Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File:                     i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier:          lS6zY8L0hMO9jExS6RoJnVNbKb/sfhHDkOQ4ki36L5U=
Subject key identifier:   DD:DF:22:77:5F:5B:5F:FD:94:99:57:B8:07:EE:F6:08:4E:D1:BD:DE
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer:       /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial:       01989ECCFC4E0014B44BECB8D3131EEEB62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number:          0E7A
Signing time:             Tue 12 Aug 2025 15:01:30 +0000
Manifest this update:     Tue 12 Aug 2025 15:01:30 +0000
Manifest next update:     Wed 13 Aug 2025 15:01:30 +0000
Files and hashes:         1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
                          2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
                          3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: 1DyMLpqA9a3L+Mg+Gx1uc8OcN+bn72rLEufzdhns8e0=)
                          4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:fc:4e:00:14:b4:4b:ec:b8:d3:13:1e:ee:b6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
        Validity
            Not Before: Aug 12 15:01:30 2025 GMT
            Not After : Aug 13 15:01:30 2025 GMT
        Subject: CN=dddf22775f5b5ffd949957b807eef6084ed1bdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:fb:aa:af:a4:1a:fe:53:75:c2:89:d9:a6:
                    51:99:c0:66:35:a2:38:eb:6c:8e:f7:4f:ac:37:ee:
                    7d:db:9e:7b:47:87:36:44:ea:f5:c7:5b:75:d3:9e:
                    1a:8f:47:97:ff:aa:d8:fd:a1:66:56:9d:22:28:78:
                    00:a2:7a:78:b4:fa:14:2b:86:7a:f4:b1:cc:25:b5:
                    91:9a:cf:97:f9:54:a4:09:56:77:37:c3:81:0c:14:
                    08:e9:88:f5:3f:ee:83:ff:07:8a:ef:e1:a4:7e:a5:
                    02:78:85:cf:c5:e3:c8:db:bf:da:29:19:37:bd:b6:
                    ab:7d:33:88:ba:56:e2:c7:68:d3:1a:1a:ca:51:97:
                    2c:48:a3:4b:26:3e:3d:48:98:4c:cf:0b:9d:72:2c:
                    a3:81:05:bd:e5:2e:fa:f3:be:04:e2:25:e7:a1:40:
                    f4:8f:7c:ea:45:bd:6d:67:4c:2b:3e:2a:54:a6:6f:
                    13:47:06:35:d6:d6:35:e4:ed:4d:64:61:da:7d:54:
                    88:68:14:21:15:6b:a8:fd:16:e2:3d:8f:43:7e:59:
                    40:b9:e3:e5:37:85:4d:d5:50:ed:1d:6b:a4:7f:b5:
                    d8:d5:04:3e:f0:37:6d:bb:5b:fc:eb:1e:a5:12:80:
                    5d:c5:4b:76:dd:7d:8c:9e:c2:dd:6a:b4:77:7f:dd:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DF:22:77:5F:5B:5F:FD:94:99:57:B8:07:EE:F6:08:4E:D1:BD:DE
            X509v3 Authority Key Identifier:
                keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:b9:ad:b3:54:bb:0a:bf:30:69:61:3c:c3:6e:0a:6b:0b:
         80:9c:64:5d:86:c6:55:4a:04:01:9e:20:b7:15:53:0b:f0:b2:
         4a:55:b7:e3:9a:fd:b3:50:9d:64:74:6c:5f:7a:63:c2:42:53:
         7c:4f:65:2d:e8:74:61:79:d1:5d:08:da:28:e1:48:86:57:5c:
         9f:63:30:9b:cb:41:87:1c:82:42:2a:2b:11:53:1f:87:3a:3a:
         ff:6a:49:b4:a6:d3:01:ae:da:de:e9:d0:6a:39:48:c3:2e:50:
         3d:0f:7f:37:d6:bc:f7:46:c2:77:2a:df:08:4d:78:16:ba:67:
         2f:30:5d:81:a7:ed:17:4e:ad:c0:a5:ba:c3:8f:37:cd:58:05:
         c7:09:f8:a9:99:9f:03:d8:fb:ec:61:a1:dd:e0:78:b5:7e:b9:
         07:3c:ed:ea:a1:30:e1:a8:e9:e8:95:87:4e:53:ab:b3:c4:5f:
         ca:7b:f2:42:44:7c:87:cb:d8:06:b7:fe:16:8b:9a:57:80:c7:
         dd:89:39:cf:f9:ad:30:da:e9:56:ad:76:bb:c1:2f:cd:66:87:
         87:62:3c:10:d1:3f:3e:0d:79:a8:99:e8:2c:26:ad:6d:31:06:
         b5:c5:43:77:ef:c6:09:57:be:15:fb:d1:a3:8d:06:f8:f4:28:
         11:ff:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:21:22 2025 by rpki-client