Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          uZPo6pmiqGuDxFoymKX0wh7LEz9oDU6guqurRHjj170=
Subject key identifier:   94:B4:C0:A2:92:FC:79:DC:BA:2E:59:1E:E4:D0:33:FC:59:35:71:2D
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       0198801DBD6B668265D3040B9100CEC793E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          1626
Signing time:             Wed 06 Aug 2025 16:01:29 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:29 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:29 +0000
Files and hashes:         1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
                          2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: rigLnwyqIXzASCkDB7JgICwBnAGJhIYP3vIeWuSLvuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:bd:6b:66:82:65:d3:04:0b:91:00:ce:c7:93:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Aug  6 16:01:29 2025 GMT
            Not After : Aug  7 16:01:29 2025 GMT
        Subject: CN=94b4c0a292fc79dcba2e591ee4d033fc5935712d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:93:82:d8:dc:f9:f8:ac:9a:a6:40:97:ab:
                    7c:e2:a8:8b:e2:96:21:46:a3:33:cc:63:01:52:d6:
                    fb:3d:69:35:e8:1a:00:7b:94:3d:a3:61:d0:11:24:
                    89:52:19:6a:34:50:1c:d7:5f:25:73:4b:c9:48:9e:
                    e9:b5:c8:53:25:ac:39:99:8b:3d:a1:ea:73:1b:62:
                    4b:fd:a7:d4:51:85:6b:5c:7e:d8:ee:74:55:26:00:
                    c1:82:d0:15:8d:f7:3f:cd:09:02:cd:e6:ac:2e:50:
                    12:55:01:a6:91:ab:6d:8c:85:6f:6f:c0:55:2c:fc:
                    97:fa:46:e6:f0:d3:3a:5b:b3:a5:fa:ea:74:7c:4c:
                    2e:3a:ae:b4:42:fc:93:06:4c:f1:79:1a:bd:fd:2d:
                    47:d1:e6:ed:74:15:cb:ef:69:ad:8b:65:ba:0f:59:
                    89:65:4e:97:65:4f:4a:1c:22:ca:5e:28:44:b8:5b:
                    e9:96:64:7e:73:c3:3f:50:19:ca:24:a6:78:87:a5:
                    3f:78:40:c0:15:6f:1d:c9:c0:0e:07:a3:9e:42:0b:
                    79:d0:79:26:7c:21:46:5d:15:71:01:e7:63:3d:5f:
                    49:02:ce:9e:0d:8e:1e:07:97:63:32:98:e1:d9:1b:
                    28:5d:88:a4:d6:4a:06:04:55:dc:26:c1:cc:9d:1d:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B4:C0:A2:92:FC:79:DC:BA:2E:59:1E:E4:D0:33:FC:59:35:71:2D
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:9f:eb:83:5a:88:5e:67:20:66:84:e7:97:f1:f3:cc:66:
         76:27:f2:e2:0d:51:9f:d6:37:71:36:f6:8c:86:d8:bb:50:23:
         45:6d:75:ac:99:67:c6:2f:af:f3:b6:94:cb:f1:26:54:00:cc:
         44:56:29:2d:b4:1d:02:34:32:be:95:5a:3a:68:62:eb:48:cd:
         d1:6b:c9:37:17:48:3c:d6:05:9d:9d:2e:0e:9a:15:e6:59:31:
         d9:39:ea:ba:bb:b9:0e:a9:29:7e:8b:8b:c6:0b:ed:1c:cd:2f:
         70:94:b1:e2:85:c2:76:dd:e3:af:f1:52:f1:b3:ad:09:f1:49:
         b9:00:29:c8:01:84:d1:46:77:b2:98:15:14:57:93:70:49:49:
         6c:59:36:62:cf:e3:07:ba:e0:5a:af:a1:1c:7b:c7:2f:5d:a1:
         4a:6d:73:f7:31:0b:6e:3d:ad:fc:e9:33:5c:af:3e:bd:92:06:
         46:00:dc:1e:82:4e:5b:4e:e7:02:03:88:37:87:c7:4b:0d:85:
         04:04:4d:aa:6c:1b:c5:2c:9b:4c:7b:14:ba:e5:59:f3:36:7c:
         a7:66:76:66:7b:f0:dd:3c:45:ab:94:84:47:fb:a1:6f:c9:8c:
         19:dc:67:e2:b5:db:6f:78:06:89:62:d6:b3:ac:71:cf:06:2c:
         3a:a6:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:15 2025 by rpki-client