Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          UdAZSLzd1fHlKRMmeowzwg/EWwv+J+LO6TM8e0HkjUw=
Subject key identifier:   88:5C:8B:6A:37:E8:1E:96:1B:A3:41:66:1C:37:D6:41:5C:9F:FA:D2
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       01988C21199570F5EE604EDB3DA6E1864B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          1626
Signing time:             Sat 09 Aug 2025 00:00:36 +0000
Manifest this update:     Sat 09 Aug 2025 00:00:36 +0000
Manifest next update:     Sun 10 Aug 2025 00:00:36 +0000
Files and hashes:         1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
                          2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
                          3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: atgxi4631YGj4rdzBdq0MhXqQqc24GCLk++ITbGEj2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:21:19:95:70:f5:ee:60:4e:db:3d:a6:e1:86:4b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Aug  9 00:00:36 2025 GMT
            Not After : Aug 10 00:00:36 2025 GMT
        Subject: CN=885c8b6a37e81e961ba341661c37d6415c9ffad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:66:3a:ec:46:3a:cd:69:57:07:54:54:fa:
                    f8:88:a1:7c:27:04:15:87:aa:2e:fa:b1:47:6d:af:
                    14:24:a3:69:69:d5:bc:2c:1f:87:1e:c1:f4:3d:30:
                    57:e8:41:70:3b:28:04:c0:6b:c0:e4:a2:5f:64:dd:
                    70:f4:d2:8c:0f:b5:44:89:6f:21:ec:7e:ee:4a:25:
                    45:3c:f4:2a:c0:26:17:68:13:66:26:e3:1f:6c:87:
                    5d:ec:18:a1:b6:31:55:37:18:ea:f1:90:92:16:ba:
                    1b:48:0a:2c:bd:5c:99:4f:63:b8:f5:eb:de:df:48:
                    54:8a:b7:76:84:b9:db:e5:29:67:c5:c2:82:7a:e6:
                    90:7a:41:28:6f:c9:b0:b8:b7:8d:a5:87:7b:5d:c0:
                    a9:2c:2a:b0:ae:70:a6:90:b5:ce:0f:10:c2:44:1d:
                    59:f0:f8:ce:21:99:71:02:fb:74:b4:4e:63:bc:cb:
                    2e:88:48:14:2d:e1:61:6c:af:b7:8f:79:de:6c:44:
                    bc:27:7d:30:f1:7f:9a:73:8c:a1:fe:41:64:33:2f:
                    8c:56:e8:bb:7b:80:ac:89:fc:a9:65:d9:06:ef:c8:
                    91:4f:3d:b9:54:15:c3:05:63:71:0c:ee:57:62:78:
                    9a:b9:00:59:82:21:6e:c8:ef:85:bd:bc:36:66:1d:
                    fb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5C:8B:6A:37:E8:1E:96:1B:A3:41:66:1C:37:D6:41:5C:9F:FA:D2
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:27:cd:35:bd:b5:86:16:49:e2:bb:bf:5d:9d:48:e4:05:
         43:a5:cf:bb:2e:dc:92:9b:0f:42:09:12:cf:fc:e7:9b:c6:2e:
         01:4c:8a:ef:6d:8d:27:35:75:db:a6:a2:92:c6:f9:20:c7:5b:
         54:ed:ed:d9:2a:a0:f8:87:39:a9:23:95:24:28:bf:8f:9c:92:
         5e:82:46:8b:3c:6a:bb:b8:b1:09:94:29:f9:a1:5b:81:53:c4:
         fb:93:77:29:4d:77:47:db:ff:98:17:cf:45:61:0b:b6:05:ab:
         f7:b4:04:fd:06:9d:23:61:9d:b9:f0:75:4a:1c:03:65:b4:52:
         24:11:00:2c:68:14:c0:94:c6:d6:ff:97:be:eb:57:d4:ad:b0:
         24:92:14:12:df:9b:88:b2:f0:b8:dc:7a:a0:bd:9a:8c:09:58:
         4f:65:ca:88:95:bb:e8:69:fc:1a:27:46:fb:09:09:b8:ed:f5:
         1c:b8:f8:c2:5c:78:6e:88:6d:41:bd:2e:28:53:b4:ee:b8:7c:
         b1:d6:11:2c:f5:33:58:28:09:50:7c:4d:bf:dc:49:90:01:c8:
         ab:17:80:3a:5c:29:b5:fa:21:ec:5e:9b:ee:5d:f7:af:e3:55:
         f7:cf:61:ef:c6:ac:db:0c:e9:16:ac:89:f5:c8:1a:d0:69:b2:
         66:e4:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:03 2025 by rpki-client