Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          Aj0xjuFEq2rIhEwKNBY3Nz3QuoPn2jKnct49w6BxFYU=
Subject key identifier:   32:2D:FC:C3:D9:4B:B6:BB:67:CD:54:A9:47:51:4D:2D:1F:DA:64:CD
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       019843D13A3B7AB349E792C46E143A94A92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0D4E
Signing time:             Fri 25 Jul 2025 23:00:42 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:42 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:42 +0000
Files and hashes:         1: 36LgSmoTYXDGLabuVqpVL_HY_bo.roa (hash: jlUxcS1bmgVem5MV0QJTckeBjIjhWcwd8IXi6NlQXXM=)
                          2: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: jZuT0HU6NmwmipQhHqvOGq5mZ3U3pZ2lDsNdRguB/Ns=)
                          4: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          5: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d1:3a:3b:7a:b3:49:e7:92:c4:6e:14:3a:94:a9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Jul 25 23:00:42 2025 GMT
            Not After : Jul 26 23:00:42 2025 GMT
        Subject: CN=322dfcc3d94bb6bb67cd54a947514d2d1fda64cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:09:16:39:4a:86:b4:0d:6a:dd:53:35:b3:
                    7c:6a:fe:57:ae:3d:cd:97:da:f8:ef:6d:44:e3:a8:
                    32:cb:ea:0f:66:46:8d:c7:fc:0d:e4:15:0d:79:e5:
                    91:2f:ac:2c:6e:6d:ab:5d:1c:08:72:ed:1e:97:3b:
                    e5:7d:20:f3:fa:fb:1d:72:e9:3a:e2:a6:06:d5:64:
                    e1:07:b6:61:fb:e9:4a:72:95:96:a6:3c:95:35:fd:
                    0d:39:95:c7:47:1e:88:5c:47:98:56:bb:91:8b:39:
                    ab:88:db:42:a5:fd:ec:76:bb:11:1a:44:1b:6c:2e:
                    33:88:24:a9:6c:78:1f:13:14:c9:64:dc:8e:d9:9e:
                    ca:83:6d:2d:77:03:da:c2:ff:b3:7c:02:46:08:03:
                    47:d3:02:70:f9:8c:22:e0:23:6e:87:af:d7:e1:c0:
                    e9:42:bb:bf:5c:50:91:ff:bb:b9:37:11:61:0a:a3:
                    4a:1c:e5:ad:b7:0f:f3:c5:e4:a6:1b:e8:64:23:ef:
                    cb:e1:03:fe:07:c0:55:d8:a3:16:4c:44:a1:cb:c7:
                    be:f5:0c:7a:8c:8f:0a:47:d0:7e:c4:9e:48:c3:d4:
                    70:d9:0c:8a:9c:08:31:27:a2:8c:a9:90:1d:99:39:
                    67:90:e2:35:bf:b4:fc:b9:94:03:a3:dc:98:66:83:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:FC:C3:D9:4B:B6:BB:67:CD:54:A9:47:51:4D:2D:1F:DA:64:CD
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5f:0c:a8:73:ab:e6:f6:eb:27:bf:7f:de:0d:17:23:fb:44:
         42:66:1e:d9:44:af:ba:37:40:53:00:3c:95:dc:38:b8:de:f4:
         08:bc:09:92:c6:78:f1:7e:d8:d1:3a:56:9d:dc:20:11:fa:ca:
         29:30:1e:bb:17:b0:a6:a2:ad:c0:af:29:47:63:64:c2:c6:bd:
         a2:50:7c:8e:a5:f9:28:68:a6:11:06:29:05:47:e8:72:65:a6:
         2d:03:a8:9a:6a:aa:27:13:75:c8:b9:50:5b:46:82:a2:2f:17:
         bf:62:62:d9:e9:b0:55:bc:ed:2c:c9:7b:d8:44:c5:03:d9:4d:
         f3:df:06:e6:57:36:43:01:52:d7:e6:a8:7b:db:4f:f6:d6:59:
         98:5d:e1:4a:43:2b:e5:02:d3:ea:1d:7c:7b:29:b8:25:34:d2:
         b3:e1:5c:1a:22:b3:2b:ea:4e:cb:d0:b2:94:fc:eb:d9:41:45:
         1e:a6:84:84:d9:b5:9c:ac:c6:ff:4f:52:56:24:6a:f2:ae:33:
         a3:ce:af:04:ea:1e:08:e1:b7:6d:fe:f5:a5:d9:06:f2:bc:8d:
         8f:9b:d7:33:6e:e3:43:00:e5:d0:88:d7:55:1c:9c:e2:14:a3:
         49:00:9f:e0:47:a9:8d:d8:8a:89:91:c9:8f:38:3d:6a:cf:8d:
         d1:f2:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:58:30 2025 by rpki-client