Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
File:                     7xxmWwOGkrk7310djzzqPphpegM.mft (raw, json)
Hash identifier:          wY2eaf/2XQis4ciO/9Oz1pW57qgS/aB918tgT9uCwvo=
Subject key identifier:   54:4D:C6:AA:40:E0:99:47:6E:EE:A5:BF:18:F1:1A:B1:3B:25:99:ED
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       019848C08A61EE0C1F13419FEA6ABADD6922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
Manifest number:          1648
Signing time:             Sat 26 Jul 2025 22:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:34 +0000
Files and hashes:         1: 2As0Mp8svkA_acr8TjpzRvXcyRw.roa (hash: x7SMSN6/Nb1zQXVVEV5INFQjFMZ3I+mES8tTWRbKxME=)
                          2: 5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (hash: 3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=)
                          3: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (hash: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=)
                          4: 7ZDYTKvAvTNv12GuIpMzhz94tXM.roa (hash: 9lUGbHgSaTzoBqrtOfwYxrD4Ctnrj/4XCW9Dfv6cVfg=)
                          5: 7mljAx2MPE8ckRZfqaa9qIHwI78.roa (hash: QoswDUBIDzIT7x/nZLY3TWZiOCoIUk8QVtrt2GI34Tc=)
                          6: 7xxmWwOGkrk7310djzzqPphpegM.crl (hash: s3eptTfKmL0AhnRH4hNtcd/ybuEFIEY5dLPDbErGqTM=)
                          7: GojN_v9AmfIlDGJ-pJiiWvRB3t4.roa (hash: gyhGTfbQ/CUnY8OiIN0VNwGVdkmIAUvZzNOgZEIdotE=)
                          8: Q0G9s41BFpS1cMxCZoIHJk-pW6Q.roa (hash: FvO5ikNQfN+oNfsreOeiUDXZg/1ZawIRE/udyXEqBRw=)
                          9: VevE1Qkku5OCuflEElcF548SkKs.roa (hash: OO4osqCuMqLt/NPspapEtGPa5x8FCuxawiZlsDGiwlo=)
                          10: X6QCTOwOC8y3vNqfakDVWl14x2E.roa (hash: ntyGFIij13k4RvM2mOeeSG9K/6TRfBr3RSElp30qqF4=)
                          11: f6xp71AmSGD06YY2IrJqZ9soec4.roa (hash: P2ngCAMEJOf4Ce1vVcWfg+Kihos97gOGnSUxltJgsDU=)
                          12: i0UtjKhThBAIzRT1eJL3hD2Ywmk.roa (hash: BKlQ/77pz1u1TCDlrGybeS13ax7xeZWbK2z+UAz10UA=)
                          13: nxONRr35yfVjJyyHJ14q4Tj1wU4.roa (hash: +bkryBLmQu7w4ldoQCmP9JbDgt+kLUslVyNWfoUmV6M=)
                          14: wtHvUUEBKpecU95cJCBjwBXIyFM.roa (hash: mNNvoDTEhZQOBLemoApsWk3Gy3NbhXq1e0BNHY0+0p4=)
                          15: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (hash: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:8a:61:ee:0c:1f:13:41:9f:ea:6a:ba:dd:69:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Jul 26 22:00:34 2025 GMT
            Not After : Jul 27 22:00:34 2025 GMT
        Subject: CN=544dc6aa40e099476eeea5bf18f11ab13b2599ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:7a:bc:4a:c2:e4:64:c1:7a:3b:c7:d2:c3:
                    aa:de:73:42:51:63:55:0d:84:7f:0e:f1:9f:9f:f9:
                    e2:ee:f2:6c:34:e0:d1:85:cb:7d:48:c8:d1:21:9e:
                    2e:21:69:6d:49:d4:85:08:27:79:91:de:d1:b3:a6:
                    31:2d:80:85:44:98:92:e1:58:a3:b1:8c:c4:fe:6b:
                    fd:fc:2a:02:06:18:01:1d:a4:ef:ee:02:af:b5:ca:
                    ac:56:06:b6:92:3a:3e:d7:34:b9:46:68:52:00:9d:
                    3a:3b:0f:ce:4b:df:49:b1:37:1d:22:5b:ab:87:4b:
                    6f:6a:8c:c1:ec:3a:6d:7b:f9:df:7c:c6:4a:db:29:
                    04:af:e8:52:a3:6b:95:65:ce:97:43:5c:1e:d4:34:
                    ed:64:aa:21:e5:5c:b9:28:0a:de:f5:c9:48:eb:1e:
                    8c:99:62:4d:16:50:35:9c:9b:e0:1f:eb:84:3d:d6:
                    74:63:d2:2d:67:a4:c6:45:e5:44:34:54:fd:48:1a:
                    9e:3f:97:e3:4b:dc:2c:44:61:1c:ee:30:e1:b0:2c:
                    4e:a5:27:10:1a:6b:4e:ee:fe:e6:65:67:9b:16:cc:
                    bd:6d:a9:f8:e7:9d:a5:e8:5e:d1:83:be:56:e2:38:
                    4c:bc:bf:a0:79:a3:13:84:06:18:14:58:65:66:f8:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4D:C6:AA:40:E0:99:47:6E:EE:A5:BF:18:F1:1A:B1:3B:25:99:ED
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:06:ca:7a:65:06:11:45:6a:5a:09:de:ff:4a:99:2d:1b:cb:
         65:35:ce:26:19:2f:8e:dd:65:ad:4b:13:94:61:53:7e:bd:b7:
         96:05:d0:37:b3:d1:99:63:08:64:59:e4:ad:46:4c:9a:6c:56:
         49:eb:04:bb:eb:dc:14:2d:43:91:2f:80:b3:97:17:31:f2:ea:
         67:78:1c:cf:33:20:be:a2:37:4c:5d:d3:58:59:5a:7a:a8:c7:
         94:2c:c8:c3:ac:3c:67:fa:67:bd:70:95:18:58:b1:0c:7e:e2:
         c4:7b:58:ce:f5:a3:bb:d8:c2:71:e7:24:e7:13:dc:6a:e2:e9:
         e8:79:8a:0a:ae:35:af:60:6f:58:b6:21:4a:11:40:55:27:79:
         d8:4c:a3:cd:46:11:d8:d0:34:6c:63:d1:9a:c7:64:f3:bd:a2:
         80:56:71:0b:08:3e:f5:1a:a8:c4:19:a6:bf:20:97:ed:5d:40:
         43:56:f1:9a:b0:0d:92:b4:24:9d:67:82:cb:0e:fd:89:2e:b1:
         bb:a4:e0:c5:0c:8c:f6:dc:60:49:31:ee:05:a8:93:e8:42:eb:
         04:cf:51:44:79:a6:83:63:af:af:91:56:69:c5:08:ad:29:ae:
         11:20:2e:a2:2d:1d:9d:94:f6:0e:0e:80:04:d6:2c:2e:35:3d:
         c0:58:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:49 2025 by rpki-client