Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File:                     x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier:          G+hFGFqRqRUKk6j3/N1NfEtrB4tKDyIJo8jg3G4ya80=
Subject key identifier:   1E:85:5E:C9:43:E7:63:AF:A5:4D:37:43:35:87:10:47:3F:EC:C7:A8
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer:       /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial:       019889575016015FC50AFF026AF2E000B3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 11:00:57 +0000
Manifest this update:     Fri 08 Aug 2025 11:00:57 +0000
Manifest next update:     Sat 09 Aug 2025 11:00:57 +0000
Files and hashes:         1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
                          2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: 4HUOq0k2dBGdHd0DP+1/mvQOJzC9h1VV1HSShJk9S/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:50:16:01:5f:c5:0a:ff:02:6a:f2:e0:00:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
        Validity
            Not Before: Aug  8 11:00:57 2025 GMT
            Not After : Aug  9 11:00:57 2025 GMT
        Subject: CN=1e855ec943e763afa54d3743358710473fecc7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:03:6e:ff:65:68:49:9d:3d:d7:9f:48:8d:
                    f8:ce:d4:ff:2a:01:1e:db:4e:aa:d4:ff:d8:43:a9:
                    85:b0:e3:0f:37:09:74:5a:88:79:60:d1:29:13:b2:
                    b1:ad:a2:ac:de:6f:cf:e7:b1:ff:36:d1:c8:03:f6:
                    cc:31:3f:07:59:75:52:9d:25:af:1f:6c:99:61:1b:
                    70:66:25:5e:c5:a9:70:5d:e8:3c:9d:90:22:85:38:
                    00:4d:24:1a:62:9e:57:70:e3:85:c4:73:f5:78:a6:
                    25:f4:d8:bf:07:af:d9:3b:aa:97:c8:83:eb:e6:9a:
                    59:30:b8:5a:61:11:8c:fe:5f:2c:aa:50:7c:e4:99:
                    be:e3:08:ab:c0:69:f2:0e:87:60:79:02:98:81:c0:
                    13:51:af:25:60:7a:1d:67:9a:15:95:60:d4:a2:d3:
                    a7:42:88:47:5f:38:ec:54:01:15:de:38:55:57:a5:
                    ac:dd:c7:9c:fc:2f:ff:93:16:93:c6:1a:83:cf:df:
                    e9:94:27:f6:00:75:c9:61:60:db:cc:3e:cd:0e:d8:
                    9f:45:11:c1:35:f5:f0:8f:16:c7:df:ab:bd:22:73:
                    c6:93:ee:8e:f8:a5:35:6d:d8:3f:54:08:93:d8:d1:
                    00:fd:dc:86:4a:93:3f:fb:e3:4d:b0:c0:e4:3d:60:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:85:5E:C9:43:E7:63:AF:A5:4D:37:43:35:87:10:47:3F:EC:C7:A8
            X509v3 Authority Key Identifier:
                keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:44:54:d8:a4:fe:2e:cf:3d:d2:d4:b3:7c:33:16:0f:a7:
         43:38:7b:e9:64:ed:31:52:7b:6b:b2:03:4c:e7:a9:aa:91:3e:
         c8:72:ee:b0:86:1c:a3:54:fd:c7:a9:e1:d0:6b:b6:0d:25:22:
         fc:8f:11:7b:f2:28:0a:e1:32:80:01:10:74:97:9c:16:c2:72:
         9c:39:c7:69:ec:11:0f:f7:1f:38:99:f0:94:7d:c9:51:07:b1:
         b9:52:47:df:f0:94:f7:07:ac:d0:e5:6a:8e:77:3c:29:a3:8f:
         f5:50:a0:40:8d:a4:d7:cf:44:cf:17:b5:d0:25:4e:33:53:b3:
         8e:d8:28:b9:e4:af:ed:28:60:48:55:95:63:4a:40:5c:cc:84:
         5c:92:c0:ab:4f:04:1f:6c:5c:4a:6a:3d:81:8c:60:ea:6e:13:
         85:64:6e:8b:3b:20:53:da:27:ca:4d:e4:39:5c:33:1f:51:1e:
         7a:d9:c4:9a:7d:36:4e:a3:51:10:34:47:51:84:3e:60:00:28:
         b0:e2:99:92:9f:a3:17:51:a8:c7:a1:8a:c3:44:6f:c4:1d:15:
         ce:81:3c:7f:af:a7:47:71:b3:d7:ac:0c:01:7b:6f:02:c5:63:
         e3:7d:8c:51:e4:ac:e1:ef:70:4c:a5:e6:11:db:3c:b8:22:b7:
         fa:2d:13:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:41 2025 by rpki-client