Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          xYq/Ly22JHdh++B7S9WuuPpITxUWStL5EBTuHiyfvug=
Subject key identifier:   F8:CE:94:8E:C0:91:FC:EA:B9:EE:03:05:B6:40:98:24:B5:43:0E:42
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       01988BEA1FCEFA181F9BA9E2A41E32C8DC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          1627
Signing time:             Fri 08 Aug 2025 23:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:33 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: kI9pQ/Z9gBLYK+75nnsgwYtCqSSmrV3swKFlmu2hhf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:1f:ce:fa:18:1f:9b:a9:e2:a4:1e:32:c8:dc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Aug  8 23:00:33 2025 GMT
            Not After : Aug  9 23:00:33 2025 GMT
        Subject: CN=f8ce948ec091fceab9ee0305b6409824b5430e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:a2:0e:49:1f:63:4f:38:21:e7:09:0a:f3:
                    50:36:a8:8c:76:9d:52:e7:d0:ea:ce:9d:05:6e:a2:
                    d3:ce:78:c7:23:fa:6b:98:bc:ef:e5:e4:ac:72:38:
                    ac:4f:a7:e7:b6:76:45:a0:ee:72:03:8f:43:c0:12:
                    4f:3b:70:76:b3:8d:e1:b9:e5:ce:d7:5f:98:96:8b:
                    c3:e5:ca:56:70:2d:80:9d:bd:44:c8:e5:52:76:b6:
                    6a:eb:fd:8a:85:b7:22:92:5c:a3:60:b6:d6:c2:5d:
                    c4:ca:d0:26:06:a0:1f:3e:b4:fb:36:47:01:09:07:
                    b6:7f:d0:a0:3e:af:17:3a:cd:b4:58:22:09:0e:de:
                    0e:a3:ad:1d:c6:33:69:fe:a2:37:03:22:32:fd:ea:
                    b9:fd:1d:80:9b:24:57:6b:d3:1d:71:8f:64:f5:92:
                    55:d2:f5:c0:a7:73:46:9d:64:c8:2c:87:d7:cd:8c:
                    7e:41:37:58:03:0f:43:28:c4:59:da:1a:ec:80:c4:
                    7f:ab:26:76:68:2b:75:d2:97:e1:d2:8a:63:8b:4d:
                    27:38:43:4d:ae:aa:bd:7a:38:10:8b:db:91:50:1c:
                    48:f0:c1:e1:0d:d3:9b:90:91:1a:b4:b0:9c:b3:56:
                    15:21:c5:41:cd:ea:86:ef:83:79:eb:76:ed:6f:d8:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CE:94:8E:C0:91:FC:EA:B9:EE:03:05:B6:40:98:24:B5:43:0E:42
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:04:14:fc:fe:d4:87:69:03:aa:26:c3:ed:a8:00:be:a6:cb:
         e3:d1:ad:2c:1d:9d:2b:05:8c:6c:c2:1b:a5:57:6b:1c:3d:75:
         4d:3c:d4:cc:45:10:62:ed:de:c1:2a:49:3f:11:2a:bc:61:d0:
         fa:2f:54:00:d9:ed:df:d1:a5:dc:99:70:1a:af:40:5e:d1:f0:
         26:a1:96:dd:01:69:7a:ce:c5:96:45:40:28:8c:bd:3d:7a:79:
         40:8a:b6:2a:95:c7:cf:d2:c3:32:4f:ae:f1:3b:aa:b9:2a:b8:
         48:52:71:ac:7b:f8:34:a7:28:a3:ce:2f:77:35:3f:27:d6:f9:
         be:13:90:cb:dd:61:41:94:8d:d7:14:70:28:51:ef:a0:cc:eb:
         5e:78:de:61:44:73:72:17:6f:ba:16:40:42:2f:b0:fd:27:cf:
         06:88:5f:de:7c:1d:15:44:6a:5a:31:94:61:9d:0d:26:81:bb:
         0c:89:12:cb:5f:9e:fa:58:69:7b:f1:ba:e8:86:77:b9:70:13:
         a5:4c:5f:7e:4b:53:96:da:4e:18:5e:6d:de:a6:61:d8:c4:a7:
         3f:17:39:73:24:0e:66:99:50:1c:13:c1:5e:12:7c:e9:fc:06:
         bb:e5:f2:a0:ed:5e:0e:53:d0:08:f8:cd:fa:1a:dc:fc:dc:85:
         cf:41:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:20 2025 by rpki-client