Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          x/QDklddT1U82HubdQ1vAmlYYEavmAkMcwTgzieNWPE=
Subject key identifier:   6B:E1:28:71:F5:38:09:74:87:1B:63:8B:D7:B9:77:B3:A0:42:7A:93
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       01987418B5E49D1430DBA70042B352D87A52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 08:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:33 +0000
Files and hashes:         1: 0mHHxrKDuXooxqRJqM3AcObFutU.roa (hash: 0sIJmx7yyuOdBXcmte6YeWeL6TZg8JAjxBTze6wfptI=)
                          2: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: qonAwlQT4gD8DmawEpHv6gNpWc/MgslmFaXU2Xz0l1M=)
                          3: 7CJziOdAfq9jwl7KYFdQlPSS2HM.roa (hash: oYgf2+8vVMNQWr/UIAh3TmOHiKE3yvmzUsWvpHQBY4E=)
                          4: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (hash: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=)
                          5: NKe-wrE2WicgBb0c0Ud-bVOtGPw.roa (hash: gADDqpEfldBNZqdg/FkPxqfMdnRA+6kZ643uxJ4620k=)
                          6: dV3eLvyh7dkJSKTfdErtuw7Jadc.roa (hash: NpVV1N+SDAUUoPHhUF4/SnqeySzcrRHlw0l3druFyDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:b5:e4:9d:14:30:db:a7:00:42:b3:52:d8:7a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Aug  4 08:00:33 2025 GMT
            Not After : Aug  5 08:00:33 2025 GMT
        Subject: CN=6be12871f5380974871b638bd7b977b3a0427a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:2f:b9:be:d4:a2:ef:91:2b:12:f3:d9:69:
                    f2:00:06:e4:86:de:6b:d6:b3:51:da:aa:fd:c8:6a:
                    ae:6c:74:d7:38:24:a3:30:8f:1c:0c:fa:93:3c:aa:
                    b7:cb:f5:e1:10:46:b4:9a:55:ab:6f:26:29:98:d5:
                    6f:bb:eb:19:56:65:e3:9f:97:74:2e:00:f3:f9:97:
                    b7:76:68:d2:d9:36:c3:17:14:01:f5:15:68:e6:c7:
                    a2:b6:59:80:08:b6:96:6a:3a:68:e0:5b:b5:ad:80:
                    76:4e:3c:28:2c:4b:fa:17:e0:3e:99:b5:8d:18:db:
                    44:09:0b:99:ff:09:96:d1:2d:02:d5:85:79:03:6d:
                    dd:c7:b6:ff:7d:b6:f1:ff:40:2a:64:8a:fa:e4:96:
                    6d:2b:bd:81:e0:6b:89:9c:3f:3d:47:81:c7:02:6f:
                    9e:72:80:36:b6:65:d2:ad:d3:9e:a1:ec:f6:69:75:
                    ac:c2:fc:45:ba:27:5c:81:98:03:f4:d8:29:55:0c:
                    2a:91:81:b9:b6:e1:cb:25:6e:10:c3:6f:49:72:27:
                    60:5f:d1:6a:2f:43:01:64:c6:06:c1:df:07:45:76:
                    eb:a3:89:66:65:57:66:a7:5a:dd:bd:51:ec:d7:0d:
                    ee:39:0c:86:3b:5e:80:7c:93:e1:0d:c6:8b:6a:2f:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E1:28:71:F5:38:09:74:87:1B:63:8B:D7:B9:77:B3:A0:42:7A:93
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:91:79:e8:dc:5d:80:36:9a:fb:d4:43:e5:84:c9:ec:96:
         55:5b:c5:e7:09:a4:98:b4:6d:af:61:ab:d5:91:7e:87:de:15:
         cd:6f:e0:5e:03:c5:61:de:e0:82:09:14:d5:76:51:0c:e6:af:
         31:9c:b0:b7:a2:00:2e:d9:56:06:93:92:3a:48:7e:a4:27:32:
         24:f3:57:62:4a:38:5a:6e:bf:6e:b1:a0:b2:e3:83:b4:99:5c:
         66:9a:ee:10:5b:e7:bc:d2:e3:64:20:5c:c8:c6:56:c8:da:e7:
         e1:2c:1a:6a:4f:ce:24:58:af:9b:52:10:20:94:4e:b6:a8:69:
         7d:ca:5a:48:de:e5:bd:f3:cd:53:5b:7b:f7:43:9b:19:ae:3a:
         35:44:c3:2d:46:83:e9:12:7c:d3:54:bf:e0:3c:03:43:27:c7:
         05:48:57:da:00:ce:0f:83:74:4f:53:54:f5:cf:0d:48:5b:e9:
         a7:05:69:94:f8:59:f5:04:80:e2:a3:a4:56:2f:7b:82:03:3e:
         75:2c:2d:31:6f:74:5c:74:8d:32:fb:d0:a2:06:a6:88:53:7d:
         cc:37:28:aa:7e:2b:59:dc:82:9f:1d:0e:6f:0f:68:53:22:cb:
         7b:b5:4c:e5:3a:b0:f0:83:75:73:6e:ba:1a:dd:b6:22:68:df:
         8b:46:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:21 2025 by rpki-client