Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File:                     i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier:          mtj1W0qTIHxiy8tsjDF+dAgov3GVyGB02tOTG24p1h0=
Subject key identifier:   FE:9C:8E:F4:D3:BC:18:79:F3:B6:A4:7C:65:AA:C3:00:82:D4:D4:2E
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer:       /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial:       019892C99EE584664C48EBF40E89458623A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 07:02:23 +0000
Manifest this update:     Sun 10 Aug 2025 07:02:23 +0000
Manifest next update:     Mon 11 Aug 2025 07:02:23 +0000
Files and hashes:         1: L6BmwALeicC8VgFsadJhZLZOhdw.roa (hash: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=)
                          2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: jE9umdIFnEodlzPl8f0BF22J+f9LKeSmbZ5GDMFu/zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:9e:e5:84:66:4c:48:eb:f4:0e:89:45:86:23:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
        Validity
            Not Before: Aug 10 07:02:23 2025 GMT
            Not After : Aug 11 07:02:23 2025 GMT
        Subject: CN=fe9c8ef4d3bc1879f3b6a47c65aac30082d4d42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:13:8c:a4:5d:6e:70:c5:55:ee:11:fe:76:
                    de:4e:80:b0:53:e0:56:1b:b2:c6:ff:5b:13:c2:7b:
                    43:09:02:ed:b1:2d:47:b5:66:ee:f7:2a:39:6a:a3:
                    d7:95:cc:c5:72:1b:ce:c4:59:41:0d:cf:3f:d3:30:
                    55:2f:3e:80:f3:a7:5d:ea:75:4e:60:f6:64:80:0a:
                    51:44:6f:30:0d:76:dd:2e:06:15:86:9d:46:cd:85:
                    ea:82:05:f4:d6:f9:7c:ef:0e:34:0f:83:20:91:9c:
                    3e:9e:94:e5:14:9f:6e:4e:8d:4c:de:8d:0f:7b:1b:
                    e4:43:eb:66:b7:e4:41:7c:ec:9f:c4:6d:7e:0a:d6:
                    68:1b:f9:76:a8:a4:f4:b3:f4:d7:31:43:48:ab:bd:
                    1a:d5:46:20:9e:b4:59:ef:a4:fc:d7:19:31:a9:3e:
                    aa:f0:73:87:e7:4f:7b:05:7e:97:b3:bb:c1:e8:c8:
                    4b:1c:ac:9c:60:2e:87:5b:35:c3:c4:9c:98:01:f9:
                    0d:28:bc:92:c4:9d:10:42:3b:20:12:f3:7f:33:45:
                    b3:34:55:9f:33:dd:ba:25:a3:26:3e:0a:df:07:6b:
                    53:78:60:4e:35:8a:d2:21:bf:86:2f:bd:d3:3e:9f:
                    7e:68:43:cd:1a:29:5b:c5:72:33:66:10:69:53:fd:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9C:8E:F4:D3:BC:18:79:F3:B6:A4:7C:65:AA:C3:00:82:D4:D4:2E
            X509v3 Authority Key Identifier:
                keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d1:ba:fe:19:ad:09:26:96:57:5a:4c:d6:a1:97:77:dd:af:
         bd:36:74:39:68:21:70:b6:9e:e6:74:d0:7f:b5:b0:44:fa:26:
         40:7d:ee:9e:6d:ca:1c:ba:40:c4:2f:ab:31:2b:bd:93:14:6e:
         37:5b:8e:11:4f:a8:4c:33:32:71:2b:5a:18:2f:b9:a6:52:14:
         f1:e0:74:4f:d5:89:f5:95:a5:24:2f:00:48:33:fa:bb:80:d9:
         9f:de:ea:2e:59:bf:53:64:ba:f5:91:83:23:9c:f4:26:72:af:
         6c:e6:12:98:54:a3:ea:47:4e:b8:18:a0:99:41:10:8e:fb:d0:
         1e:2a:ba:d4:50:96:56:4b:7c:31:77:08:ec:b3:99:b2:c7:a7:
         9c:90:ce:f1:88:c3:14:ed:0d:6b:b1:f6:bf:25:23:d9:dc:6a:
         05:2c:f6:e7:ee:14:36:0a:ac:d6:54:63:d1:d2:31:27:ad:2d:
         02:a2:88:a6:e9:a1:89:49:ed:15:73:dd:8c:db:86:f8:aa:1f:
         f4:a0:bd:5f:f4:93:e3:ae:ef:bd:de:e0:9a:9d:0f:af:d3:4c:
         e3:74:1b:76:4b:1b:f4:4b:fe:de:a0:c6:7c:19:e6:5b:34:7d:
         6b:d7:5e:46:21:51:41:44:98:5a:01:13:87:e1:d9:16:e5:a3:
         bf:60:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:09 2025 by rpki-client