Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          0F3FYKz47dK5r+3QloS15Td4ZftIa5PCvUtPNJhoIWA=
Subject key identifier:   59:16:2E:04:F8:43:E1:67:B8:12:1A:DB:DA:30:9F:B0:6A:A5:0D:A4
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01987562CCE56136FD7BE71E04E85073BC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0674
Signing time:             Mon 04 Aug 2025 14:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 14:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 14:01:05 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: N/jdNyla5bKWoglF7QqNTGNgPPszuAjgqNmxEW8brag=)
                          2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=)
                          3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
                          4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
                          5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
                          6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
                          7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:cc:e5:61:36:fd:7b:e7:1e:04:e8:50:73:bc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Aug  4 14:01:05 2025 GMT
            Not After : Aug  5 14:01:05 2025 GMT
        Subject: CN=59162e04f843e167b8121adbda309fb06aa50da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:82:84:68:0a:82:18:e5:39:13:89:0e:b2:
                    58:b0:45:ec:e3:88:51:c9:9a:e0:45:80:39:96:b5:
                    ac:31:2f:4e:28:73:dd:a6:ac:d5:e3:e2:33:42:37:
                    7b:82:55:61:a0:63:ec:52:10:9b:7f:8a:88:22:a7:
                    02:0e:6f:21:79:78:78:c7:0b:87:fd:2b:ba:2e:e5:
                    c8:24:ee:ce:ea:75:23:92:ce:3c:87:e0:05:8f:fa:
                    76:8b:03:87:06:71:ac:08:3e:cf:7a:c0:67:c1:c3:
                    a7:0a:06:a1:53:1f:29:77:d3:f9:1c:e4:d8:8e:7d:
                    d9:c9:2d:c4:91:1f:8a:36:b8:76:8e:2f:ee:49:63:
                    a1:44:02:04:77:5f:b2:20:3c:6d:4b:a7:c5:3a:8c:
                    1d:a0:6c:71:02:ee:bc:2c:d0:80:68:ae:8b:bd:50:
                    a7:ba:e0:e1:30:d9:f2:cd:07:9f:a3:16:c1:12:1e:
                    47:71:cc:99:49:ae:06:d3:c2:d6:06:0c:de:1c:be:
                    f7:3f:61:01:bd:90:ef:81:04:04:ee:c0:7f:8f:8b:
                    92:40:37:32:c6:d6:c5:0e:25:e4:a7:ee:bb:65:d6:
                    e5:af:99:be:28:dd:24:a4:59:b3:49:7a:14:d1:26:
                    69:2d:d1:19:d0:3a:2c:63:05:dc:99:ea:f2:7e:df:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:16:2E:04:F8:43:E1:67:B8:12:1A:DB:DA:30:9F:B0:6A:A5:0D:A4
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1d:36:36:f7:12:24:c3:fb:77:79:da:d6:e8:a1:3e:8a:98:
         d2:2a:1f:96:99:4e:87:da:66:fe:1f:d3:d3:84:66:a4:cc:23:
         0d:77:a2:91:60:fd:86:4b:7d:4f:8f:7e:e8:8a:f4:5a:08:ed:
         d0:7e:44:3c:40:27:fe:99:14:0b:69:9d:1a:f1:62:26:2a:aa:
         23:94:e0:dd:9d:c2:43:d4:ee:99:c0:70:6f:c3:a2:3b:eb:ed:
         8f:16:7a:7d:df:7e:ad:20:a5:4e:53:2c:27:69:95:cb:3d:44:
         bd:84:31:db:55:2c:26:c1:bd:85:dd:39:58:cb:67:a9:aa:de:
         e7:bf:83:29:8b:8a:fd:8c:f2:1d:ba:e2:0b:d1:61:66:05:ee:
         11:f0:c0:d0:0f:30:6e:da:a1:13:da:e2:69:1f:b3:9b:09:a2:
         d3:7e:62:48:e6:57:e9:08:74:d3:a4:5c:ac:bf:e2:0a:b3:4c:
         6f:99:68:e9:ab:dc:87:8a:59:27:ee:77:f0:3a:b9:ee:cc:6d:
         ae:dc:d2:25:81:2a:f2:34:70:30:99:cb:26:66:71:42:3c:0d:
         38:99:75:95:74:20:d2:ac:37:84:59:22:73:fe:7a:2e:27:aa:
         51:5f:60:46:0c:40:52:10:d1:ea:61:50:2d:f4:12:bb:62:d3:
         66:24:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:46 2025 by rpki-client