Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          Fiwbwyb50S3fpXIMgArtITzLIosQ4971n0g+KLLjuHs=
Subject key identifier:   BC:8D:16:8D:86:25:EF:14:1F:79:74:AE:32:8D:1B:88:DD:E5:0A:45
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       0198D5BBE3323910F4B61B16A0E319A606B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1663
Signing time:             Sat 23 Aug 2025 07:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:57 +0000
Files and hashes:         1: 1-I9wvebt-1hzIuhIUJLkLhuxDRI.roa (hash: gNrZtA31MPSmjg4FiPE11kRYzRt9vM98Sugau6QnufE=)
                          2: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=)
                          4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: HFnz4n2szpFWaqznJRnyZetxgaP4Xe+RawjaC3csSXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e3:32:39:10:f4:b6:1b:16:a0:e3:19:a6:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Aug 23 07:01:57 2025 GMT
            Not After : Aug 24 07:01:57 2025 GMT
        Subject: CN=bc8d168d8625ef141f7974ae328d1b88dde50a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:3b:0a:26:57:ff:79:4b:0e:40:6d:9c:c7:
                    03:82:cf:e6:6a:38:ea:b3:06:c8:e9:3b:65:f9:57:
                    5f:84:b2:2a:94:65:9f:7c:5d:9a:5a:82:b9:7e:ed:
                    a0:a4:ae:3e:53:fd:1d:99:38:7b:3e:a9:96:d3:95:
                    8c:bc:13:56:b7:fa:37:bb:73:3d:15:b6:f5:d5:a1:
                    3a:fc:d8:56:76:a7:89:2f:7b:39:60:7c:72:41:45:
                    c5:bc:6c:2c:1e:34:62:34:2e:bb:19:5a:63:69:9b:
                    37:d3:ab:8f:82:e4:65:72:4d:9f:b1:e3:4b:8b:cf:
                    2d:a6:e4:ce:3d:9e:62:c0:7f:bd:5e:f1:53:88:28:
                    80:8b:b7:50:6c:4c:28:99:67:01:0c:65:94:ab:ff:
                    42:bc:27:ff:b0:03:eb:c4:8c:b8:6f:a8:58:7a:fc:
                    86:8e:d3:54:a5:22:a8:66:f7:d8:e1:1b:e7:3b:78:
                    39:5f:69:ab:d3:a6:3c:33:64:e6:3c:1c:fb:2a:00:
                    f9:54:ba:30:ab:79:f9:15:8f:3f:d1:b2:8f:cb:de:
                    5e:d9:a7:1e:b5:2a:7b:8f:16:4b:ca:fc:79:a1:c5:
                    35:9d:09:1e:c8:eb:f2:fe:d0:4d:21:00:5d:af:fe:
                    70:94:9a:54:46:08:69:61:50:c1:9f:c5:05:92:63:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:16:8D:86:25:EF:14:1F:79:74:AE:32:8D:1B:88:DD:E5:0A:45
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:77:11:c1:68:37:5e:04:9d:bc:1f:ae:46:53:13:5c:81:
         e2:f8:2b:ce:32:1b:e9:5f:23:cb:9e:39:eb:71:af:89:30:d7:
         2a:99:9c:dd:df:22:cd:5b:2c:18:7d:72:8a:53:3c:d6:f3:44:
         d7:3a:da:4f:6b:f7:f9:79:17:62:bd:4a:0e:e8:f2:d7:02:2e:
         12:93:85:87:b7:cd:c4:7c:7f:b4:62:4f:c3:0f:ba:9b:41:88:
         87:76:c4:ed:a9:10:1d:45:86:2e:b2:04:86:1c:15:da:db:17:
         06:79:11:42:68:1e:d3:9c:3a:3b:6f:bb:a6:cc:ce:ef:21:0d:
         1e:2b:a3:e7:ec:d9:3b:f8:79:8e:92:de:29:17:9b:61:eb:c8:
         39:f7:4b:ff:56:73:49:ab:27:01:56:5d:a7:be:1e:33:2e:80:
         97:70:a2:ae:69:c2:a4:a9:22:d2:48:43:ff:0f:02:3b:e5:06:
         2b:b6:fb:e4:18:a9:0e:84:45:9a:78:3b:ef:ef:f8:5a:59:62:
         d3:19:b0:2d:91:90:e4:98:b7:c5:32:8a:fc:27:d6:98:a6:81:
         9a:a7:dd:ba:de:6a:ff:0e:5e:22:1e:af:b4:b6:8c:20:54:8e:
         31:0c:86:9b:49:5a:a1:eb:f9:a3:ed:b8:41:f5:63:e5:1e:90:
         d2:3d:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:00 2025 by rpki-client