Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
File:                     oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json)
Hash identifier:          OQae4+NZZ4aG4hn1pesg2EUVL2w8/JJ03qQ+UyToh2M=
Subject key identifier:   C7:CC:04:EE:DA:8D:96:DE:04:B0:92:79:10:F5:26:14:DE:7C:80:6B
Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Certificate issuer:       /CN=a1208242656123c0c90b6168d09b2d8a67617bec
Certificate serial:       0199180A5858EC632A2398332BCA279B7C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
Manifest number:          1669
Signing time:             Fri 05 Sep 2025 04:02:35 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:35 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:35 +0000
Files and hashes:         1: YAoUenHihT4DQlafryFUSek-9CM.roa (hash: U8ZmX/KGlPOXoWxEXiPpdG5cQfV6PXbF8uCn/cMmNEA=)
                          2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: 5M8HSmTDY7GndBjJp5Zn1CPdyHNxwxuf/roEmdCnnjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:58:58:ec:63:2a:23:98:33:2b:ca:27:9b:7c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec
        Validity
            Not Before: Sep  5 04:02:35 2025 GMT
            Not After : Sep  6 04:02:35 2025 GMT
        Subject: CN=c7cc04eeda8d96de04b0927910f52614de7c806b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:9d:d5:fb:76:13:7b:93:b0:03:64:9a:31:
                    32:37:53:b7:97:89:48:13:c0:c0:b5:23:46:67:3c:
                    a9:ca:cb:51:40:00:d8:13:81:e8:57:d0:47:f1:45:
                    e5:03:17:47:d0:06:95:b3:1e:09:61:09:b0:39:cf:
                    8f:0a:90:54:9b:35:c8:56:d4:7d:a8:cd:d2:e4:88:
                    ac:f6:b8:83:20:95:63:9a:fd:8b:f6:20:0a:c7:0f:
                    70:03:f6:ff:b7:e2:d0:81:51:9b:e9:d0:86:79:b3:
                    fb:ff:e5:8d:96:a2:34:5b:73:12:90:fa:cf:24:5f:
                    d2:9f:e8:db:ed:b1:f8:cc:19:7e:28:b0:69:91:16:
                    75:d8:70:5e:92:97:2e:88:d5:e9:e1:c3:4d:9d:f1:
                    40:ff:66:2e:16:6d:7d:9e:07:17:2b:03:7c:5e:7c:
                    09:80:df:21:e0:69:b6:8e:a5:63:c3:ee:d0:f8:a8:
                    a8:aa:b3:10:d5:86:00:80:65:7b:b9:82:2a:da:23:
                    32:9d:57:a4:f5:07:a2:3b:f0:c0:2a:fa:36:5b:19:
                    10:fa:c3:d6:0e:a6:2c:72:6d:27:22:69:5c:d8:d0:
                    4b:96:b2:47:07:2a:25:05:14:98:d9:c9:cd:e4:b9:
                    13:d5:fd:62:f8:4d:7c:0b:5b:b3:48:54:45:39:d4:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:04:EE:DA:8D:96:DE:04:B0:92:79:10:F5:26:14:DE:7C:80:6B
            X509v3 Authority Key Identifier:
                keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b3:cb:56:fe:d1:4d:80:fd:28:b6:46:54:8d:64:60:6c:d5:
         61:99:37:53:aa:8f:67:40:e1:d7:de:03:a0:5f:29:9d:e1:43:
         f7:0d:3a:f9:28:23:ab:b8:14:2e:b8:4d:9c:22:af:46:85:b6:
         ce:ed:44:4c:cd:d1:3c:ae:32:19:20:34:59:e2:fb:1d:06:4c:
         cb:18:9c:8c:cf:94:0d:61:8e:e0:f0:81:94:40:de:8c:ab:70:
         0d:c9:6c:9b:b5:59:93:b5:b0:2c:2f:4e:88:ce:b6:3d:d4:40:
         b5:e1:b5:00:f6:cb:7a:bd:07:29:96:55:fb:4d:be:76:d3:68:
         60:43:19:76:17:a4:e9:62:e6:f6:31:0e:80:50:71:1e:28:c9:
         e3:6a:bb:2b:50:a2:4c:8e:06:b4:b9:a1:8e:fe:13:0f:7d:ed:
         ef:86:60:f5:e2:07:8d:73:82:cc:9d:e5:eb:2f:b3:b9:90:39:
         92:e0:b8:a2:94:2d:24:d2:e2:cf:fe:7e:b6:bc:af:34:d9:59:
         3e:8e:3f:0f:95:5e:2d:e8:37:e6:25:3f:1e:da:89:4f:cf:b6:
         df:2e:a8:19:84:07:fe:09:63:59:ec:10:c8:ba:73:d2:45:db:
         ef:81:76:fc:4a:80:2f:4e:69:89:ba:2e:17:57:09:63:40:ff:
         46:e2:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:21 2025 by rpki-client