Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
File:                     t8wtor25e-kSotlC6-fq-kZR6IU.mft (raw, json)
Hash identifier:          ze8+6QpHUFm5ENvHBQEWG6OTRB6Q/bWQUu5mG/6NrLY=
Subject key identifier:   C7:A9:5D:02:11:A1:2F:8B:85:A7:30:EB:A8:D6:56:82:BD:C2:38:00
Authority key identifier: B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85
Certificate issuer:       /CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
Certificate serial:       0198D583B29CBCDD2F1F35A68B4611F08E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
Manifest number:          1652
Signing time:             Sat 23 Aug 2025 06:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:34 +0000
Files and hashes:         1: INh9G5iQoMvQ_1itqGn6rIFWztw.roa (hash: DlHpU6WxKqPj/r93yoW9dLdgNHjiaW8IJyXbLuzYYAg=)
                          2: t8wtor25e-kSotlC6-fq-kZR6IU.crl (hash: wSxlMs8H1Gl/GzcttvjNcqU7xqEtQo+PL3dOzCUVYXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:b2:9c:bc:dd:2f:1f:35:a6:8b:46:11:f0:8e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7cc2da2bdb97be912a2d942ebe7eafa4651e885
        Validity
            Not Before: Aug 23 06:00:34 2025 GMT
            Not After : Aug 24 06:00:34 2025 GMT
        Subject: CN=c7a95d0211a12f8b85a730eba8d65682bdc23800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:df:7e:a9:d1:0e:53:06:96:8f:84:10:2b:
                    08:45:d7:99:f8:18:ae:49:0f:c0:d3:36:ee:63:39:
                    d1:4a:85:f5:1b:bf:fc:e6:0d:02:cb:cf:b8:42:d1:
                    fa:e6:50:2d:88:4d:f8:35:74:a0:13:af:08:26:c9:
                    b0:05:87:6e:00:f4:9e:64:1d:17:46:1c:30:08:e9:
                    95:ca:70:7a:33:8e:9a:bf:69:26:85:35:45:9f:a7:
                    6b:83:2f:82:83:56:15:32:06:d4:da:b8:d2:39:af:
                    26:24:96:c0:a8:6c:00:39:4c:69:b8:60:67:49:ad:
                    b1:e3:a3:4e:d1:24:a7:dd:74:b7:60:ee:b6:7a:1d:
                    2a:60:29:25:ba:d2:1e:04:ab:da:b0:eb:63:6e:c1:
                    9e:68:ea:74:71:29:33:fa:c9:24:45:05:42:79:6e:
                    47:f8:f1:df:b0:e7:bd:30:d5:59:e6:88:e0:ca:37:
                    d6:9f:dc:80:a1:a0:b5:d4:f9:49:74:c1:b4:ee:9e:
                    e7:5d:52:fe:87:f6:e8:07:81:55:39:a0:b9:f4:83:
                    25:cd:72:16:87:20:28:a4:17:6d:87:d2:c5:ed:33:
                    48:fd:c5:1b:5c:36:07:82:71:54:8b:10:fb:ec:9e:
                    37:b2:32:7c:30:33:34:7f:e7:a8:6d:09:f1:10:8a:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A9:5D:02:11:A1:2F:8B:85:A7:30:EB:A8:D6:56:82:BD:C2:38:00
            X509v3 Authority Key Identifier:
                keyid:B7:CC:2D:A2:BD:B9:7B:E9:12:A2:D9:42:EB:E7:EA:FA:46:51:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8wtor25e-kSotlC6-fq-kZR6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ee6c6a-fb55-4dc8-9dcf-22e7a37e8e38/1/t8wtor25e-kSotlC6-fq-kZR6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4d:f1:c9:e8:24:31:8e:7b:25:52:4a:b1:a9:42:2c:5a:c8:
         c8:ce:49:43:d0:89:b2:eb:4b:fb:4a:7e:16:ec:24:a5:9c:d8:
         78:c0:25:13:c3:13:ae:d3:1e:57:ae:68:dc:0c:4c:cb:24:70:
         a0:82:7d:eb:44:18:98:80:ea:03:68:7f:55:36:d3:bc:23:82:
         32:ec:d3:9f:78:ca:11:b6:8d:0c:35:e4:18:29:d7:3e:da:7b:
         3b:f4:2c:87:ce:82:0c:c7:26:ce:e1:18:a4:e8:75:b0:ce:32:
         7e:ee:51:2e:df:23:63:22:a9:e8:7b:01:b9:11:d7:1a:c4:2e:
         e9:a4:e2:3d:0b:7b:94:2e:2f:b7:37:9e:65:26:b1:4a:18:0d:
         d9:11:c8:d7:fb:30:bc:c7:48:4f:80:8f:5d:9e:e5:38:fd:eb:
         34:98:fa:c4:46:28:f3:6e:0a:d4:93:62:57:11:f7:b2:3c:0d:
         9c:96:c4:9e:43:ed:4e:86:96:9c:0e:71:87:60:b8:36:5c:9a:
         c9:f4:d3:09:23:e6:56:31:83:93:bd:34:c3:1c:39:ae:bd:c6:
         0d:bc:00:bd:72:1c:91:69:0f:6c:4f:37:d5:80:65:62:7b:0b:
         0d:82:29:70:68:78:33:52:1c:50:e2:49:64:3c:91:2a:df:16:
         19:5c:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:43 2025 by rpki-client