Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          oW1+bzbkpLH+rvWNXiviAuNRuA5uON3gDauAXqF7YHA=
Subject key identifier:   D8:5C:75:1B:A1:41:77:30:6F:9E:D0:93:D0:5F:4F:6F:02:84:4C:A5
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       01984AE5C260B787F8A374848C4C1F9D54F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          065E
Signing time:             Sun 27 Jul 2025 08:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:28 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: 9saBy/MN5qJ8SQBfN0D8dzyuIdstZDSvBk0l/Zr8pk0=)
                          2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=)
                          3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
                          4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
                          5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
                          6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
                          7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:c2:60:b7:87:f8:a3:74:84:8c:4c:1f:9d:54:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Jul 27 08:00:28 2025 GMT
            Not After : Jul 28 08:00:28 2025 GMT
        Subject: CN=d85c751ba14177306f9ed093d05f4f6f02844ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:4a:39:dd:98:d6:bd:ae:ee:ac:cc:74:b2:
                    b7:2d:e7:19:ad:3a:c5:cb:72:9b:06:e4:b9:78:64:
                    a9:be:22:8a:d4:93:95:66:0d:57:37:ac:97:f7:bb:
                    13:54:cd:3c:3b:25:97:26:d5:1f:f7:e9:df:ea:43:
                    66:42:c4:fc:3b:12:99:c2:89:9b:0f:fa:96:b8:e4:
                    ad:56:c3:e8:3c:ba:83:bc:8c:26:95:1a:bf:14:2e:
                    50:93:0a:a6:ef:2b:0e:b3:f7:dc:71:1d:57:ae:83:
                    c4:20:88:77:2c:54:6c:ab:65:91:da:7a:6b:02:22:
                    b0:14:d4:9e:41:4b:14:56:19:fa:87:fd:5d:9b:0d:
                    ee:9d:e8:e3:cb:8c:90:7f:6a:73:ce:87:2a:54:c6:
                    a1:8b:08:ba:05:54:b7:7f:c3:fe:21:6c:46:24:46:
                    fb:8b:4e:ae:59:a1:58:a3:b3:56:85:fe:08:8b:af:
                    f0:67:bf:b4:a6:fd:09:c7:20:51:3b:b2:26:64:c4:
                    7b:f8:a7:d0:cb:cf:70:69:81:e4:53:e1:61:ce:03:
                    81:ff:63:c5:05:16:34:b8:d1:2d:b3:aa:64:74:58:
                    ba:6a:8f:cf:8f:ee:75:2b:cf:c2:7e:73:7c:65:2d:
                    d5:7c:91:ec:33:30:1d:6a:d5:ae:60:c6:28:29:5d:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:75:1B:A1:41:77:30:6F:9E:D0:93:D0:5F:4F:6F:02:84:4C:A5
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:87:9c:04:46:38:17:6f:fa:56:3f:bd:97:68:2e:78:82:
         a0:70:d8:3d:6b:ec:ec:0c:12:d8:8f:1d:ec:53:fe:ff:19:eb:
         02:7f:7a:44:f5:42:f3:28:94:9a:e7:53:e9:26:f9:6c:17:65:
         c1:b7:4d:86:ff:6c:00:8c:bc:f5:d6:74:4b:d7:9b:17:96:99:
         bf:da:50:7a:81:e9:7b:6a:a0:e7:98:96:e1:0c:af:98:ff:e0:
         9f:7c:8a:35:b2:f1:c4:72:de:45:4d:38:40:19:57:20:29:62:
         30:bf:e2:b2:0f:df:c0:1d:0b:4f:b2:9f:d1:61:b2:4c:30:2d:
         93:41:c5:db:53:e6:f9:a8:03:f1:c8:00:ac:b2:81:ed:1e:ae:
         f8:01:00:79:93:59:72:98:fa:50:8f:ab:4c:fa:eb:a6:3c:af:
         76:bc:20:83:57:3e:49:c6:6a:4e:d1:d7:62:64:cd:f0:f8:cf:
         71:a5:5d:8e:da:ac:fa:4a:96:36:24:63:5d:22:47:c5:29:e6:
         c5:27:8f:29:af:75:d9:6a:fb:99:95:fa:d5:66:29:23:26:b8:
         65:33:4c:df:72:eb:f9:dc:92:85:69:8f:71:22:aa:84:21:9a:
         96:36:65:07:5d:d3:af:f3:99:67:30:5d:36:f1:0c:38:56:44:
         17:43:50:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:13:52 2025 by rpki-client