Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File:                     1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier:          +ooQJDcqaJ2n5EcRv2PHmKNN+HS14z1Mxqogo0cKTkI=
Subject key identifier:   93:5C:B3:41:95:4A:55:38:F1:21:BB:EC:9F:6B:EB:3F:60:DE:A3:CE
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       01988F5934FC084D4EA456DC09F25412BE9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number:          1629
Signing time:             Sat 09 Aug 2025 15:00:44 +0000
Manifest this update:     Sat 09 Aug 2025 15:00:44 +0000
Manifest next update:     Sun 10 Aug 2025 15:00:44 +0000
Files and hashes:         1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: z6VJtiC0RSoAmvR+8UzG4KWnlro4hJ+8NS2wyvgjpjw=)
                          2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
                          3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
                          4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
                          5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
                          6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
                          7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
                          8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:59:34:fc:08:4d:4e:a4:56:dc:09:f2:54:12:be:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: Aug  9 15:00:44 2025 GMT
            Not After : Aug 10 15:00:44 2025 GMT
        Subject: CN=935cb341954a5538f121bbec9f6beb3f60dea3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:5c:d5:00:c2:3a:f3:eb:53:af:f5:48:33:
                    f9:7d:f4:e6:c4:bd:cd:61:4b:51:df:e6:8b:b0:80:
                    01:c5:1f:fd:7f:83:b2:2b:b0:22:c3:1b:bf:13:27:
                    53:f8:9c:43:75:79:52:f9:85:48:00:45:1f:9b:5b:
                    48:ca:50:ee:43:3d:f9:c7:a1:f7:07:d4:74:88:c3:
                    39:e5:6a:cd:a8:f9:78:45:1f:a3:2e:05:d0:51:bf:
                    71:7e:93:fa:74:ac:85:51:45:51:cb:7a:a5:9e:34:
                    ca:19:f7:0e:3b:27:d3:f7:7b:33:d7:9a:eb:57:c9:
                    71:97:40:a2:9a:77:40:9a:18:93:16:44:fe:dc:8d:
                    0d:22:7a:84:fe:91:43:c0:10:65:04:88:47:b5:ef:
                    25:5e:d6:62:6a:00:4d:c2:8a:4c:6b:34:61:ed:f9:
                    46:5e:93:12:f3:36:62:ae:63:29:b2:7f:73:ea:17:
                    fb:5e:cf:51:4b:60:d8:5a:ce:41:4a:02:fb:ba:85:
                    7f:98:c4:fc:bc:be:2a:ef:a9:6e:a0:07:1e:19:ed:
                    af:d9:fa:71:2c:f5:b7:2c:9d:22:6c:e9:b1:9d:a6:
                    78:69:90:da:1e:58:a8:03:17:88:c3:0f:d9:72:43:
                    fe:b4:66:60:05:2f:d9:5f:b1:fa:a6:60:6b:e5:d5:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5C:B3:41:95:4A:55:38:F1:21:BB:EC:9F:6B:EB:3F:60:DE:A3:CE
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:0c:15:e3:b0:7e:f5:51:a6:29:d9:5d:a0:b6:cd:12:4e:
         4e:cc:f5:77:17:73:4e:3e:07:18:eb:00:19:bd:c8:c4:cb:40:
         b4:9e:f0:a2:e8:79:a6:8e:d6:1c:3d:3b:5f:14:67:d3:ce:b1:
         f1:a7:1d:51:f9:df:15:b8:a9:b1:91:19:3e:af:93:14:75:80:
         e2:71:7f:ff:3d:db:50:6a:d0:60:2a:72:6b:02:6a:0b:e0:47:
         4b:c6:ee:6e:99:eb:66:e7:e8:89:67:bd:68:3b:40:1c:66:65:
         b6:e8:7b:22:25:58:cd:34:d3:08:1c:05:b0:4e:43:02:e8:2a:
         b0:de:5c:e0:76:77:27:8e:9a:71:1d:6e:ce:1b:a5:1a:c2:ef:
         9b:c9:79:4c:46:a5:59:49:64:1b:27:0b:3d:45:ba:95:36:03:
         2e:58:60:61:7a:29:7d:79:2a:2d:9f:5e:e9:ab:42:89:8a:5c:
         4c:82:3d:43:31:4f:a3:f9:a8:af:49:13:74:8a:7a:a7:76:ed:
         d7:ca:fc:3e:a6:82:9e:19:2c:47:7f:65:b3:e4:2f:23:9c:fc:
         fe:e4:ae:6b:16:c3:27:76:0c:20:95:65:82:95:97:ba:89:f1:
         18:c1:db:e5:45:7a:69:30:2f:7a:50:90:0a:65:07:a1:c3:cd:
         4f:1b:ae:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:59 2025 by rpki-client