Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          Ou3DFed2LclZYCakgGxxe5SY5K47afY2GGjNIhIn4Ek=
Subject key identifier:   1F:2F:15:09:D1:B0:46:22:D0:EE:AC:C3:53:80:BC:DE:AB:BB:11:72
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       019937261CA75539EF7FAED0CF8E98FD359E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1695
Signing time:             Thu 11 Sep 2025 05:01:08 +0000
Manifest this update:     Thu 11 Sep 2025 05:01:08 +0000
Manifest next update:     Fri 12 Sep 2025 05:01:08 +0000
Files and hashes:         1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=)
                          2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: 1DF5s4vA/F6ILtQeks0psDjmyJTRmJVElona1O5x/lA=)
                          3: B9T2tEPkzR3I7bfjqMLpjqVmqX0.roa (hash: jvG6Kma4d2VGMYtzkdxrMtFkS2r5Ue1ZSeSqhiErA3k=)
                          4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=)
                          5: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=)
                          6: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=)
                          7: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=)
                          8: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=)
                          9: doz6pIZLFsQi2mYQNJFMwi6P3-w.roa (hash: cmXkx2OZFz2XattOJlW1YfABpPcx3f/r/UMGYZNOMGI=)
                          10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=)
                          11: pCc_cSWUTGqBPQv4cw6oAWrJ3Dw.roa (hash: 592DXKAG5uM8BEJZmdLRa+vW+5yO7qDryAvPgg1YlKU=)
                          12: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=)
                          13: skmoc3tp5OkjM_6wfutQ31EoBWA.roa (hash: 0MTFYX7HC0uHcLfqYHCbppR4Ps5iN23w8VXQLkhShp0=)
                          14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:26:1c:a7:55:39:ef:7f:ae:d0:cf:8e:98:fd:35:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Sep 11 05:01:08 2025 GMT
            Not After : Sep 12 05:01:08 2025 GMT
        Subject: CN=1f2f1509d1b04622d0eeacc35380bcdeabbb1172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:dc:c2:c4:ca:76:22:19:8d:e7:26:3f:46:
                    87:35:0c:ff:37:c1:3e:86:21:c3:68:cc:44:5b:6c:
                    b7:55:76:b5:98:22:1a:7a:74:07:84:96:0c:81:a6:
                    4c:c7:c2:34:f7:a9:94:fb:d6:6f:cc:88:89:87:14:
                    9b:df:b4:d2:d9:8e:cd:47:20:10:f7:28:ee:54:3e:
                    61:92:24:4f:5c:08:36:eb:46:c6:7b:b3:16:e5:8a:
                    d8:0e:c0:2e:6e:56:59:d3:69:ca:04:da:a1:99:67:
                    7c:b9:42:11:e5:56:2f:cb:5e:b2:de:62:7b:23:38:
                    24:d4:79:be:92:ea:23:ed:f2:b0:46:c1:03:52:9e:
                    40:33:1b:e7:26:04:36:c4:8b:e5:94:fb:58:31:4f:
                    fb:f6:d9:5a:89:1a:50:0a:57:ef:6f:35:bf:df:a1:
                    7c:97:a0:77:0a:7a:19:1c:40:6f:60:ef:92:c5:06:
                    6e:41:d9:c3:5d:e4:94:79:96:e2:f4:6b:be:af:26:
                    c6:db:23:b6:54:74:10:3c:d1:ef:c4:02:1f:6d:e0:
                    a2:78:bb:17:c5:dd:9e:82:a6:22:e1:c2:2c:53:69:
                    5c:e0:04:1b:60:c0:96:3b:bd:e0:12:03:34:f1:1b:
                    cf:71:a5:24:a8:13:9a:7c:82:86:24:fc:04:97:d1:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2F:15:09:D1:B0:46:22:D0:EE:AC:C3:53:80:BC:DE:AB:BB:11:72
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1c:69:ec:00:e5:c0:f1:73:65:5b:03:59:72:15:6b:dd:d5:
         fd:86:6b:8b:bd:ce:97:8e:6d:42:84:23:41:fa:69:52:63:88:
         c6:4a:d9:23:60:15:23:5c:c7:78:05:88:62:72:d3:35:6f:68:
         8b:2c:70:d3:aa:80:be:1a:88:b5:a0:84:33:90:56:a8:c2:d9:
         01:59:ad:12:35:ab:ac:ac:b6:64:09:c0:eb:f9:3f:bb:c2:27:
         78:35:d6:63:4f:ee:ff:3d:18:69:e8:8e:73:87:c7:d2:85:76:
         c7:ac:c5:50:5d:0c:14:93:d1:60:2f:13:25:04:4f:79:22:69:
         22:fc:63:ea:8b:ab:d6:5e:51:f1:c8:e9:c4:86:ac:ca:0d:c9:
         c4:53:c5:25:c0:a6:ff:a1:8d:77:64:01:97:59:a8:6e:18:9d:
         69:81:62:5d:9d:f2:27:5f:fe:16:10:00:f6:bb:59:54:7a:8c:
         eb:2f:2c:a7:29:8b:f9:3c:f7:54:44:56:5e:98:6d:54:8e:11:
         ed:d9:67:41:03:d9:09:ed:e9:99:95:79:a8:24:8a:e3:e8:ff:
         df:df:63:3a:cb:95:d7:37:3e:45:9b:72:cf:df:ae:72:f3:2f:
         4b:78:d3:64:33:69:0d:c3:a7:88:88:7f:3a:22:27:82:4d:ec:
         95:22:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:51:11 2025 by rpki-client