Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          5Eij73jbQLtUWChYwExUY+m5gKOj6pBK0jVXggrHitc=
Subject key identifier:   54:E9:B4:F3:33:F7:8E:9E:13:1D:9E:95:C6:14:03:40:AA:BE:18:5B
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       019847ADFE1E2D426C6D23136A4D4B34D618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          1613
Signing time:             Sat 26 Jul 2025 17:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:41 +0000
Files and hashes:         1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=)
                          2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=)
                          3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
                          4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
                          5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: 7HA7DRUWygNdFu+oYviQtv9y9yqeGGUX2T3Xy57T9Rw=)
                          6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
                          7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
                          8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:fe:1e:2d:42:6c:6d:23:13:6a:4d:4b:34:d6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Jul 26 17:00:41 2025 GMT
            Not After : Jul 27 17:00:41 2025 GMT
        Subject: CN=54e9b4f333f78e9e131d9e95c6140340aabe185b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:93:62:d7:58:17:82:39:11:4d:06:ce:32:
                    b1:93:3b:9d:76:df:a2:30:46:c4:c2:08:2d:6d:57:
                    72:38:f0:4e:64:ce:d3:97:c5:63:f1:8d:dd:e6:dd:
                    a3:87:06:ec:0e:2a:29:22:73:a7:af:fd:80:0e:6e:
                    be:20:93:b3:57:82:12:c7:f7:5e:d3:29:ae:46:28:
                    a5:ea:04:0c:b5:e9:9a:6e:cc:9e:f1:80:59:92:db:
                    5a:9c:75:35:b6:b9:19:9d:6e:48:32:c1:59:cd:9d:
                    3d:12:d5:4e:7b:fb:7c:41:77:70:f9:2f:f7:43:bc:
                    8b:03:32:a2:07:e2:75:e6:51:20:28:6e:9a:58:5a:
                    bc:e5:b2:3a:87:0d:f0:82:c9:51:4b:04:84:f1:3d:
                    fd:01:f9:83:4e:22:81:ba:1d:00:e0:a3:d6:d9:7c:
                    4b:52:bd:08:8b:6a:df:6d:f3:a8:45:af:71:db:16:
                    7d:8f:63:a3:54:46:7b:ce:56:30:a2:b9:00:5a:2e:
                    76:05:0e:a3:a1:2b:90:92:62:e7:31:62:d8:c4:b8:
                    94:31:48:e5:2c:91:9e:82:f6:7c:8d:14:49:e9:de:
                    bb:eb:86:11:4a:16:dc:d4:dd:86:e3:27:e1:2b:dd:
                    b5:bb:69:9f:b8:e1:1d:f8:a0:6d:5c:3c:9c:a2:69:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:B4:F3:33:F7:8E:9E:13:1D:9E:95:C6:14:03:40:AA:BE:18:5B
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:39:16:94:cf:c2:13:00:3a:f4:55:94:04:16:07:a0:3d:34:
         c1:a0:6f:8b:a9:5a:9a:15:7f:bf:4a:e4:63:0a:92:58:6f:ee:
         2e:79:cb:bc:51:97:54:49:a4:d2:e1:8d:ce:d5:45:b3:61:76:
         1c:83:cb:ec:6a:9c:9e:8c:2c:e7:ab:ef:41:84:7d:7d:81:1d:
         4d:8a:74:72:dd:09:f8:ff:d9:6a:6c:00:6c:15:17:fb:3a:ac:
         3c:bd:8b:09:89:c9:a2:89:3f:da:13:78:da:59:31:96:5e:76:
         b0:b5:70:40:0c:33:43:94:bf:30:fe:a4:6b:f4:30:98:b3:b7:
         7f:3c:a7:71:9f:19:09:cc:11:99:d4:9b:ef:30:22:92:2f:43:
         6c:4e:ec:b1:ca:96:50:e0:b6:9b:c6:09:88:c2:86:8e:4b:0c:
         93:f1:d5:30:56:15:29:30:82:74:32:5b:de:bf:a1:27:fe:87:
         8d:68:d2:7b:ac:98:94:9f:56:6a:8c:81:f0:d0:b7:9b:41:e9:
         91:87:a3:1f:d5:c2:5d:b2:23:8b:55:63:14:58:47:23:20:2d:
         23:36:5d:29:67:ea:ad:5d:8a:75:9b:13:6d:71:cb:8f:09:84:
         11:ec:25:f3:25:38:b8:0b:0a:41:87:ed:2f:bc:3e:ab:12:92:
         b2:44:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:30:08 2025 by rpki-client