Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          tZC0PY3CEzUitBg+BJ2Q0Vm/3ny0OOTcHCAQSKu/fCA=
Subject key identifier:   76:F1:CA:07:23:32:F3:D0:F2:48:19:E7:59:45:80:5A:83:F1:CE:A1
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       0198D8849F4C0E351790CFF449061FC231B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          1601
Signing time:             Sat 23 Aug 2025 20:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 20:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 20:00:26 +0000
Files and hashes:         1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=)
                          2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: 1NGxCOvTQHvSjZWJ/5SneyY9ilCVhVvY+d1f+L48hYs=)
                          3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
                          4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=)
                          5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=)
                          6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=)
                          7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=)
                          8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=)
                          9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=)
                          10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:84:9f:4c:0e:35:17:90:cf:f4:49:06:1f:c2:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Aug 23 20:00:26 2025 GMT
            Not After : Aug 24 20:00:26 2025 GMT
        Subject: CN=76f1ca072332f3d0f24819e75945805a83f1cea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:df:11:e6:dc:4e:ca:e8:d6:48:9b:b6:5a:
                    54:ec:1b:0c:74:c0:15:17:53:e8:40:77:14:d5:18:
                    76:c4:b6:6c:6d:c0:63:2e:ca:02:2e:68:7e:d3:c8:
                    19:dd:d2:cf:b7:cf:45:2d:7a:ca:28:bb:88:b7:bf:
                    c1:ff:59:a4:60:78:43:b6:16:3a:21:8a:73:98:8b:
                    21:3b:b8:4a:2d:26:68:a8:af:ee:56:95:81:9c:bc:
                    1a:77:c5:18:12:92:91:20:d8:0e:44:4d:0b:7a:15:
                    a2:72:46:49:2f:2a:b1:59:ae:ba:72:24:f9:19:b8:
                    aa:2a:ae:ce:f7:ad:9c:e6:4d:1d:14:04:a6:0c:5b:
                    60:a0:13:34:19:59:8a:32:c8:96:19:5b:11:88:14:
                    98:79:20:71:25:89:aa:56:03:67:a5:8f:46:66:a7:
                    8d:e0:44:ac:34:57:c6:3f:d4:a4:46:34:ca:78:6f:
                    5d:5d:40:8a:dc:5e:d4:66:f7:5b:f6:87:35:88:52:
                    9e:14:7b:3c:42:03:bf:f9:2d:7d:6f:07:4b:2f:36:
                    aa:bd:b3:7f:43:ab:95:7b:b9:a5:c7:e1:88:50:50:
                    87:e6:b7:eb:6b:ef:70:b8:2f:39:2b:b3:e5:dd:9d:
                    ce:f3:ee:d8:f1:fd:01:22:2d:a3:a9:ba:9d:89:10:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F1:CA:07:23:32:F3:D0:F2:48:19:E7:59:45:80:5A:83:F1:CE:A1
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:ac:83:e3:e1:e8:ae:f5:d9:8f:36:bb:9c:7f:75:60:93:
         af:d9:ea:a2:45:b8:ca:a9:a2:17:52:18:f5:d3:9e:ba:25:6b:
         c3:76:c7:f5:98:58:09:6f:0f:54:7f:43:e3:7c:39:b9:88:b0:
         da:3d:fd:91:e7:b3:79:29:36:a6:a8:2b:9e:e6:ef:b5:9a:8b:
         36:1c:14:dd:a4:3b:2f:b7:78:f8:60:0b:f8:5d:ff:fa:53:d2:
         00:f8:ae:7e:87:9d:62:84:13:49:48:8f:fb:62:8e:43:2f:bd:
         14:fa:93:41:fe:ac:de:09:d4:99:58:a1:4d:56:d1:5f:5a:9f:
         63:fa:d0:fc:20:a8:c9:8f:31:6d:01:e7:58:8d:58:19:47:59:
         1b:49:54:a3:3b:0e:7c:5d:77:7a:8a:5a:a4:21:6c:59:7a:82:
         f3:f1:20:0e:00:51:28:e2:45:e0:68:9a:ba:47:f6:20:6e:51:
         14:1f:2c:6c:b9:47:a0:cb:40:3f:4f:31:e1:4e:83:4c:ad:a8:
         de:64:3d:17:27:d6:33:8a:61:e6:b6:a7:f7:06:b2:e4:3b:d4:
         90:87:bc:da:6f:25:59:3b:2a:13:54:eb:2d:df:2e:c1:85:1a:
         8e:a5:d1:65:12:26:00:d8:5c:06:dc:51:a7:87:7f:30:90:29:
         f7:e4:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:05 2025 by rpki-client