Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File:                     iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier:          kjB4ykEJIPZ4O0V/Dq4WuR/bzoo6jW+8plEl/nh6PaI=
Subject key identifier:   14:EF:D2:17:8E:2B:F1:9A:80:25:0D:7C:D0:D3:8D:F5:35:A1:87:FD
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer:       /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial:       0198903556F85D62FF880A69FECBC9F56626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number:          1623
Signing time:             Sat 09 Aug 2025 19:01:11 +0000
Manifest this update:     Sat 09 Aug 2025 19:01:11 +0000
Manifest next update:     Sun 10 Aug 2025 19:01:11 +0000
Files and hashes:         1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
                          2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
                          3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: ozAdUb2O7FUdwvUquZl7kJRc9kxqvRwsyrukw0GyHj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:35:56:f8:5d:62:ff:88:0a:69:fe:cb:c9:f5:66:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
        Validity
            Not Before: Aug  9 19:01:11 2025 GMT
            Not After : Aug 10 19:01:11 2025 GMT
        Subject: CN=14efd2178e2bf19a80250d7cd0d38df535a187fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:0b:70:c4:af:86:a6:d6:2b:dc:fd:73:a3:
                    c1:6b:e8:20:c0:7c:29:84:eb:64:23:a0:23:65:4a:
                    50:b0:f5:a1:dd:fb:c4:45:df:78:5a:09:dc:b2:60:
                    06:41:37:70:19:04:04:7c:34:60:35:2b:e3:ac:6d:
                    13:5f:67:2b:1f:84:23:29:34:d5:f6:65:ee:02:13:
                    a6:a8:6e:66:f5:55:26:a8:2f:09:b3:22:05:94:5a:
                    f8:e2:6d:99:b1:3a:16:c5:e3:47:d4:f3:40:71:4e:
                    45:1b:62:f2:58:95:af:6e:3f:13:6c:90:c8:38:59:
                    b6:14:7f:63:03:71:a2:3a:d7:d8:ab:46:1c:7f:0d:
                    9c:17:11:87:15:c9:68:23:ed:65:f1:ef:3c:39:a2:
                    45:c9:91:19:2b:d7:2b:c7:91:f1:ae:44:00:9a:0b:
                    85:9f:dd:d9:d0:69:c0:4a:55:cc:a4:7f:23:2b:cf:
                    92:62:a0:d5:ad:7b:8f:c7:36:da:ec:b7:ad:29:a0:
                    95:98:2f:73:f9:a4:55:a2:7d:b6:48:04:31:9b:09:
                    a4:4b:e5:96:f5:d0:9a:2c:71:41:11:40:c1:64:7e:
                    27:ab:d7:66:fe:b6:2f:c7:1c:11:a8:04:38:fc:a7:
                    15:6f:00:14:e2:fd:da:4f:da:6d:83:8f:c3:cf:5b:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:D2:17:8E:2B:F1:9A:80:25:0D:7C:D0:D3:8D:F5:35:A1:87:FD
            X509v3 Authority Key Identifier:
                keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7e:ba:3b:ee:9d:10:71:85:14:78:69:fc:26:96:62:ac:70:
         aa:a5:0a:32:4d:e8:48:9f:de:df:72:3f:40:f1:d8:ea:bd:fd:
         ca:1c:ed:bf:94:7a:a8:ea:01:4e:06:4d:ab:72:e9:da:15:06:
         b3:0e:cf:38:89:0a:01:f9:20:8f:59:b7:54:f7:32:b2:26:cc:
         c4:4c:54:87:7c:11:bb:a0:da:5d:89:5e:e3:b2:76:b5:f6:a8:
         dd:89:83:da:40:e7:64:e5:5e:e4:ff:7d:56:97:ac:7b:42:3f:
         17:45:c0:33:4d:4e:88:47:df:a4:1c:9b:c0:09:78:6a:4a:b0:
         e1:dc:b7:d6:32:b4:02:38:30:09:9c:c4:db:71:4e:aa:15:75:
         20:d2:57:92:93:7b:a4:87:08:22:0e:09:09:e1:ae:7a:27:ec:
         63:18:d0:f2:66:ab:f3:b8:d1:fd:79:01:65:e7:0a:38:60:bb:
         d4:05:91:31:b6:4a:75:25:17:8a:ad:f5:61:bf:84:11:e9:bf:
         8b:85:27:75:70:a7:de:93:a1:cb:b9:20:fc:06:da:ca:43:34:
         53:95:f4:f8:ef:ff:33:3a:eb:5f:b5:7f:48:87:2b:45:20:70:
         bc:a2:13:e1:70:99:59:f6:6a:23:e8:54:5d:cb:02:a5:57:90:
         ff:05:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:26 2025 by rpki-client