Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          LDh+Q3y37I+NW21mE1kLtsiei7wPitLzpFQ3V+ifOtc=
Subject key identifier:   F5:0F:43:0C:0F:10:5E:52:F6:7A:F4:8C:3A:38:33:67:DA:0D:78:D3
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       019936B772438014DD88102412387416D382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          1685
Signing time:             Thu 11 Sep 2025 03:00:15 +0000
Manifest this update:     Thu 11 Sep 2025 03:00:15 +0000
Manifest next update:     Fri 12 Sep 2025 03:00:15 +0000
Files and hashes:         1: CWFEcKSRZBYlT2vWWkV5nYcBlHI.roa (hash: nc++n41sb/ngoYKjInAuk6Rbh3YfF9Q+XH3kpi1+H74=)
                          2: VPHKfI9Bl4Taeo5pgVvlMLcjFd8.roa (hash: zTYK8qWpp/Dt9m/Mxb0HNtRwtTGNwLiKpPx5D1urBUM=)
                          3: VTXHl8dG32EYcH_6gVGECNfv4HE.roa (hash: OwAzqU5P4MPrWon+q2zEE3RG5tOGAUYcg7C82SZ1F18=)
                          4: jkuyH9eYx7BIa6XQvCRl1c9y2DE.roa (hash: bCnQRe/M9g8OGQc10kTJFBFUEjTi119eOmfCQtq2nOU=)
                          5: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: A6MHT51wpy4iGFuuCgo+dQgav9RFKH6YZ6WDN1nOKzE=)
                          6: z66BxiEQL0BxufLoLDXOhArJEGw.roa (hash: OuXUQRv18RqUvhnxvSqnbR495dW95DdgeGXdgneZzqQ=)
                          7: zys3X2MKT9uf7eO5GWpW3s91BZg.roa (hash: OL6iQHPHj+cEOBdNlLg9T9lcRKeNhXgwtS9FbcNT6yQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:b7:72:43:80:14:dd:88:10:24:12:38:74:16:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Sep 11 03:00:15 2025 GMT
            Not After : Sep 12 03:00:15 2025 GMT
        Subject: CN=f50f430c0f105e52f67af48c3a383367da0d78d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:c4:fc:6f:29:94:56:6d:58:09:37:cb:ac:
                    c4:7f:55:7c:3d:21:9c:b2:3a:c0:02:c0:7f:f2:ad:
                    ba:c8:bd:f1:ee:3d:c9:9a:9e:42:5e:69:0f:1e:7c:
                    40:d3:cc:c2:3d:86:9b:17:d6:60:89:f7:f9:39:bf:
                    a0:83:cd:6e:f1:d6:56:69:35:65:11:4b:72:06:ff:
                    f5:5b:33:4a:22:77:06:88:bc:c1:2d:62:73:2e:56:
                    75:18:7e:7d:9d:7d:13:c0:90:3f:d7:39:98:1d:b8:
                    1b:26:48:a5:ff:43:43:ce:bb:00:ba:c0:50:1f:a6:
                    a6:17:6a:94:17:50:62:d0:db:e8:50:9c:13:21:0c:
                    d9:00:59:e6:a0:ad:8f:30:e5:33:0d:3b:fd:ec:8c:
                    de:ee:a5:31:ff:fd:06:91:a3:cf:d2:88:e9:3d:05:
                    11:d3:43:51:98:9d:be:04:88:ff:79:6c:33:1f:45:
                    de:e7:d6:48:3c:4b:ab:9e:6f:07:83:6e:03:89:01:
                    fe:78:08:e1:d0:0e:da:53:36:11:48:18:e9:8e:1c:
                    fb:15:ea:2b:65:62:9b:e6:30:bb:94:b3:17:f7:b3:
                    12:c8:7f:7b:4e:06:01:6c:43:de:9a:dd:ef:85:7b:
                    0d:7a:e5:9f:5a:4d:08:bd:5f:1f:d4:d1:7c:03:2f:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0F:43:0C:0F:10:5E:52:F6:7A:F4:8C:3A:38:33:67:DA:0D:78:D3
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:de:22:1c:34:67:dd:92:db:f2:96:5f:e5:01:cb:ca:28:87:
         97:95:4d:e1:ec:71:35:f2:c7:37:32:f5:45:97:46:d5:83:0a:
         e9:b6:63:07:af:20:c1:a4:ba:4b:d3:f3:7e:5d:68:f0:88:b3:
         83:67:e0:07:b1:15:c9:ce:11:09:80:45:2e:4c:61:68:44:b2:
         95:84:3c:6b:3f:7f:12:ed:12:81:39:bf:5b:92:08:db:6a:3b:
         35:5d:81:ca:2a:2d:ea:7f:af:ca:f4:5e:fa:e4:8a:18:af:d8:
         6b:f2:0f:22:16:07:47:8f:33:c9:57:c3:ca:be:4d:72:38:ad:
         b2:6a:77:67:56:3a:99:58:fe:f5:13:ef:3e:23:eb:08:5b:89:
         43:69:c7:d8:8c:ae:92:aa:e2:aa:fa:c1:9f:4e:5a:90:34:32:
         77:c3:d5:f5:e1:65:2c:d7:b6:b4:10:ae:5c:aa:0b:ae:43:7b:
         1b:9f:72:18:2f:32:27:1c:13:27:7d:ec:0c:ff:81:8e:31:9c:
         bc:d2:fd:c0:0b:35:a1:b3:ea:9e:48:8e:ad:fe:78:22:3a:d0:
         3d:84:62:ec:e4:bd:c0:ce:70:a2:b6:d6:89:b1:ff:9d:78:e4:
         a5:cd:37:52:e5:5f:80:f2:5f:3f:19:eb:5c:c6:cb:51:fe:c3:
         01:36:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 05:02:31 2025 by rpki-client