Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          hKi/ot7mk4kyUaZL5Tshe1MXkMQC/akYVf0XducH3ME=
Subject key identifier:   F4:9F:E3:A0:9D:37:AE:AB:83:F4:EB:CB:0F:65:5B:09:0C:7A:AB:3C
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019891486D492F750579B59733C0C99F032B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          16F8
Signing time:             Sun 10 Aug 2025 00:01:39 +0000
Manifest this update:     Sun 10 Aug 2025 00:01:39 +0000
Manifest next update:     Mon 11 Aug 2025 00:01:39 +0000
Files and hashes:         1: 2sRit1HkpegSVZ93lQZh_r4sGH8.roa (hash: WjR0xWj31dChbabct4M4jjr+gsq2p4cJ6G9KZptb3BE=)
                          2: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: HNKy8Hlzq4igxU5XtEfkZEVYq0ksKJTmZw8X8Xi2N+8=)
                          3: HLNbdsiEi9zrEX9bhrS_IVl3jtc.roa (hash: 1y6Fi/ztp5kH8MZMJE7AZCFbRxNUTgcF8S0cn+hAm74=)
                          4: VSEL2iQWB7y3te4btwgqQzATX5A.roa (hash: 79Tuaq+JTT2My5Dv4Q6xrae9R7vcxQ2hnGbV3yFOdeI=)
                          5: p1JXjb2LczYltKrE1SbLNgCFh1Y.roa (hash: JZ2SLRHUBb7DNCppha0qhaA/9Yund2DleZbSFcq4A2U=)
                          6: wroEoDWw_vzmxSpaq1fP1Fzk3_8.roa (hash: 2E+IHEjZn5u/0W6AhiRy+hLGNR3mFlov4VCci1iQEv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:48:6d:49:2f:75:05:79:b5:97:33:c0:c9:9f:03:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Aug 10 00:01:39 2025 GMT
            Not After : Aug 11 00:01:39 2025 GMT
        Subject: CN=f49fe3a09d37aeab83f4ebcb0f655b090c7aab3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:b0:57:8a:97:3f:3a:5d:ee:42:0d:7f:23:
                    5c:76:8d:e4:23:d3:c8:ec:e4:da:60:c7:5e:49:11:
                    91:1f:e4:50:a9:46:00:4c:9a:20:2a:db:5a:43:aa:
                    32:76:89:ca:4d:00:5b:02:d2:8f:c4:ad:2a:e1:ab:
                    37:5a:f9:8c:40:41:8c:ae:49:9d:f0:db:a7:37:d6:
                    2a:97:26:91:f2:94:46:21:53:1c:f9:8c:28:eb:5e:
                    4f:e0:ff:65:80:38:05:d6:33:7e:fc:b6:ac:f9:13:
                    df:a5:24:3f:ae:65:f8:90:08:be:92:77:e6:c0:88:
                    f6:97:7b:7f:a7:e9:55:d7:58:d3:84:e6:f7:ae:45:
                    5a:b1:c3:8f:eb:2b:e6:20:03:5a:a6:3e:db:62:e3:
                    73:05:b4:82:a6:e5:70:27:1f:38:13:a9:e1:2b:32:
                    96:c5:a2:ce:f9:72:bb:bf:e7:2d:96:3c:a6:3a:fe:
                    73:c7:57:15:93:f6:ed:5f:a4:46:31:30:6c:31:9e:
                    f5:bb:0a:cc:5f:c1:ae:e3:8f:50:55:7c:95:90:60:
                    3b:ee:de:b3:1e:ac:05:3e:23:ca:5d:02:19:fa:7e:
                    de:20:c4:80:a8:00:b6:38:ce:99:c8:fc:26:32:5c:
                    0e:b7:1f:f9:12:0d:1b:c5:9f:dc:7c:d2:10:58:27:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9F:E3:A0:9D:37:AE:AB:83:F4:EB:CB:0F:65:5B:09:0C:7A:AB:3C
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:09:a9:4a:36:5c:e2:33:4f:13:f3:8d:f0:36:fc:ff:b6:15:
         4b:39:34:88:68:86:8d:ba:c8:47:c6:82:7c:f4:d6:8f:76:07:
         dd:46:9e:6a:cb:bd:17:bf:a5:e2:c9:80:a2:11:93:c5:99:fa:
         a4:53:78:d1:c3:1d:4d:f7:26:bb:d3:9e:b5:9f:0d:af:b7:45:
         73:d0:f4:86:f0:fd:67:6c:63:58:3a:49:05:41:3b:63:0b:10:
         d2:da:70:1d:bf:eb:8b:0f:ef:62:81:e9:1f:b8:bf:91:41:49:
         da:b2:8c:36:23:a4:01:93:35:81:59:55:b5:31:a7:9b:40:7b:
         21:78:72:38:b2:7b:09:0d:a5:d9:42:49:d2:fa:f4:d7:43:e3:
         a6:b8:3d:1b:03:16:f2:a9:22:23:2e:fb:13:1a:0d:03:fb:3d:
         62:ad:59:8b:7b:8c:c7:10:02:39:39:49:47:a7:90:01:c5:89:
         ca:2e:31:f4:e3:82:3b:3b:e3:82:28:60:b1:1a:0e:27:52:1b:
         1d:d6:ed:c4:bd:90:70:98:57:d3:13:ca:df:85:a9:44:56:8c:
         a9:16:8d:07:b0:a6:2c:c0:5c:ac:9f:c6:88:bd:f1:40:1f:fe:
         8f:a3:9d:e5:4e:74:0f:fc:10:2a:a0:4e:8f:c6:52:71:04:df:
         b4:ce:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:56:53 2025 by rpki-client