Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
File:                     c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json)
Hash identifier:          0jQvUFWXQHLTYxR2dT+1u2XTT57zqls6TsF2gXjBNmI=
Subject key identifier:   A1:2F:2C:BE:63:07:0C:B4:C3:B8:FC:76:ED:77:08:55:03:68:89:2F
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Certificate issuer:       /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial:       0198D773B35DC592AAB590516B49C23B5212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
Manifest number:          1653
Signing time:             Sat 23 Aug 2025 15:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:20 +0000
Files and hashes:         1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=)
                          2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=)
                          3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=)
                          4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=)
                          5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: CD1P/OjhkHXnKnwYr/xH/TT7M+OJQ0UGpIyYUcpNI3s=)
                          6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=)
                          7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=)
                          8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=)
                          9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=)
                          10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:b3:5d:c5:92:aa:b5:90:51:6b:49:c2:3b:52:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
        Validity
            Not Before: Aug 23 15:02:20 2025 GMT
            Not After : Aug 24 15:02:20 2025 GMT
        Subject: CN=a12f2cbe63070cb4c3b8fc76ed7708550368892f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:4d:f5:fe:cb:de:42:2e:0d:d5:85:2c:cc:
                    f4:c4:4b:68:4b:4a:24:a9:08:fe:77:c6:9c:f3:e0:
                    6a:73:8f:40:b0:ca:3f:74:2c:aa:e1:ec:7f:09:21:
                    88:a6:01:9b:35:45:05:f9:2c:cb:e9:a2:dc:0d:fc:
                    77:27:93:75:92:73:7b:07:37:53:c1:4f:a3:61:a2:
                    76:4b:92:1d:00:9b:13:03:b7:23:74:08:83:33:16:
                    ee:f5:81:12:af:bf:47:cf:b4:6f:36:9c:b8:8c:95:
                    66:e7:c2:f2:8c:30:7c:c6:65:4b:1c:d3:5c:3d:c9:
                    e3:95:8f:96:12:f4:c9:3d:14:51:64:00:b8:70:3d:
                    e8:5d:6b:93:27:44:ee:c4:7d:64:45:f4:af:fc:4b:
                    a7:2b:e7:c6:2f:ab:3d:76:1b:df:de:9f:c0:9e:da:
                    d1:6f:f5:34:f6:1d:d9:eb:88:bc:c0:f6:57:e0:da:
                    4a:d6:78:7a:60:65:ba:a8:78:3d:9d:1a:13:b9:c4:
                    92:ad:87:f4:ab:7b:3a:bf:96:50:77:c5:39:b4:a3:
                    02:44:09:5a:e8:77:12:d3:5d:f1:3a:85:97:3c:8e:
                    58:37:67:54:10:b2:4a:c8:fc:be:93:9c:e3:77:0b:
                    08:f4:2d:30:17:ee:c1:46:7e:43:dc:47:0e:11:5e:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:2C:BE:63:07:0C:B4:C3:B8:FC:76:ED:77:08:55:03:68:89:2F
            X509v3 Authority Key Identifier:
                keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6e:32:93:04:21:5f:65:da:a0:eb:f8:ce:e0:50:41:e8:2a:
         1b:0a:c2:fb:1c:67:d4:da:88:6a:18:b6:72:63:0e:9f:84:91:
         ed:56:8a:b6:65:00:bf:f9:93:d0:0c:0a:0b:48:f4:99:01:9f:
         e1:11:a9:6e:c7:f1:9d:84:1e:4c:48:85:5e:b3:13:2d:42:c5:
         7b:a4:91:a1:ea:54:e5:3b:e3:32:59:6a:fc:75:0d:f1:1d:9c:
         40:7e:cd:23:da:37:56:03:59:1d:64:ab:3d:9e:e5:78:3f:c3:
         e2:22:dc:28:f8:e0:f8:45:4b:97:da:4a:73:26:16:f0:09:34:
         b3:5a:3b:c2:0b:60:31:a6:30:10:0c:bb:38:78:2e:63:45:bf:
         8f:e6:04:c7:62:6f:fc:bb:48:b9:48:d5:3e:5e:fa:59:9a:8a:
         1a:10:0d:5c:fa:fd:36:27:a2:3d:00:ed:b4:4e:75:ce:e7:d3:
         45:4a:d4:dd:a9:74:db:96:31:72:bc:d0:21:2f:fb:bf:1d:c7:
         87:3f:e2:f9:b5:37:2f:cc:34:32:c1:39:f3:34:09:07:04:c4:
         52:42:e1:d3:2a:69:28:3a:87:a1:fe:96:03:be:43:40:12:c9:
         4c:d3:2a:85:a5:27:9f:fa:5d:25:75:22:99:82:f6:f7:c1:bb:
         27:53:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:12 2025 by rpki-client