Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
File:                     ISaWdazvu_hJex4hynN2SvSqjHs.mft (raw, json)
Hash identifier:          8JMtoaI3a2mD8LkHa3d+s6CNycBUQb6UYgKVQcV6450=
Subject key identifier:   F3:C8:55:D1:B7:14:4D:55:54:50:87:5C:3D:B8:82:5E:13:79:DC:69
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Certificate issuer:       /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial:       0198D47359D9D27304D7397BA49007D547AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:03:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:05 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:05 +0000
Files and hashes:         1: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (hash: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=)
                          2: ISaWdazvu_hJex4hynN2SvSqjHs.crl (hash: icqDeHWPjmoojOZJV6hVGXmkKdOZjYrDmU6eNLLkp8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:59:d9:d2:73:04:d7:39:7b:a4:90:07:d5:47:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
        Validity
            Not Before: Aug 23 01:03:05 2025 GMT
            Not After : Aug 24 01:03:05 2025 GMT
        Subject: CN=f3c855d1b7144d555450875c3db8825e1379dc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:37:ae:99:8e:22:89:96:63:43:36:8b:64:
                    d3:9d:b7:cb:0b:ab:3a:68:1b:ee:f0:e0:03:c6:a9:
                    e1:17:4c:b0:db:ef:42:29:f0:30:fe:28:a4:31:b0:
                    0d:10:d2:1e:4e:5a:d5:84:05:16:0f:af:d0:fc:60:
                    9b:24:12:74:04:d2:69:94:ec:e6:02:ea:9f:cf:a6:
                    b8:7a:46:e9:48:6b:b6:5b:cc:3d:bb:35:65:f7:a1:
                    80:08:0c:21:dc:dd:c7:89:9e:4d:f6:98:c7:1b:c1:
                    02:80:dc:c2:4b:13:49:41:0a:91:bf:b0:bc:e0:1c:
                    34:05:bf:ed:e3:e7:92:20:e4:a6:c3:8a:7c:e3:2d:
                    fb:8b:06:99:52:65:ec:3c:3e:3a:73:dc:57:87:3f:
                    47:e2:09:e4:8e:6e:17:e5:a5:76:38:d8:09:75:a4:
                    da:49:7c:60:ba:31:72:76:26:fa:c1:76:f6:f6:8d:
                    1f:ca:83:ca:a7:14:b1:d9:a2:8a:38:27:36:43:19:
                    68:d2:63:8b:a6:90:eb:81:3c:c5:d9:72:c1:ad:4f:
                    07:b0:c9:c4:5f:28:a1:4c:3f:a6:91:ea:c5:18:17:
                    f4:a0:56:d2:f2:de:c9:65:3a:06:65:b8:3a:32:50:
                    75:35:0f:b1:3b:7f:9c:da:b8:e1:80:28:2c:f2:a8:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:55:D1:B7:14:4D:55:54:50:87:5C:3D:B8:82:5E:13:79:DC:69
            X509v3 Authority Key Identifier:
                keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:40:c4:f2:cb:f0:1c:cf:e1:31:7e:33:58:4b:f1:bc:89:
         e1:9f:06:5a:87:d1:2f:12:bc:57:ad:f6:81:f6:86:3d:40:67:
         3e:09:c3:e2:64:79:6f:7c:f2:f2:84:7e:ae:48:63:b3:e2:cc:
         59:c6:f3:73:c9:f5:4c:01:f8:55:bb:bc:eb:58:ac:a6:54:66:
         42:65:53:31:b1:e1:db:97:67:8a:74:ae:8a:dd:d3:38:e7:07:
         c0:5e:ea:a8:b4:b1:55:89:70:ba:f0:60:35:bb:bc:12:cf:8d:
         31:b3:52:77:22:c2:22:1a:bc:5a:2a:0d:d9:aa:0c:9c:76:13:
         07:07:6d:ef:c7:d0:f1:1c:03:b8:49:e1:fd:60:e0:f5:5c:c0:
         11:c2:cc:77:ee:f7:05:e5:2d:37:92:e3:27:1f:fb:37:51:b3:
         9c:54:fd:13:8b:19:b2:6b:64:e1:62:f7:77:e2:a3:18:a2:c3:
         fd:4f:41:5b:4e:ef:68:b9:26:18:81:2d:3b:e6:e7:4e:fd:d3:
         a1:aa:42:26:7e:e7:6b:8c:37:b4:34:42:ac:9d:64:9e:06:ff:
         bb:11:cc:a6:cf:91:90:82:e4:e4:bd:bd:5e:19:cf:21:4c:b5:
         98:fc:d9:ea:40:26:56:83:a9:70:3f:5d:a8:88:e1:49:ef:00:
         3b:d4:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:11 2025 by rpki-client