Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          eWMCMsOcSPk7txwVRS/2+4aGAolXcZ7md8UOsDlRMbw=
Subject key identifier:   FD:C9:E2:EC:BE:00:A1:F4:27:0C:CB:9D:DB:97:78:FC:0A:A1:F7:50
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       01988BEA0AAD535ABB4A0CDED4AC1E2A2A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          1624
Signing time:             Fri 08 Aug 2025 23:00:27 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:27 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:27 +0000
Files and hashes:         1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
                          2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
                          3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: /fkVFvFKkxGp2/YIzaPVfdFV2U7XStk9AC9bHf1mDVo=)
                          4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
                          5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:0a:ad:53:5a:bb:4a:0c:de:d4:ac:1e:2a:2a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Aug  8 23:00:27 2025 GMT
            Not After : Aug  9 23:00:27 2025 GMT
        Subject: CN=fdc9e2ecbe00a1f4270ccb9ddb9778fc0aa1f750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:5a:d3:ab:10:cf:50:66:e1:7a:64:32:ef:
                    d8:d9:48:d4:fa:c5:ec:3c:8d:97:b3:38:95:3d:66:
                    d7:0c:c9:ad:2c:c4:0c:2c:fa:66:c1:bf:88:45:3a:
                    de:01:b4:35:15:be:73:74:f6:f8:3a:b5:8a:9a:5d:
                    91:a0:2b:d1:2d:83:bd:56:a6:be:f7:d6:d5:e8:98:
                    dc:82:b3:22:91:dd:43:53:85:78:83:ac:59:32:06:
                    cc:6f:15:0e:4e:58:f8:e1:12:44:10:9d:45:67:c9:
                    a0:f0:3d:01:11:55:18:21:6d:15:5d:2b:c5:45:12:
                    5c:ea:2e:6b:af:b1:8d:ec:a7:f4:01:0f:a9:9f:59:
                    b2:d6:f8:c6:06:7f:22:f6:9a:d3:63:dd:8f:c2:00:
                    0b:3f:7d:d1:a0:43:e0:e7:21:2f:99:83:04:1e:4b:
                    3e:4f:b3:68:83:ce:f0:f2:a7:8f:15:0f:35:9e:3d:
                    0c:7c:94:82:b7:44:29:f1:81:81:ac:a6:22:91:e2:
                    5a:27:59:48:0d:60:2d:27:2f:f7:24:6c:36:66:9a:
                    8b:3f:dd:5f:cd:d0:1e:bf:e2:a0:d4:c9:58:cd:16:
                    6e:9f:d0:4f:72:00:63:ec:43:71:a4:71:de:21:e6:
                    81:09:30:ea:4d:8f:c3:53:9b:51:62:a6:46:31:90:
                    16:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:E2:EC:BE:00:A1:F4:27:0C:CB:9D:DB:97:78:FC:0A:A1:F7:50
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:02:eb:a4:71:e9:50:3e:95:a3:4f:4a:4a:5c:4d:87:38:
         72:f6:e5:06:58:01:cf:40:9b:9c:86:b4:08:09:ae:70:f1:37:
         b3:9e:c0:bb:ed:b0:e8:c1:b8:bb:56:eb:91:03:5b:06:ca:ac:
         df:0e:9b:cf:62:34:a4:3a:15:f8:a2:64:cc:ef:4a:78:47:3d:
         d4:4e:33:15:af:ef:b4:48:6e:3f:56:be:30:61:50:32:40:35:
         9f:69:f1:0e:ec:e3:88:00:d8:0c:de:ae:da:b3:a4:c6:a9:5c:
         84:fc:ea:a8:b7:d6:71:06:51:36:4a:59:0e:ae:eb:00:c0:e8:
         6b:b6:e9:df:dd:b1:96:21:d3:c6:9f:96:99:6a:a8:89:ff:2b:
         bc:c1:69:ac:d0:a9:c1:3d:b3:da:cb:69:de:b8:7d:ed:51:8c:
         88:7a:38:f9:92:f9:36:90:24:81:48:50:58:1e:f5:64:f6:5d:
         c9:71:b8:ea:68:77:e7:9d:73:e5:c2:53:61:3f:4c:bb:d6:ac:
         25:b9:da:e3:c2:9b:60:c2:3e:1d:47:36:08:4e:00:77:1c:73:
         a8:da:79:fa:bb:0f:f9:3d:8c:ec:f0:af:45:67:d5:7d:2f:81:
         5f:e1:b2:9b:f6:d2:2a:a2:3e:0f:27:1f:c0:08:c6:e8:df:99:
         b8:f6:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:48:32 2025 by rpki-client