Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File:                     q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier:          54ptCbP8q+NoHIiS1D0VSP+aY0RZ0P1WEnfR2mzz+Yc=
Subject key identifier:   25:17:C8:DA:D4:71:F6:95:E8:0A:23:C0:27:01:18:94:D2:C6:60:2C
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer:       /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial:       0198816766E872236402536DF390545FC5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number:          1660
Signing time:             Wed 06 Aug 2025 22:01:33 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:33 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:33 +0000
Files and hashes:         1: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
                          2: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
                          3: isUlANYjYqCjfC0Ok17mG4MP8p0.roa (hash: VTLE3KmkIit4Ru9ybnFT0PTCo031dbYNUSZynBG0Bx4=)
                          4: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: YxGs3ize4g/Ow+mHP1WH1PyJRr7uREYQ2E07cKIFnnE=)
                          5: ut3Ia6-mOfUCkcqND1t7uvinIqc.roa (hash: aJkTC/NqOQ2/INKdyvEr1miuxsKpaWRMdWzEAJzyDDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:66:e8:72:23:64:02:53:6d:f3:90:54:5f:c5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
        Validity
            Not Before: Aug  6 22:01:33 2025 GMT
            Not After : Aug  7 22:01:33 2025 GMT
        Subject: CN=2517c8dad471f695e80a23c027011894d2c6602c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:51:4f:27:54:c1:4a:39:d7:a4:97:99:c3:
                    fc:5a:0a:5d:33:77:9e:c4:c9:5e:2e:6a:9e:cf:96:
                    f1:57:2a:c2:8c:7f:db:01:4f:9d:5f:89:b9:2a:04:
                    ca:15:59:ee:49:45:5f:01:25:ac:5a:e7:84:04:92:
                    57:3c:29:5d:93:20:a6:d3:8b:90:7a:16:53:b5:a6:
                    ac:32:54:b4:17:fa:65:a5:ba:e5:3d:eb:c0:33:f2:
                    cd:68:c3:29:ba:9a:71:3d:5b:c8:a5:c6:05:46:b6:
                    1d:5d:6e:42:76:39:e7:53:2e:08:26:be:d7:df:c8:
                    b9:b0:14:b9:08:68:e6:c7:de:89:31:d4:5c:be:45:
                    28:9c:b3:46:04:10:1c:ca:28:71:96:e0:fc:d9:ac:
                    de:d7:4a:6b:e2:40:33:88:e5:b5:15:0b:8a:ef:8d:
                    38:df:b2:9a:3b:5b:32:48:16:42:28:a3:a1:b7:30:
                    fb:31:df:b0:e5:71:7b:2e:99:00:e1:f6:2b:0e:7a:
                    8b:cb:df:41:ba:45:be:01:de:ae:88:41:3b:9b:b6:
                    53:f7:15:79:f5:61:ea:87:a4:1f:61:50:91:ff:37:
                    06:fe:5f:37:a8:8b:26:fa:72:77:77:70:4d:b7:07:
                    88:1c:b8:2d:0a:c9:b2:c8:83:a9:82:45:cc:74:7b:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:C8:DA:D4:71:F6:95:E8:0A:23:C0:27:01:18:94:D2:C6:60:2C
            X509v3 Authority Key Identifier:
                keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:4d:a1:19:53:b5:88:4a:63:a1:4f:99:bd:0a:f3:2d:81:
         07:2b:40:91:b2:fc:46:47:94:ce:d3:b3:19:af:3d:75:e0:cb:
         8c:cd:ba:61:a1:f0:ec:dd:9e:f2:e9:14:4c:8f:89:7d:b5:f0:
         2f:82:d4:80:b9:92:fc:94:9f:c7:23:34:c4:0f:c4:a0:82:2c:
         96:f5:36:ed:9b:7d:86:5e:5c:d2:bc:1f:e8:6e:d3:22:75:2e:
         58:f9:8d:5d:14:79:35:23:02:90:4f:8c:c3:0a:ed:06:9a:9a:
         b9:0d:b5:01:3d:59:7a:ee:d7:fe:f4:3b:e4:c7:66:32:f6:33:
         f7:17:a8:db:12:61:57:9b:78:c5:56:e8:dc:7f:42:3e:e1:75:
         c9:2b:93:ac:2f:4b:c1:19:ea:4f:ad:5a:af:b0:12:45:01:4d:
         00:c5:32:3e:3e:02:95:8b:28:27:9e:4d:7e:5f:df:76:cd:35:
         3d:62:5d:30:1c:d8:c4:f7:af:72:d4:c2:3f:38:56:b9:80:d3:
         41:67:0a:d4:61:06:23:54:8c:4c:41:cd:14:22:7f:6a:94:fe:
         8c:49:86:e5:05:8f:fe:f7:9f:f0:00:02:d6:5c:9a:87:67:d9:
         48:30:6f:54:69:c6:e6:a2:b3:66:9f:10:f3:ad:2b:e6:5a:50:
         23:73:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:20 2025 by rpki-client