Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          Xj9eMBN9y2GXjE33GTZuvdPEE22LF45ZjkhHGQEfeYU=
Subject key identifier:   C7:A2:C5:E2:16:3F:35:05:C5:48:34:F7:98:63:B2:D9:B9:32:89:A5
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       019885E8C8739C23857AB78F9032FA0E37E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          1628
Signing time:             Thu 07 Aug 2025 19:01:21 +0000
Manifest this update:     Thu 07 Aug 2025 19:01:21 +0000
Manifest next update:     Fri 08 Aug 2025 19:01:21 +0000
Files and hashes:         1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
                          2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
                          3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: Al96lbskOC58PSQCY4RarRIuE//rMPRkPKC0PsHyfyQ=)
                          4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
                          5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:e8:c8:73:9c:23:85:7a:b7:8f:90:32:fa:0e:37:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: Aug  7 19:01:21 2025 GMT
            Not After : Aug  8 19:01:21 2025 GMT
        Subject: CN=c7a2c5e2163f3505c54834f79863b2d9b93289a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:f5:64:cf:b2:8b:7f:b0:f5:59:1b:24:0f:
                    13:6c:5f:1e:3a:e1:f2:83:99:41:32:ed:1d:e7:82:
                    ec:fe:f9:e1:fc:ab:57:b7:1a:04:31:2c:45:73:9d:
                    a0:47:68:0d:f6:d1:e8:21:99:f8:7d:5c:94:01:35:
                    e5:86:55:cc:6c:84:5f:01:ff:44:f3:de:10:f4:6c:
                    77:7b:9f:31:b2:97:cf:72:66:be:a1:64:16:77:b0:
                    78:0b:db:4c:6f:27:be:9f:df:b3:d4:0f:49:6e:e5:
                    49:06:4c:cc:e0:33:c7:5d:b0:a0:ed:6d:09:7f:07:
                    dc:d7:b7:06:f9:3f:41:15:9f:ee:38:05:72:6c:55:
                    d7:db:f0:f4:50:2e:ba:ec:fe:91:47:d5:78:90:a2:
                    aa:52:75:77:ac:7a:56:1c:60:ca:92:1d:df:54:b7:
                    a7:d8:bf:68:7e:1f:d8:a7:5c:71:3c:6b:45:03:03:
                    b8:e8:c9:68:d1:38:e8:f7:b6:6a:bc:74:41:77:ce:
                    08:a4:1c:ba:e7:f7:15:22:b1:e0:a8:79:a9:88:55:
                    26:15:28:10:63:57:b3:97:23:d6:22:f8:2d:16:05:
                    65:7d:05:3a:4f:ee:4b:25:10:ed:7d:e7:ec:1f:a2:
                    f0:e2:ff:ec:b9:3c:c3:18:08:29:8d:63:c3:ca:e0:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A2:C5:E2:16:3F:35:05:C5:48:34:F7:98:63:B2:D9:B9:32:89:A5
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:1b:0c:71:47:61:a2:c3:1e:a0:a5:54:2b:bf:85:75:1c:
         f5:c1:61:84:ed:5a:94:11:d5:84:72:2f:a9:9b:12:3f:81:29:
         33:40:ef:53:e8:c7:a1:15:a8:c0:d0:82:f5:3b:31:d6:69:b9:
         df:54:28:36:6d:e9:5e:ae:93:61:b5:93:fb:d3:9a:77:08:e8:
         63:5b:88:7c:c4:01:25:93:54:ac:4a:1b:6c:5e:d1:09:1c:5c:
         0c:65:15:e5:92:16:a1:61:de:9f:46:3d:a4:c1:b3:b3:39:34:
         e1:0a:78:17:22:77:6e:ae:62:e8:03:2c:e9:67:25:40:63:a5:
         ca:c3:d4:e1:17:3b:99:79:3d:73:6d:90:59:5b:24:e0:db:94:
         66:85:d1:d6:2a:cf:9d:38:dd:68:48:55:1c:9f:41:87:9a:81:
         62:4e:f0:f4:b4:61:ad:f7:8b:f6:7f:10:28:14:ee:e5:89:e5:
         bb:3a:5a:62:2f:de:48:df:37:9f:5b:7f:10:3e:e1:a5:a1:1f:
         49:28:0b:be:cd:26:5f:2c:0f:a2:11:42:3f:86:30:b3:df:2b:
         6c:06:fa:61:ba:c1:47:f8:c9:14:da:f8:7c:9a:1d:9e:7d:77:
         15:6a:f6:68:27:ef:d5:b9:55:d4:4c:6b:30:f2:01:2b:0e:c1:
         65:41:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:50 2025 by rpki-client