Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
File:                     8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json)
Hash identifier:          JB1fClw60HK8xKzkqaZbKBvuWCQ+/ahG9zRaCczf/GE=
Subject key identifier:   C7:BB:64:9B:3A:7A:C0:75:0A:7C:8F:0D:D3:E1:5E:EF:71:9B:ED:51
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Certificate issuer:       /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial:       0198898DC12CFA0B7B022BA72B1E4EF07044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
Manifest number:          1630
Signing time:             Fri 08 Aug 2025 12:00:25 +0000
Manifest this update:     Fri 08 Aug 2025 12:00:25 +0000
Manifest next update:     Sat 09 Aug 2025 12:00:25 +0000
Files and hashes:         1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=)
                          2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: N6nVDquq8t7fRDhcY88Bkt5ffDZnjhSLJ7EliG1zLYY=)
                          3: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (hash: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=)
                          4: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=)
                          5: _rcbdTd7xszqNhgAb_FkQpQyFAU.roa (hash: tlTacIT/p2BLnUW4V7ZFwYt3E+NE62BrqrDQeWEcWEY=)
                          6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=)
                          7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=)
                          8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=)
                          9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=)
                          10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:8d:c1:2c:fa:0b:7b:02:2b:a7:2b:1e:4e:f0:70:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
        Validity
            Not Before: Aug  8 12:00:25 2025 GMT
            Not After : Aug  9 12:00:25 2025 GMT
        Subject: CN=c7bb649b3a7ac0750a7c8f0dd3e15eef719bed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:62:5b:35:a4:6f:39:48:dd:92:d7:5d:c6:
                    80:00:08:60:cf:e6:9b:fc:65:45:87:74:dd:99:c1:
                    57:8d:35:9c:10:e5:b1:ff:8f:bb:72:de:18:42:28:
                    c5:66:a4:db:aa:93:a4:61:45:8b:c0:a6:1c:96:7e:
                    ab:ca:e9:de:d9:04:e2:bb:62:e1:a2:a6:35:5c:32:
                    30:64:3b:50:e4:9e:5b:55:e2:89:89:2d:7b:d6:f2:
                    85:92:59:b1:0e:3d:af:f7:ab:67:e0:6e:48:9c:25:
                    13:72:d2:44:af:97:96:3c:77:4a:05:58:a3:4e:34:
                    4f:c7:dc:a4:72:5c:3b:5e:bb:30:f6:0d:b7:e6:6f:
                    89:eb:53:d9:d6:dd:74:27:d9:7d:83:d7:be:15:4d:
                    8a:71:a1:73:a0:08:0a:d6:6d:66:30:db:d1:14:d9:
                    b8:f7:d5:45:23:31:f6:14:96:bb:68:99:8e:0d:85:
                    cb:41:18:fb:53:dc:b1:fa:32:dd:f4:a7:76:44:6b:
                    78:83:8b:a9:06:8f:fe:fa:54:59:fd:b1:fb:94:a0:
                    c8:4c:35:bb:aa:14:e4:62:b7:5d:31:db:8d:dc:d4:
                    c0:79:74:0c:fe:8f:61:fb:58:e9:fb:59:c3:ff:33:
                    36:ee:56:4b:fd:01:e9:5d:21:7c:f1:52:1f:e4:a1:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BB:64:9B:3A:7A:C0:75:0A:7C:8F:0D:D3:E1:5E:EF:71:9B:ED:51
            X509v3 Authority Key Identifier:
                keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:54:7a:cb:50:0f:a5:6c:ec:f4:27:38:2e:05:2b:61:03:9b:
         6c:21:01:8a:00:d0:bd:dc:f6:e3:0c:ab:70:02:e8:16:06:9c:
         19:31:d7:d3:d0:b1:2f:fb:79:c5:6b:cf:59:de:3f:1e:22:96:
         07:38:e8:39:70:c2:63:6d:c0:b5:89:0a:b5:78:60:18:7e:82:
         e1:94:a1:41:de:cb:37:31:9b:a3:13:bc:c5:de:9d:b7:90:de:
         26:7f:d7:53:dc:8d:55:f4:11:7c:34:96:dc:e0:2a:7c:2b:82:
         f9:75:88:49:f8:04:0a:3e:36:5e:92:2f:29:f3:fc:1a:de:dc:
         d8:c9:db:3a:37:6d:f3:9e:fe:7b:78:37:cb:4a:10:8e:6e:de:
         f8:4f:3c:77:81:7a:e4:8c:cd:d5:f6:d4:c8:43:38:01:c2:78:
         c1:84:68:e9:01:8b:15:24:d7:44:51:0a:68:1b:7c:3f:da:92:
         d5:30:3b:9a:89:ad:a3:8d:8f:e0:05:bd:4f:ba:74:72:00:1a:
         0e:b7:38:d2:ba:a1:c9:ff:75:a1:e9:84:0c:5d:72:0c:c3:24:
         fa:93:d4:bb:f2:a5:7a:3e:6f:dd:ea:95:d8:6c:c8:64:a1:d8:
         35:94:82:6c:17:2d:80:4f:73:45:d7:23:15:e5:e2:39:8f:99:
         9a:12:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:29 2025 by rpki-client