0:aa:35:1c:16:90:1e:cc:08:2e:4b:64:49:dd:13:
                    89:75:f0:e3:1d:1b:02:73:85:a0:83:f2:30:63:7c:
                    d9:52:61:a1:b3:dc:98:0b:f1:e7:7f:6f:03:06:75:
                    63:32:50:b0:22:80:1d:c7:1d:ac:93:1c:3b:f3:9a:
                    9a:eb:48:19:de:50:86:12:67:c7:b2:a6:68:82:5c:
                    9f:26:ee:82:7d:f7:a8:bf:ce:f5:aa:1c:f8:31:20:
                    60:4c:d6:1a:ca:31:ef:8b:09:eb:de:33:c2:f7:de:
                    7b:b9:1b:ad:48:39:7a:15:8b:00:58:7b:fc:93:2d:
                    46:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:77:1D:95:27:8A:D3:03:2C:29:0C:8E:03:2F:BC:3B:81:EC:F9
            X509v3 Authority Key Identifier:
                keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:5c:d1:71:41:50:68:4c:d4:a1:03:f0:27:ff:58:7e:09:
         0d:28:04:ec:b2:0a:b0:05:17:b2:be:21:fb:f2:bf:08:c2:aa:
         fe:44:d6:d3:f0:f0:9f:8d:e8:f6:33:60:72:7f:10:48:2c:66:
         41:82:21:52:3b:de:ea:b2:04:d4:1d:31:4a:93:61:36:32:8d:
         85:d5:bc:78:19:8f:1b:d1:f9:5f:6f:ca:08:2f:fb:b2:e1:a0:
         a3:98:94:b4:98:4b:f6:7f:0c:22:eb:f3:76:a9:35:ff:21:6e:
         72:a8:0d:82:cd:c5:dd:6c:af:6f:d0:0b:ac:29:9b:08:5a:93:
         0c:0a:c0:3b:3d:91:4e:95:ed:32:99:94:e8:73:a3:ff:48:87:
         e7:eb:8e:56:fb:ce:86:5a:fe:e9:05:b4:ab:2a:a9:13:24:6a:
         1f:0b:c6:25:21:39:03:41:d7:5e:4d:f5:e2:82:d9:91:b1:92:
         f7:14:d7:c3:10:b8:6f:8b:7a:5a:17:94:83:af:99:3f:c5:59:
         51:dc:17:d6:bf:ce:84:57:65:3e:ed:a0:d2:0c:66:8a:63:1a:
         93:1d:f9:1f:64:69:70:fa:c9:09:24:a8:e3:4a:b0:8f:60:43:
         6f:59:2b:3c:11:3a:20:d0:25:44:ee:1d:72:19:b1:4b:dd:d4:
         40:be:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:35 2025 by rpki-client