Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          WPFT/rywkeB6JZ78z+DJamRTZ7YIA+u03b81wyc2ehY=
Subject key identifier:   D7:C2:C3:04:BA:20:83:84:E3:44:F9:E6:1D:0C:DA:FC:62:93:F5:DE
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       019890DAA2B691BA55D3EB371485721AF87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          16D3
Signing time:             Sat 09 Aug 2025 22:01:44 +0000
Manifest this update:     Sat 09 Aug 2025 22:01:44 +0000
Manifest next update:     Sun 10 Aug 2025 22:01:44 +0000
Files and hashes:         1: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=)
                          2: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=)
                          3: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=)
                          4: dVSHkxvBSWvx6DTAQypDnpbzncQ.roa (hash: 3ANn5h8OEmJButge1mufdkGdCeyGZ9P/cyzyOLiH0hM=)
                          5: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: iBUjhv8MsP7PzH1MZSAoFMwiNnnyt7BeXk2wN5zyou8=)
                          6: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:da:a2:b6:91:ba:55:d3:eb:37:14:85:72:1a:f8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Aug  9 22:01:44 2025 GMT
            Not After : Aug 10 22:01:44 2025 GMT
        Subject: CN=d7c2c304ba208384e344f9e61d0cdafc6293f5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:65:ad:68:b5:76:a4:b9:0d:ed:70:2e:6e:
                    25:ea:0f:1a:f2:04:0c:23:a6:63:22:9d:99:31:86:
                    76:11:50:d5:27:c6:67:9e:cd:52:ba:25:84:f2:34:
                    65:4e:1c:2b:1e:bb:be:79:e0:4c:05:e6:1c:1d:1f:
                    29:54:e7:95:09:1e:00:30:6e:37:8d:71:fe:82:20:
                    31:3f:53:54:e7:af:70:47:2e:45:15:db:30:ab:42:
                    60:da:7d:ae:7e:77:97:65:29:4a:d9:62:89:17:a6:
                    ad:14:4f:05:6a:c5:e9:7e:d9:1d:d3:a4:31:53:b7:
                    aa:3a:a5:c3:40:3b:df:1d:10:3d:62:1a:6e:e0:af:
                    3c:f2:08:e6:bd:35:13:ea:e2:d7:e6:89:c0:8a:c8:
                    30:ea:f2:9d:c5:ef:86:8e:80:68:1f:a1:cd:45:a3:
                    39:bb:6c:ae:bb:d1:16:72:0c:38:de:f4:a7:cf:aa:
                    22:0c:96:6e:dc:70:22:f2:91:5f:08:13:d2:71:57:
                    92:12:d0:99:01:f8:47:f4:ec:01:74:54:c2:a4:71:
                    8c:18:74:d1:2e:83:fd:d8:bf:a9:8b:bc:28:68:ac:
                    a2:0b:15:b9:a8:29:4a:74:d8:16:36:90:d1:e3:3e:
                    97:bb:d1:fc:8f:f5:a8:fe:24:a8:9d:86:54:06:9c:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:C3:04:BA:20:83:84:E3:44:F9:E6:1D:0C:DA:FC:62:93:F5:DE
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:60:2c:0f:64:f7:e7:ff:e4:ba:58:7a:e1:07:8d:af:d7:3e:
         95:72:e5:b6:02:da:e9:b6:8e:e4:c6:10:ed:d6:0b:88:73:1d:
         ed:94:93:c2:9a:f7:3a:1a:99:57:3b:7d:5f:41:f8:c1:d6:82:
         da:46:d1:4e:59:87:57:c6:40:37:b7:5b:82:94:53:29:4b:1b:
         8a:cb:67:e9:09:f4:f7:ab:dd:7e:89:a8:5b:ca:de:09:cc:1d:
         6c:ce:54:a2:a9:9c:c8:bf:95:57:d1:74:cf:e3:d3:b9:40:40:
         36:f5:c8:62:d0:2e:40:5e:3b:ef:80:b4:8d:24:5c:50:47:2a:
         ba:49:80:d9:35:25:8c:62:eb:28:8a:e1:c8:40:7d:df:78:6e:
         f5:a6:e9:06:24:c8:4a:39:c2:ca:b2:29:aa:3a:37:6f:27:e0:
         b7:c7:82:a4:e9:de:bb:35:e1:e4:d2:62:d6:dc:05:55:fc:2b:
         fc:a1:a6:ca:cc:37:3d:82:70:b9:b9:67:ff:3b:a3:41:61:c5:
         5c:22:b1:55:80:3c:31:96:5f:2d:34:c2:5b:84:b9:16:e8:3a:
         87:14:21:d7:1f:09:c6:d6:c8:3e:5f:3f:39:c4:51:d2:76:79:
         5f:cf:6a:84:42:3f:57:c8:3b:9f:0d:e0:d2:c7:76:5e:6c:0f:
         0e:ee:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:51:28 2025 by rpki-client