Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          HSezvCU9WofyIAbbm3Bwfy1xrCvGly1yZA58UOHj0iI=
Subject key identifier:   E7:77:D9:41:16:C3:74:CC:30:4D:5B:7A:78:0C:54:10:75:1F:90:19
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       0199345B51EC951211D44497B64F006B3E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          1681
Signing time:             Wed 10 Sep 2025 16:00:23 +0000
Manifest this update:     Wed 10 Sep 2025 16:00:23 +0000
Manifest next update:     Thu 11 Sep 2025 16:00:23 +0000
Files and hashes:         1: 0_4kPqijH_S1Eq86-B5t4Qptkkc.roa (hash: monnJnatCyTOeVv1VvBMMHzgkVsFi5krNSX8ZQ1sFsY=)
                          2: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: EsIb3iA817v5uvPWbYs35gMDx2b1LovTxapgzNq8Fgg=)
                          3: F4UI4ybOifBfn-xOfyHAde2Mj9c.roa (hash: 0PCH6BF7/3q43D682K2lKa/7ZVqoTmH59+HT5oGtsRc=)
                          4: WwKcVBcW5wTgxa_7pS-LdX_ExQE.roa (hash: 3lu/ayfZLYDj8vnQ7f7Xh2AT2XdViQ0lLouzSMEvwU0=)
                          5: _PqP39FzftfO-7VLMM2dmTLrMcs.roa (hash: CJ+28nkgf4oNGdqZSE90eYJxAT+csrK+YiNrA00VE1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:5b:51:ec:95:12:11:d4:44:97:b6:4f:00:6b:3e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Sep 10 16:00:23 2025 GMT
            Not After : Sep 11 16:00:23 2025 GMT
        Subject: CN=e777d94116c374cc304d5b7a780c5410751f9019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:47:97:d9:2c:8e:24:0e:66:2b:05:b7:97:
                    47:86:79:6e:6a:89:14:40:8b:31:e5:c4:14:62:97:
                    4d:4c:b6:63:fb:75:96:0d:3b:90:1c:f5:ad:cc:d1:
                    0c:2e:13:3d:90:f6:5d:f2:16:9c:31:58:d0:ff:76:
                    5a:89:70:b9:33:61:f5:a7:a3:dc:b6:bf:c6:35:5a:
                    4d:1a:a0:ea:e8:65:fe:04:e2:4f:a6:33:7f:ca:30:
                    17:e6:a8:0c:13:11:21:b3:c3:c9:6a:53:89:f2:8e:
                    d2:73:6e:c0:08:ab:7c:25:c5:27:b9:22:f2:5a:ed:
                    45:77:53:15:4d:d0:85:e5:a5:e7:ef:b2:d7:f7:d4:
                    a9:80:eb:28:10:df:56:1d:aa:58:79:61:d8:06:91:
                    b3:db:a0:5e:32:a0:9f:bb:24:62:90:8f:ff:3a:ca:
                    e8:6c:d5:e4:4c:46:83:4c:6b:8c:a3:fc:ac:80:ee:
                    32:0b:aa:0b:47:d7:aa:d3:c4:f9:12:3b:de:14:f0:
                    16:9b:72:1e:a0:42:9f:e6:47:9a:6b:41:0c:66:ef:
                    c1:37:99:d9:66:83:4c:11:09:1e:77:e1:3c:94:d4:
                    a7:37:f2:f5:18:68:8d:dd:02:12:ec:a8:10:f4:75:
                    a8:ef:b8:f0:16:b8:bd:0e:9f:77:78:b2:45:f6:7e:
                    3a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:D9:41:16:C3:74:CC:30:4D:5B:7A:78:0C:54:10:75:1F:90:19
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:31:d0:35:8c:07:e9:1c:dd:a4:86:6c:4c:4a:ea:d9:56:8c:
         c4:46:28:fe:eb:d8:ce:c5:4e:b8:90:ef:37:0f:ea:65:b5:b2:
         71:62:67:c3:bb:4e:ed:76:67:df:d5:dc:ba:97:79:c8:9d:af:
         c1:3f:4e:8a:ff:5f:f0:4f:3d:27:df:ff:eb:2a:63:8f:06:eb:
         4e:08:2b:06:32:66:07:2f:85:c5:be:fa:29:73:87:43:b5:76:
         49:19:08:ed:e7:5b:ef:09:06:9c:64:50:7a:ee:eb:e2:6b:d3:
         02:ad:8d:7f:f8:c0:35:7c:a9:6c:9e:cd:e0:ce:3c:0a:4c:f3:
         ca:13:a3:a3:bb:86:0f:12:11:cc:fa:c2:f3:f0:48:e8:87:f4:
         13:90:da:46:4a:84:ca:1d:d1:b3:46:77:e2:61:a0:94:45:92:
         1f:8d:45:25:6a:bb:94:82:70:bb:b2:8d:f3:03:91:18:88:89:
         01:2c:da:44:3d:8b:82:10:d9:63:0a:97:48:3a:1b:13:fe:84:
         84:6e:6f:15:00:7a:16:c8:c9:42:a5:46:70:40:ab:85:3f:31:
         ed:89:b5:94:19:40:c1:6c:92:ec:56:f7:da:88:ca:13:51:62:
         99:0b:a0:b6:d3:6c:00:70:65:2a:22:45:fe:25:8d:f0:a6:9e:
         05:a9:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:15:45 2025 by rpki-client