Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File:                     mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier:          d60gWfWTc4+DCXm+YN4CGbW9me3oDPN7mOJz3iyv4as=
Subject key identifier:   CF:E3:05:E0:79:72:A6:9B:02:26:98:83:1F:B9:7F:92:D1:32:7A:43
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer:       /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial:       019874F550F107B049C38E6EF05A7D0C488A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number:          1623
Signing time:             Mon 04 Aug 2025 12:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:30 +0000
Files and hashes:         1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
                          2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
                          3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
                          4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
                          5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
                          6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
                          7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
                          8: mJfyrmEjb3DG71ymZA5-l-jDpcg.roa (hash: Dn2G/Xb6l/Pv7RMD2oA+wvBpFexsKHJScGmbkOC6hjI=)
                          9: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: kM1hqqmNgXgWDDRCjQfe9Hv8akwIUsoNMC2nAG328e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:50:f1:07:b0:49:c3:8e:6e:f0:5a:7d:0c:48:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
        Validity
            Not Before: Aug  4 12:01:30 2025 GMT
            Not After : Aug  5 12:01:30 2025 GMT
        Subject: CN=cfe305e07972a69b022698831fb97f92d1327a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:bb:ba:13:d6:da:d7:fe:6f:ba:7c:20:7f:
                    f8:00:29:6a:e3:43:2f:28:ee:7f:88:77:3e:1f:43:
                    50:be:00:a0:6c:85:9d:5c:ff:b5:04:e6:b5:4c:29:
                    c3:10:fc:ad:4c:69:90:d8:13:e6:fe:cb:13:08:d9:
                    f7:cf:c3:32:9a:f3:b2:f3:6e:e4:c2:1b:71:58:22:
                    bd:a3:05:c2:55:4e:6f:6a:2a:c0:14:37:6a:0a:1e:
                    e5:59:82:66:22:39:21:f0:43:f4:7f:ff:87:b4:c1:
                    d6:45:96:64:58:82:d1:45:0e:69:ed:4c:ec:be:1d:
                    43:80:cb:47:d8:27:65:89:d1:01:24:a3:61:28:6a:
                    3d:cc:d2:61:d4:ee:b3:04:19:9d:90:5d:89:4b:64:
                    10:92:38:4b:1d:d7:44:96:ff:be:c3:17:44:73:ae:
                    c2:f7:66:01:48:a5:3a:2d:35:f5:e8:63:0b:61:67:
                    03:62:68:74:5e:f4:a8:87:d0:77:5f:a7:86:0b:24:
                    a7:58:46:1c:8a:23:c8:ba:e3:f5:67:e6:e2:ca:b5:
                    9f:61:c0:2a:a5:e3:18:1e:96:c8:bc:66:0b:42:97:
                    e4:28:73:99:21:f8:f6:5e:72:49:41:ab:71:f0:d3:
                    15:9e:1c:46:a8:95:5e:08:f8:ae:fa:65:ba:11:34:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E3:05:E0:79:72:A6:9B:02:26:98:83:1F:B9:7F:92:D1:32:7A:43
            X509v3 Authority Key Identifier:
                keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:4e:88:5a:0d:bf:1d:ea:db:0d:36:07:de:75:8c:29:6a:18:
         b8:8e:a5:5a:3b:9e:58:40:f0:2d:39:74:19:76:c2:ec:13:90:
         6d:9c:37:22:30:5e:02:53:35:67:17:4d:02:13:0d:a1:11:c3:
         1f:5b:c2:1d:fc:05:8f:48:72:6c:a3:1e:0e:f7:23:74:57:88:
         85:69:7b:bf:a2:96:2e:4c:6a:df:57:0d:29:a8:a0:1e:46:f7:
         17:d5:ec:77:fd:fd:1b:d8:f4:0f:06:be:e9:1c:63:b8:8e:95:
         2b:d2:21:33:fa:dc:72:6e:b6:b0:0f:46:5f:f9:26:8b:5c:0a:
         de:a5:86:f3:35:ac:aa:6b:10:1d:65:63:6b:19:2a:5e:06:19:
         13:35:b9:90:e4:30:be:81:71:55:9e:30:ad:e2:d9:67:64:19:
         5e:74:ed:2f:8c:31:af:62:3b:e0:18:5d:4b:9f:d9:3b:ed:ca:
         b2:9d:77:89:e1:35:2c:51:ee:f7:6f:64:62:c7:75:ee:6b:cb:
         49:50:49:61:ea:2e:f5:e0:5d:4a:13:f7:c9:b8:05:ba:a1:ad:
         4b:97:83:da:29:8e:4b:68:ac:f4:c3:6c:3c:d6:f4:dd:cd:80:
         6f:a3:14:51:8a:fa:1b:6c:bc:42:6c:4c:1d:4b:63:b9:79:af:
         ab:4f:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:36 2025 by rpki-client