Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          j/EDz3AT4U/OG4vOiNrxRFcRoaUj/yqsQhyuK2Xk72s=
Subject key identifier:   3E:F7:C6:8C:8D:3C:5C:10:1F:8A:2C:7E:13:EA:1B:CC:E1:09:BA:C3
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019873E1D8633757683A39C2ABA50FF2E5B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          1631
Signing time:             Mon 04 Aug 2025 07:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:37 +0000
Files and hashes:         1: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: TB4NA8C7ZdL1xBn3YxKJ3K4mu0dqO6N9yG+qpNryjkg=)
                          2: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=)
                          3: ZuxCaM0jvO8dT69rrtCo-UU_fGM.roa (hash: mTx3iBU5+gUzCuwkRIlwRwR4OdmyhWs/YLzJTZWJgsk=)
                          4: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=)
                          5: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=)
                          6: s09aV916ePc245Z9GMH4Ts0cTn8.roa (hash: hdMuDE9zUjm2uLsuj9BEHmHlQ1AMBc0s6keoHZxmUYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d8:63:37:57:68:3a:39:c2:ab:a5:0f:f2:e5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Aug  4 07:00:37 2025 GMT
            Not After : Aug  5 07:00:37 2025 GMT
        Subject: CN=3ef7c68c8d3c5c101f8a2c7e13ea1bcce109bac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:37:5d:f8:af:f6:d2:b3:08:a9:e0:ff:d5:
                    d8:21:3f:bf:b6:ea:32:4f:8a:b9:ed:d4:aa:07:6f:
                    5f:98:38:ca:23:42:71:7c:a3:7a:3f:b4:d2:6c:26:
                    72:79:78:8a:e8:af:69:b0:b1:da:80:fb:b3:56:07:
                    3d:a2:2f:67:b7:a0:f1:e8:bd:71:cc:c2:1b:2a:54:
                    1f:77:72:fc:1c:9f:26:2f:55:7e:07:57:45:f8:de:
                    04:de:61:46:55:91:f9:2c:34:ca:e4:01:31:39:28:
                    55:dd:03:b3:27:eb:c4:01:00:43:b1:67:15:12:0b:
                    6a:3a:ed:9f:9a:34:f5:8c:2d:84:79:67:1d:17:34:
                    48:68:39:6d:6a:9b:1f:9b:28:a8:39:2e:61:b0:4b:
                    ca:90:08:0a:3e:44:6e:a9:f5:9e:0d:25:2e:08:e3:
                    ba:6d:39:69:07:86:a9:c2:fc:91:25:6c:b3:9b:f9:
                    3e:1d:be:f2:62:be:d5:30:4b:42:36:f3:cf:b3:2d:
                    04:cc:3b:9b:ab:5a:18:e3:e2:07:99:89:2e:db:df:
                    f6:dd:ec:e1:30:5f:cd:08:5b:44:a7:76:6f:5b:8c:
                    40:1f:22:96:14:97:71:23:51:7f:59:10:ef:36:b6:
                    1c:77:bd:72:6d:bc:81:14:ee:74:b9:72:ce:c6:dc:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:C6:8C:8D:3C:5C:10:1F:8A:2C:7E:13:EA:1B:CC:E1:09:BA:C3
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d4:d3:76:7b:0d:61:c4:24:5a:48:61:46:f7:72:82:67:a7:
         e1:be:1a:3b:df:99:7d:2a:be:42:cb:a9:b3:0f:c8:bd:98:e5:
         9c:c8:3c:8f:e2:c7:22:c6:b2:47:a8:1d:fe:10:66:ce:32:c0:
         85:2a:76:b0:1c:7c:d5:be:dd:da:b1:11:67:4a:68:82:e0:d0:
         53:13:06:21:1b:5a:63:f7:fc:07:a7:4d:b2:fd:19:12:ea:9e:
         7d:a4:d2:21:b9:45:f0:f3:ce:e6:a1:cb:68:03:39:fb:7e:79:
         72:36:ce:6b:3f:2e:2e:a0:4f:b8:a5:13:70:13:42:eb:b5:63:
         97:e9:39:fc:eb:77:1f:87:c5:f6:da:31:f2:f9:28:56:58:63:
         c6:2f:56:7c:f9:8c:b3:67:d6:82:f9:a9:2f:cc:09:39:2e:87:
         fb:1f:e3:64:2e:04:a6:0c:22:af:66:7c:75:79:04:5e:15:fa:
         a8:b4:40:ae:bc:cb:e2:29:d6:69:72:cf:c8:01:2a:4d:76:7c:
         ab:f6:3d:94:42:8d:eb:ce:21:c3:66:00:e0:f5:cd:35:54:81:
         16:bf:5e:f7:99:a0:1f:87:a5:29:93:c4:d8:99:c0:3b:67:2a:
         84:13:b5:8c:03:e4:da:fc:ae:3e:d4:53:7b:b8:f4:87:d0:49:
         97:ee:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:01 2025 by rpki-client