Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File:                     ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier:          +ZqF6TrIQ8vGFY7smp+Kz3kUkSBrhUdGlwr//Lscj9U=
Subject key identifier:   EC:1D:C2:F0:DF:33:6F:D6:EA:AE:17:CE:6A:E3:6E:B3:8D:C9:1C:6F
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer:       /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial:       01992BC67DEEE843AAC35D4303F71DD98A53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number:          1686
Signing time:             Tue 09 Sep 2025 00:00:52 +0000
Manifest this update:     Tue 09 Sep 2025 00:00:52 +0000
Manifest next update:     Wed 10 Sep 2025 00:00:52 +0000
Files and hashes:         1: 1jV2xqilASPXHu5Grr3x0X0ICp8.roa (hash: 8Jrll8bHg095WBKUtpaKs7HT5xMgUtd6Q0GjYhqobro=)
                          2: JHsea8ldAse1CeGI2SumLCiOnDc.roa (hash: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=)
                          3: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (hash: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=)
                          4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: Fy12l3wYxKUL6c3EGf95wOP/D9O1Oalwv7LIjHOPH9U=)
                          5: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (hash: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:c6:7d:ee:e8:43:aa:c3:5d:43:03:f7:1d:d9:8a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
        Validity
            Not Before: Sep  9 00:00:52 2025 GMT
            Not After : Sep 10 00:00:52 2025 GMT
        Subject: CN=ec1dc2f0df336fd6eaae17ce6ae36eb38dc91c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:9b:87:34:df:54:7f:59:00:a2:7a:09:fe:
                    83:84:eb:85:e9:58:80:b9:80:4e:1e:03:ca:27:59:
                    36:39:66:04:90:e1:8e:cc:37:d0:61:b3:5f:0a:cd:
                    cd:a3:60:82:0b:fe:ca:cc:32:9a:88:cb:05:a1:90:
                    a5:d8:e5:59:3e:f1:aa:fd:cf:ed:4c:2d:23:8d:4c:
                    36:70:b2:53:4e:3a:e2:5e:30:c3:71:57:cc:ae:67:
                    8f:05:6b:32:59:88:64:22:b0:94:84:85:a8:f6:74:
                    58:53:b2:f5:0b:39:2c:e8:c1:49:08:aa:06:ea:2f:
                    da:e6:2b:e7:eb:68:81:d6:8c:e6:aa:5e:cc:25:ee:
                    38:6f:e2:f1:0b:35:1b:88:c9:49:27:2a:5c:ee:e0:
                    3f:05:a8:fd:b7:df:5b:66:18:aa:9d:27:08:55:64:
                    90:85:42:09:35:12:2e:7f:11:af:e9:7d:36:79:06:
                    5c:6e:e0:36:7e:64:95:0c:8a:e8:21:48:7a:9a:be:
                    ac:fc:4b:1c:c7:67:f2:4f:66:e1:ec:aa:92:18:a4:
                    6e:fc:d3:27:14:57:76:83:fb:d2:d2:0f:99:cb:9d:
                    6b:aa:6b:00:a2:0f:dd:ce:4b:71:74:7f:bd:0a:6c:
                    af:f1:aa:c0:79:be:0e:5a:38:45:d8:fc:15:85:82:
                    4b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1D:C2:F0:DF:33:6F:D6:EA:AE:17:CE:6A:E3:6E:B3:8D:C9:1C:6F
            X509v3 Authority Key Identifier:
                keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:61:a6:54:4b:73:b8:dc:18:db:69:d4:5e:b0:88:75:40:
         bc:eb:3d:bc:15:7c:f3:c3:a8:08:ea:bd:98:ab:2e:3a:02:70:
         b5:31:7e:3a:b4:9d:70:1e:c2:93:dd:9f:66:d8:9b:53:21:04:
         0f:95:32:c6:2b:f6:13:c2:85:f3:d6:04:8d:e7:cd:c3:d9:df:
         e1:9c:8c:b6:f0:ec:24:4e:81:8e:7d:90:28:ef:9e:e5:bf:d4:
         d5:b4:b2:2a:f9:c9:03:cc:95:74:70:ef:e5:ab:8e:c9:8d:6e:
         f4:83:51:36:9e:de:37:8e:1e:40:58:74:f7:8c:dd:77:9c:22:
         80:9c:d8:5c:97:2f:db:6a:b1:71:82:ea:7e:2f:9a:2c:6c:ea:
         83:f9:3a:17:2f:94:c0:ed:a4:13:be:26:7f:ca:12:b2:7d:3e:
         a9:17:34:cd:bc:79:fa:52:80:6a:04:67:41:a3:25:c7:48:dc:
         70:73:2a:ab:a0:0d:ae:30:ba:1f:9e:ee:10:67:ed:fc:97:34:
         fe:fc:b9:cd:f5:c3:20:83:ed:7f:ff:78:7a:4e:0c:2f:60:9f:
         07:08:22:7c:a6:ba:d9:89:51:68:96:2f:a2:69:59:b1:01:2d:
         ae:7e:3c:e1:74:2c:6e:c7:64:dc:f5:82:b6:b3:ff:fb:ca:48:
         a9:f4:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:46:35 2025 by rpki-client