Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          MF6stM6rOyR25iY/5vNvffatT4+9XdqlwZZbgku4EHw=
Subject key identifier:   C7:6B:71:E3:EF:16:10:36:B8:8D:06:F9:CA:C8:A3:E4:34:7B:B6:5C
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       0198D7A8B11960047368D0CD00455ABEC8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1659
Signing time:             Sat 23 Aug 2025 16:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:13 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: hOHQaRx7mC+JGpg6n5qmjCV9jdvhQQO8tS44x3+Qh1g=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:b1:19:60:04:73:68:d0:cd:00:45:5a:be:c8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Aug 23 16:00:13 2025 GMT
            Not After : Aug 24 16:00:13 2025 GMT
        Subject: CN=c76b71e3ef161036b88d06f9cac8a3e4347bb65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:ef:b3:e2:2f:03:8b:65:60:ab:ff:bb:b6:
                    78:15:a1:58:b3:4b:e1:89:62:35:42:33:53:d8:f8:
                    07:ed:7f:ec:cc:11:3d:53:39:22:88:7c:b2:8f:96:
                    df:4a:22:e9:79:43:15:8d:78:05:9e:a1:49:ba:50:
                    eb:84:72:a1:b0:21:cd:7b:b0:8d:49:a7:1b:15:a4:
                    63:b0:87:f4:24:01:4c:cb:e9:57:26:d1:23:69:75:
                    30:b5:0d:13:cd:31:1c:47:aa:d3:8e:54:07:dd:78:
                    fb:07:32:5d:ef:d7:af:da:2e:33:f3:d0:9c:b3:1c:
                    e3:95:0d:5b:54:0c:dc:7f:bb:2b:8e:4f:1c:7e:59:
                    4c:b4:69:10:e1:4e:5c:5e:46:7c:13:1f:77:8b:d7:
                    7d:6d:e2:81:db:ee:26:32:7c:6e:65:d2:6e:7e:56:
                    e6:e7:31:22:ca:32:18:36:d1:40:82:f7:25:f3:1a:
                    96:f4:00:09:da:01:82:ce:74:52:08:1a:56:78:1d:
                    7b:22:ed:3a:0d:fe:84:66:92:56:c1:d1:5f:d6:80:
                    5d:eb:2c:e3:d8:63:43:bb:7c:39:e1:a7:82:94:63:
                    de:23:8c:db:e7:5a:e6:bf:f3:8e:09:05:30:4c:82:
                    51:ca:48:89:b8:6f:79:c7:29:fe:d9:75:0a:9a:8e:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:71:E3:EF:16:10:36:B8:8D:06:F9:CA:C8:A3:E4:34:7B:B6:5C
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:6d:27:14:76:d8:e2:7b:52:4c:5e:cc:79:56:78:9e:0b:
         c1:90:73:97:9b:6b:b0:4e:eb:c7:c2:84:fa:9e:76:74:7a:00:
         0c:cb:62:63:06:97:b9:dc:52:af:0c:1e:87:84:0f:5e:64:74:
         cc:c5:13:44:2e:87:59:3b:cb:b4:ea:71:dc:5f:7d:e0:79:ca:
         a7:06:bb:bb:e0:81:a5:c2:60:d0:64:01:2e:30:7c:b4:be:82:
         7e:c8:20:07:48:8d:b0:a0:79:8e:10:ec:f1:d6:ca:d4:01:61:
         f7:11:32:ca:88:e1:b2:0f:b6:77:a0:35:da:9e:ad:05:46:63:
         5a:72:0a:3d:0b:af:77:67:fb:9d:01:3e:1c:51:5e:6c:f4:c7:
         ac:e5:2c:b1:fa:43:68:03:82:41:6a:26:46:fd:5c:e4:94:6f:
         ab:bc:bf:9c:0a:4a:b2:06:67:51:af:5a:17:3f:ff:8d:85:19:
         d8:43:06:78:81:14:60:3b:d7:e1:22:d0:e3:c1:cd:52:45:58:
         48:33:16:7c:8c:97:de:06:e3:b9:a2:9a:1c:14:7d:e8:4b:e7:
         9a:33:94:1c:dc:50:c9:e1:ab:84:07:93:b7:58:bc:49:6b:25:
         31:4c:b9:9d:b2:8e:60:29:41:ab:19:02:f8:17:b5:a3:92:37:
         0f:b8:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:37 2025 by rpki-client