Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          ZMm4oSoeZCHVFp8V+pasVCfNTTV8WnYRBm0yS6WRsvM=
Subject key identifier:   65:7D:EC:F5:47:C1:9A:02:BF:72:0F:A1:B2:9A:D4:17:E7:C2:82:47
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       01987F786A3A177593E108D7ED0D3F04F425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          15DE
Signing time:             Wed 06 Aug 2025 13:00:54 +0000
Manifest this update:     Wed 06 Aug 2025 13:00:54 +0000
Manifest next update:     Thu 07 Aug 2025 13:00:54 +0000
Files and hashes:         1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
                          2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
                          3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
                          4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
                          5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
                          6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: 8KCN3SEMCD1sKZgSK9QsFd2gGNmMxBTrLdDCsicOTCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:6a:3a:17:75:93:e1:08:d7:ed:0d:3f:04:f4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Aug  6 13:00:54 2025 GMT
            Not After : Aug  7 13:00:54 2025 GMT
        Subject: CN=657decf547c19a02bf720fa1b29ad417e7c28247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:85:ce:5d:22:ba:33:fa:01:d0:cc:90:c0:
                    e2:10:43:05:f4:98:ea:fc:cb:17:c5:8d:d0:60:60:
                    cb:dc:25:e0:1f:4c:e8:bb:17:1a:25:7b:e1:61:1b:
                    24:38:e3:6c:8c:5d:c5:5e:e0:4b:48:b4:65:d6:2f:
                    5f:a8:e8:c3:41:08:9d:17:41:f2:9f:29:3d:8a:f3:
                    88:86:f0:e5:f7:e2:d0:29:2a:04:18:68:ef:88:b7:
                    4a:e7:96:92:67:84:19:94:a1:37:b3:d0:eb:98:97:
                    28:0b:6d:b8:64:1a:a0:74:90:ef:70:0f:d1:82:d2:
                    11:67:cf:6e:56:96:04:ff:a1:b7:10:f7:ef:79:4e:
                    04:44:24:b2:f5:56:ae:de:c2:80:d9:24:0c:50:00:
                    75:30:29:7e:83:8a:41:dc:20:94:d1:8e:0a:04:5d:
                    a0:71:63:df:e3:57:71:2c:70:e0:d5:53:2e:95:07:
                    11:d6:9f:4a:08:40:c3:6e:96:e8:72:89:c8:74:08:
                    04:a8:35:52:e5:dd:d0:e2:0e:27:23:13:d8:94:dd:
                    fc:bd:8c:c0:c1:19:bf:7d:4b:5d:e9:27:18:81:0d:
                    9a:69:33:e0:a6:a7:18:8c:c8:04:8a:bb:58:d1:78:
                    ee:98:61:ea:5f:24:ce:c0:33:43:5b:00:ea:57:73:
                    7b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:EC:F5:47:C1:9A:02:BF:72:0F:A1:B2:9A:D4:17:E7:C2:82:47
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:8a:5c:84:7b:2c:f7:76:b9:8a:e6:a3:c0:d6:ec:74:f0:
         a9:9e:19:9f:12:ff:a1:94:50:bb:7c:a4:94:57:87:eb:e2:5b:
         7d:e9:2e:c1:8c:19:c6:37:65:75:70:f3:ce:0f:6d:93:8c:e9:
         0c:5d:72:34:26:48:92:77:9d:41:65:dc:4b:76:c1:d5:a2:db:
         22:2e:87:b0:9c:4e:94:7e:18:62:fe:22:2f:95:04:6e:b9:12:
         77:4e:e3:48:5f:a7:da:47:e6:be:e5:fa:cf:7e:83:3a:2b:e5:
         82:95:6b:71:58:b3:fc:94:35:0f:87:8e:49:7a:8a:4f:0b:6a:
         76:3b:db:a8:c5:8e:49:37:34:c4:6e:1f:e5:ba:35:66:02:f5:
         bd:92:4f:00:1b:4f:a7:c4:0a:5e:92:e5:95:ad:59:2a:f9:b5:
         9f:d3:71:67:63:a1:bb:36:85:a9:78:46:2b:aa:ad:ab:12:df:
         47:c5:23:cc:56:de:b1:1a:d6:62:64:64:a9:c2:82:f5:ba:db:
         ed:78:cd:16:d5:36:86:d4:14:4b:60:53:a9:9a:b8:8c:97:f5:
         31:42:bb:be:ba:9f:60:07:58:9f:d2:cb:2d:29:d7:4c:56:40:
         26:38:6b:16:99:17:41:f1:82:12:69:d0:f7:88:4a:6a:0b:8e:
         6c:9d:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:40:25 2025 by rpki-client