Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File:                     iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier:          tzQDdvJF/4VAhD0fHuVgSN1WxwaF9OJton6uAkxn8E0=
Subject key identifier:   17:BF:E8:97:B6:87:F7:D2:AB:E4:81:59:E8:CA:82:02:42:69:0B:FC
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer:       /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial:       0198854573DE9C0B685858F2EB75764B7801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number:          1419
Signing time:             Thu 07 Aug 2025 16:02:57 +0000
Manifest this update:     Thu 07 Aug 2025 16:02:57 +0000
Manifest next update:     Fri 08 Aug 2025 16:02:57 +0000
Files and hashes:         1: 6AEXqJrMJ67ncmhnndvd75SrSyg.roa (hash: Vpwdh2vzkXQRXOfHiYjeTxknAYqtCJS9VKIuqpezM1Y=)
                          2: IWpRna9rHykplJp5-63YEmNMCDQ.roa (hash: AJVL1Z40yI/YxBI0chOyVgvXJNOilrGNQaXjuuOSUSU=)
                          3: UaW5cje9IOoHcfDyuCGZzyKjxsg.roa (hash: eWTiCLy2U8ygIrpQkkyJPIkUPCAig5oZ73DVp+CRLU4=)
                          4: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (hash: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=)
                          5: fpgWctlYfhtD2b7JhJTvSCLJrDs.roa (hash: UKi88JiqiGZ0MEK9MPejZczXJ9M9BqXZg22tRSLdK14=)
                          6: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=)
                          7: iGdbx3ZhGf3XamrGJudCQfeeFHI.roa (hash: cjZ96HG3dU9X2ePEMCobgvCGwz4TbabPJsr998TZBVs=)
                          8: iGvmnlEybF4oQVoveUq6wZ1Izhs.roa (hash: zF++qLPCOAv+/J4GPZIB0BB6EA+e4U9hqJN0gAb4Iqg=)
                          9: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: 9MbO3qH36Nz7bbHMQ6kMt8U45ctUQ7+70oyM8Rh4k8U=)
                          10: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:45:73:de:9c:0b:68:58:58:f2:eb:75:76:4b:78:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
        Validity
            Not Before: Aug  7 16:02:57 2025 GMT
            Not After : Aug  8 16:02:57 2025 GMT
        Subject: CN=17bfe897b687f7d2abe48159e8ca820242690bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:89:5d:60:69:eb:b9:e7:18:84:8d:db:5c:
                    89:38:44:fc:02:86:01:ff:d9:08:ff:0c:6a:6e:c9:
                    16:24:fc:da:0e:0d:3a:8e:a3:ea:60:8c:54:29:b6:
                    f4:c6:11:d9:ff:4f:27:c6:59:52:54:1f:cc:7b:c7:
                    5e:9f:0d:81:cc:4e:c7:bf:00:24:15:34:1e:19:69:
                    1a:af:a1:a1:a9:88:6d:d9:c2:46:18:21:c4:64:7e:
                    d6:b0:d0:e8:9d:8c:d2:72:d7:aa:d6:d6:a5:23:2d:
                    b2:06:35:40:6c:da:b6:63:34:55:23:f5:c8:3c:e5:
                    06:e4:68:56:9e:ce:49:4d:9f:f1:0e:57:47:a3:29:
                    57:71:b1:e1:ae:b2:34:4d:74:85:bc:f1:1d:37:03:
                    07:66:97:d2:ee:91:2b:89:89:dc:18:1c:c7:e1:90:
                    a8:47:32:eb:47:b6:12:4b:ee:5b:0d:3c:75:df:ae:
                    db:fa:36:7a:66:c2:cc:e3:24:5a:17:20:45:6a:10:
                    67:2a:3d:b5:9c:db:ad:64:6a:e8:11:ef:dc:c3:33:
                    1c:da:26:9e:47:f1:77:13:84:8c:11:af:fd:57:db:
                    25:bf:d5:9f:9b:e8:7f:e5:fa:cf:31:b7:04:e4:ab:
                    dd:e6:2b:6c:da:19:d5:b9:c4:83:14:3e:69:91:4c:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BF:E8:97:B6:87:F7:D2:AB:E4:81:59:E8:CA:82:02:42:69:0B:FC
            X509v3 Authority Key Identifier:
                keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:b6:01:39:a8:37:60:01:45:cc:77:b3:fb:18:54:0f:9c:
         07:f4:a7:4a:bd:6c:bb:2d:64:ad:45:81:72:72:19:a9:5a:4d:
         69:75:1c:8f:89:7f:46:6a:7c:c8:44:87:d5:88:60:61:ca:ec:
         ac:bc:a7:95:14:a9:32:71:a8:27:d0:11:de:0a:28:94:45:30:
         cc:3a:42:86:d4:d8:df:3f:8f:d6:61:5c:19:03:92:88:80:68:
         c4:42:62:49:28:57:1c:6c:45:0e:71:3f:15:2d:0f:de:c0:68:
         1c:59:12:cd:1b:6f:b7:e9:6f:3d:ff:b2:da:09:03:48:f7:c6:
         4b:bd:fe:cc:f5:54:55:88:9f:bf:99:a0:48:f8:e5:b2:f4:3a:
         b2:0d:94:da:90:35:21:b9:1f:5a:12:a7:af:1c:3a:e7:92:2e:
         13:75:e7:f9:63:11:c6:a9:53:df:14:c4:a0:2d:4e:ef:e3:13:
         59:6b:f1:c3:9d:6c:34:8d:d3:21:83:17:91:0d:b8:57:b4:8a:
         73:0b:1e:db:71:9a:90:8b:e0:8f:d4:2e:7b:ca:b1:f7:1e:00:
         51:68:4d:a4:d9:27:79:f7:1b:1f:14:7b:2d:ac:43:12:0a:40:
         33:92:82:09:dd:a5:fb:87:34:63:b4:fd:d6:ba:3b:ab:44:c7:
         b8:0b:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:38 2025 by rpki-client