Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          hptTmgdW6MiNW4IV6BU7TIHaxkPup2RheHu0724NWHw=
Subject key identifier:   B2:5B:07:E6:BC:5A:E6:73:B8:04:04:81:48:22:B6:6B:97:5D:41:8E
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       019875D088C6ECECC7194514288FD0897858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          1626
Signing time:             Mon 04 Aug 2025 16:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:57 +0000
Files and hashes:         1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=)
                          2: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=)
                          3: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=)
                          4: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=)
                          5: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=)
                          6: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=)
                          7: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=)
                          8: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=)
                          9: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=)
                          10: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=)
                          11: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=)
                          12: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=)
                          13: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=)
                          14: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: Gw3y9aIMMftfPgA1BWvU6yLZRPWFUElQnR4/fmTvO8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:88:c6:ec:ec:c7:19:45:14:28:8f:d0:89:78:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Aug  4 16:00:57 2025 GMT
            Not After : Aug  5 16:00:57 2025 GMT
        Subject: CN=b25b07e6bc5ae673b80404814822b66b975d418e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:79:f8:56:8a:3d:ef:68:b6:6a:89:59:fa:
                    bd:26:37:60:12:f8:03:c8:a9:af:8b:b0:67:99:0c:
                    43:c6:7b:96:da:25:52:41:f8:f8:78:71:7a:7e:93:
                    74:51:fa:75:9d:e2:68:87:e2:0d:91:66:7a:17:6a:
                    6e:92:b4:27:39:23:26:17:ed:72:3a:43:73:3a:92:
                    63:0a:6c:e3:54:09:1c:a6:0d:f0:ab:8a:02:67:c5:
                    52:4d:52:6e:5f:57:76:04:de:3f:4d:d1:7e:f1:10:
                    c3:58:3d:3a:0c:e3:92:fc:2a:dc:ad:b5:55:7d:12:
                    8b:68:3d:cb:dc:f8:31:49:01:35:65:c5:a5:72:32:
                    da:c2:1c:1d:24:7c:01:d5:fa:6c:4c:da:35:53:df:
                    c5:40:3a:ae:36:78:3c:ec:ac:06:91:b0:f4:f1:9f:
                    53:1e:98:ef:45:e7:70:f9:9b:8d:85:b9:80:2f:6d:
                    04:e9:ae:30:d0:24:88:54:ce:2a:90:d0:d5:11:1d:
                    62:79:dc:69:82:37:0f:82:8e:51:bb:20:50:ab:35:
                    45:d4:f6:40:34:2e:f1:c0:89:ef:f3:2d:b5:65:1a:
                    0e:8c:2d:5f:ea:5c:ce:83:c2:f9:15:f6:0a:fa:90:
                    52:76:a9:55:87:05:53:96:64:68:ac:2c:f9:7a:3e:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5B:07:E6:BC:5A:E6:73:B8:04:04:81:48:22:B6:6B:97:5D:41:8E
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:4a:9d:ea:8d:1a:76:bd:c1:b8:26:2d:dc:04:d7:0a:e5:
         97:07:61:d1:ed:45:49:55:70:75:78:2e:14:81:0d:98:53:20:
         15:56:e4:55:8d:a5:9d:b7:c4:c5:91:d4:0a:a4:23:3b:3f:70:
         0d:96:49:1b:b8:f4:28:34:e1:02:19:20:f2:b0:41:cd:3a:4d:
         d7:53:7a:b9:20:61:31:ae:77:8b:f9:69:e0:7e:ad:22:f9:23:
         95:f2:29:f6:c9:e2:ee:f6:c1:a5:a4:5a:8f:e9:a7:6b:9c:7f:
         83:fe:dc:36:6f:6d:33:ee:ed:f4:6c:b9:fe:90:2c:69:01:bb:
         a2:92:a0:b0:b2:6f:20:6d:78:5d:51:3f:f1:0e:79:a3:9d:5b:
         ff:9e:34:22:c2:0f:98:77:06:cf:02:70:3e:20:ac:7c:00:0a:
         08:57:a1:a2:cd:aa:fa:a7:b3:9a:59:d5:1d:70:df:30:7a:ad:
         28:f4:61:db:7f:ff:56:12:4b:3e:a3:84:71:01:1c:54:e8:52:
         81:02:a0:78:28:ca:13:e2:56:a1:f3:5c:c5:aa:f1:b5:d4:f3:
         ce:8c:b8:8b:19:46:0b:6a:1f:21:a4:b3:cc:2d:c8:92:c5:31:
         4f:e3:a4:21:7f:65:e3:2f:98:79:08:e6:b4:4d:f2:b8:11:92:
         dd:d2:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:25 2025 by rpki-client