Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          LmYjUSmmixn0V6fr6Uw6QacFCw8cq/PTGBO7BRIS9TY=
Subject key identifier:   17:53:D7:EA:40:15:26:F7:44:53:1E:42:6F:C0:AD:21:91:23:55:E7
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       01987C09FDABDB96213F3D103342D40FC100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0895
Signing time:             Tue 05 Aug 2025 21:01:26 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:26 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:26 +0000
Files and hashes:         1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=)
                          2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: xqaR2cRu5MRfzJ/MSDBHFHN5zsHrlceOAOFpxuphUqE=)
                          3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=)
                          4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:fd:ab:db:96:21:3f:3d:10:33:42:d4:0f:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Aug  5 21:01:26 2025 GMT
            Not After : Aug  6 21:01:26 2025 GMT
        Subject: CN=1753d7ea401526f744531e426fc0ad21912355e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:a7:fe:cd:6a:f8:63:45:4f:71:c3:44:db:
                    12:7f:ef:ff:c6:6e:d4:65:7d:48:21:7e:2e:ee:21:
                    54:77:7f:43:48:0d:d4:bc:6d:01:6a:51:4b:f3:a0:
                    ca:76:ad:54:3a:b2:63:c2:dd:0b:3b:b2:80:20:b4:
                    47:69:c2:ca:50:15:36:d4:10:54:fa:1c:7b:88:ac:
                    d4:ef:21:ea:ca:8d:71:f4:3d:21:dd:2f:b8:c4:3f:
                    94:68:e5:92:a7:4d:04:d9:87:5f:04:30:d8:9d:6d:
                    e1:42:79:4a:ae:cd:c8:dc:28:36:23:e3:7d:dd:3c:
                    90:c5:a4:7c:56:f3:d1:9b:9c:a8:2a:34:52:14:f7:
                    f8:3c:54:53:c2:82:ec:d4:a7:e3:66:42:0a:69:5b:
                    9b:dc:08:2e:16:02:57:16:56:b4:d1:d7:30:8f:c2:
                    1b:7c:30:4c:7e:0c:90:84:ea:c0:62:8a:89:e1:19:
                    65:e0:47:79:31:f3:7d:7e:23:86:b8:40:70:e6:68:
                    e7:f2:af:65:c4:a3:9e:c9:52:b2:d3:cb:6c:8f:34:
                    c4:e2:91:d7:b8:73:7f:74:d8:ee:2c:a0:e5:4c:51:
                    12:34:d9:9f:76:cd:ef:ba:07:5c:f2:2a:36:61:29:
                    4a:57:b6:f6:24:6e:94:c0:e3:e0:5f:62:55:c8:73:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:53:D7:EA:40:15:26:F7:44:53:1E:42:6F:C0:AD:21:91:23:55:E7
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:d1:3f:84:35:43:e3:31:9b:72:c8:e3:70:bb:8e:3e:7b:
         27:b6:c7:93:b1:39:9e:3f:62:a2:1d:9e:95:16:af:20:d4:80:
         ac:1a:d2:5a:ca:bf:d7:61:0d:bc:f7:28:54:84:88:68:c1:5c:
         bd:57:e6:c2:f5:99:07:77:f9:74:13:ca:7e:80:7e:6f:b7:36:
         73:3b:a0:5e:ed:09:d3:f3:e8:c4:25:d4:ea:cd:1d:78:ef:f9:
         24:ea:45:3e:0f:9c:c3:9b:6b:90:d7:27:44:e4:7d:6b:da:e3:
         cf:b3:82:80:f4:d5:0f:af:35:5f:b6:c4:44:5a:14:72:57:ed:
         8a:a7:64:24:aa:b3:88:4f:5d:81:81:75:03:01:b5:29:70:d0:
         9a:30:24:6c:14:5a:ce:e6:95:f3:f6:b4:05:4a:e7:c3:d1:02:
         c9:20:a7:3a:29:4a:19:28:81:cc:7f:f9:65:a6:b6:a7:f5:f1:
         89:ae:ee:c2:3d:37:60:04:16:f2:3c:a8:af:d9:b6:22:fb:ec:
         0c:cc:fa:a6:95:6f:38:c6:7e:7e:32:1d:53:c7:97:c8:6e:7f:
         2c:fd:cf:be:8c:20:ef:55:12:34:1e:a8:61:94:ad:54:95:f4:
         67:46:51:4d:09:dd:c8:ad:8a:36:38:fd:4c:bc:c5:97:50:54:
         60:80:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:41 2025 by rpki-client