Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          FhPF57av9tEoHgCNO8BL/26X26eB8DjNyRERqovWvUY=
Subject key identifier:   B0:9F:6E:69:3B:4D:F0:A0:B1:6F:44:9C:B6:B6:BE:5B:06:CB:D0:C2
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       0198D4E0860830A6D345F2B8B1858B78FE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          1657
Signing time:             Sat 23 Aug 2025 03:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:20 +0000
Files and hashes:         1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: EotgCJGvFU7F2bi5OGtzD2qlTtcOtV/J6LbCCZPrwWU=)
                          3: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (hash: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=)
                          4: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=)
                          5: _rcbdTd7xszqNhgAb_FkQpQyFAU.roa (hash: tlTacIT/p2BLnUW4V7ZFwYt3E+NE62BrqrDQeWEcWEY=)
                          6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=)
                          7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=)
                          8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=)
                          9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=)
                          10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:86:08:30:a6:d3:45:f2:b8:b1:85:8b:78:fe:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Aug 23 03:02:20 2025 GMT
            Not After : Aug 24 03:02:20 2025 GMT
        Subject: CN=b09f6e693b4df0a0b16f449cb6b6be5b06cbd0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:87:3f:68:66:85:c4:15:e7:46:da:be:d9:
                    ae:4d:9c:11:ff:90:9b:83:ee:a7:90:fc:c3:cc:3e:
                    c0:eb:f4:f6:b7:a0:35:9d:ae:52:69:17:a9:85:db:
                    3e:88:a9:c1:41:fb:c7:8a:5f:19:cc:c4:37:b1:50:
                    86:cc:e1:22:50:0c:46:b3:d9:6f:70:a2:6c:ac:f7:
                    c1:0c:57:f7:cc:e9:d2:df:6c:68:2e:85:fa:26:70:
                    d3:86:2c:f3:93:5a:5c:30:7d:38:c1:a9:f9:20:b7:
                    7b:ad:ad:ea:75:fd:3c:44:3f:91:42:09:32:34:ac:
                    03:e4:fb:78:78:fb:ec:cb:c5:33:be:d9:e5:31:3b:
                    b0:99:94:c4:6d:67:86:27:ad:57:e3:15:7b:ba:2e:
                    c8:0d:2b:58:f8:60:23:a2:75:91:72:e0:ef:cf:a3:
                    f9:fa:66:f5:5c:f3:a3:10:b8:31:0e:46:49:5a:c8:
                    df:85:a0:bd:06:1b:8c:24:e5:1c:ee:1f:06:71:4a:
                    5e:03:2b:bc:96:59:e5:b8:68:74:89:73:3c:75:dc:
                    92:1c:af:ad:e8:1a:61:fb:7b:58:eb:ac:6d:26:3a:
                    c1:07:88:01:e3:87:e4:ed:ff:1d:75:f7:fc:00:40:
                    5e:a1:37:76:ef:59:c3:20:59:b0:08:44:e5:e2:01:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:6E:69:3B:4D:F0:A0:B1:6F:44:9C:B6:B6:BE:5B:06:CB:D0:C2
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a9:3d:81:36:19:78:e0:63:d3:03:f6:33:83:7a:3d:dc:75:
         5c:bd:d0:cf:ac:c7:6d:ef:46:12:fe:a6:ce:cd:58:cd:fe:b8:
         ba:0d:29:78:10:a6:7e:54:5e:28:e2:5d:b0:ff:7e:b6:e9:0a:
         ef:39:0f:82:ac:92:03:98:90:a4:bf:2a:bf:4f:b4:fb:75:95:
         d1:8d:35:72:0d:43:44:2d:88:b0:7a:b0:47:d4:cc:5c:f9:28:
         d9:94:1f:9c:47:59:f2:63:30:db:31:8e:b2:f5:ae:de:5b:fb:
         09:25:89:54:42:18:49:0b:eb:83:74:13:f1:60:98:f5:a2:d7:
         5b:a0:45:f9:b8:40:68:5b:ea:25:cb:60:24:13:71:aa:1f:1c:
         17:c3:e8:36:85:96:dd:fe:07:35:7b:14:36:39:82:9d:22:dd:
         e0:84:a2:f0:63:b4:1a:30:fa:03:1c:dc:ca:80:23:88:34:51:
         0a:94:c0:ec:6d:94:27:c8:20:d1:5e:14:f0:b0:13:11:07:29:
         85:01:46:0e:d8:48:dc:ea:3e:37:7c:54:6f:53:1f:7f:7e:21:
         f8:4f:4f:5f:cb:2a:c1:ab:44:cd:d1:89:1d:d7:8f:3f:70:0a:
         65:d2:e5:15:c5:8b:5a:a6:2d:1e:30:62:2b:f1:e8:1c:b1:72:
         79:0e:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:46 2025 by rpki-client