Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          LYX9GVQCDYe9Wa+hVt78wFNoe3qv1sc+93+e9X1jR6g=
Subject key identifier:   F5:BC:9A:74:DD:9B:7F:E1:7C:4A:DB:8C:1E:BB:90:2B:98:AE:1D:1E
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       019955D6C713C01CC8859D36408DCFA1C599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1692
Signing time:             Wed 17 Sep 2025 04:02:42 +0000
Manifest this update:     Wed 17 Sep 2025 04:02:42 +0000
Manifest next update:     Thu 18 Sep 2025 04:02:42 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: IRgCARLKjwYdZeotTtLCJjjhcFBzXfs35Lw/VaZyCg0=)
                          2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
                          3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
                          4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
                          5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:55:d6:c7:13:c0:1c:c8:85:9d:36:40:8d:cf:a1:c5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Sep 17 04:02:42 2025 GMT
            Not After : Sep 18 04:02:42 2025 GMT
        Subject: CN=f5bc9a74dd9b7fe17c4adb8c1ebb902b98ae1d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:29:82:96:f7:36:82:49:6e:6f:c3:25:56:
                    93:dd:a0:32:df:3d:c9:fa:40:bc:d0:6c:27:ce:df:
                    3f:3b:69:75:f1:ae:10:74:03:03:a4:76:0e:aa:d7:
                    35:fb:d3:3b:f8:51:a6:1f:34:91:78:4a:3d:6b:62:
                    c2:9e:ad:95:4c:20:3f:3e:e5:61:eb:26:8d:2c:32:
                    18:eb:86:37:a0:22:cf:53:52:07:1d:80:e2:47:2d:
                    cc:e8:db:68:c1:2c:d6:90:52:2d:77:e8:44:8b:f6:
                    a6:4b:7e:7f:20:cb:16:45:91:ee:52:f6:24:94:3b:
                    92:1e:30:ae:92:70:2e:5b:78:69:c7:c4:ae:b2:ae:
                    72:91:f0:fb:ed:c4:62:47:28:81:6e:bb:ed:26:34:
                    c4:cf:84:d2:5b:27:28:aa:bc:88:d9:b0:9f:4a:2b:
                    f2:b5:b9:0f:ea:9a:66:18:b7:0b:fd:e8:8d:6f:de:
                    d9:c3:f0:7c:f3:31:e0:aa:25:13:20:8c:b7:8f:ca:
                    6c:e2:6c:db:64:10:97:20:c1:3d:33:f4:e4:c7:0d:
                    46:88:08:7f:8f:2e:d8:c6:c0:35:80:2c:fa:87:1b:
                    b0:f4:2b:48:85:b8:87:2e:23:b4:a9:05:6a:5b:30:
                    d6:db:c9:a4:eb:e8:70:fe:3c:cc:ff:41:cd:bf:9a:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BC:9A:74:DD:9B:7F:E1:7C:4A:DB:8C:1E:BB:90:2B:98:AE:1D:1E
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:1f:b5:15:8b:ff:b7:15:35:8a:55:72:c7:86:5f:9e:1b:
         ba:5e:80:48:65:f6:32:b9:dd:60:bd:71:c7:5e:0a:b6:1a:60:
         67:9c:fe:7b:40:ab:da:d3:9c:ba:01:ab:0c:cd:72:d7:0c:91:
         d2:e6:32:5b:24:18:28:cb:48:6d:fe:fe:52:f8:28:9b:e3:54:
         bd:93:f1:8e:7d:fa:2c:24:e8:f9:d6:22:95:b5:56:ec:07:c7:
         e4:28:a4:7b:91:e7:11:4a:c4:11:f0:d4:bd:2f:58:81:c8:bc:
         09:e6:3a:f9:ea:25:09:39:47:1c:dd:70:4b:6c:0f:34:01:13:
         6c:63:1a:b1:e2:99:a5:ec:ca:67:77:cc:e7:c9:51:62:03:31:
         83:1d:3c:b1:9e:33:54:55:2f:0b:4e:67:44:41:c9:5b:46:30:
         b8:d7:8b:32:a6:d8:41:9b:80:8d:ba:1a:53:62:d9:73:70:c8:
         22:37:5a:7c:28:e2:0c:ea:f8:5b:67:c9:17:33:fc:7f:ff:13:
         b9:1d:7c:c2:54:1d:46:7d:d6:13:2d:8f:0a:bc:75:f6:77:d4:
         23:3a:af:b8:aa:bf:68:80:55:0f:76:aa:bb:34:6c:b4:c3:d0:
         33:f4:d1:8b:c2:a5:db:86:02:4e:9c:61:9b:6c:21:84:48:a4:
         80:a3:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:57:01 2025 by rpki-client