Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          D0X6aTWohYkmLrnIHZdCnHX82nFjMUfjs2S09y8gFcg=
Subject key identifier:   11:04:70:1A:B9:1E:83:86:20:67:85:D9:74:7C:87:BB:E9:BA:28:3A
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       019964A3D06435D54D30052D018EACBA9929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          1741
Signing time:             Sat 20 Sep 2025 01:01:21 +0000
Manifest this update:     Sat 20 Sep 2025 01:01:21 +0000
Manifest next update:     Sun 21 Sep 2025 01:01:21 +0000
Files and hashes:         1: 3SbmSgtgznMIgY9EMW0ohsksXDQ.roa (hash: jsYrtOcGDVU05MMhl4kmi3+tfEL7V3krfI7Q1cONp1s=)
                          2: 5jyvM7zUsDe1Lex0DtFpG8BBbZo.roa (hash: PCMtayIHrF6LrkVGhI1nprpYM2aF/ClvU/EhrY1JrmQ=)
                          3: Dv5aKJ2pDNq6PQejY9KYLcZgexI.roa (hash: LTTZywdBBEaru6D3i2kCVgDeRzQz8voiBDF73OfU/U0=)
                          4: WeiKZlrZMWBmHmFyIba_qVs-J6c.roa (hash: QeA2Crhl6GOiBpaxxnH+m2YNQAEe2rgEWLu15CjW2Bs=)
                          5: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: s0zafN4GQQXoeALsTzzq+r6CILBVN8n6S9xHGqzunsc=)
                          6: twVpvlgGcn2wMFxLET5jabKj7lE.roa (hash: 6O74RoMA1Bml+kLutB1Hui+CE3ATKHf//KCCsZVvIEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:64:a3:d0:64:35:d5:4d:30:05:2d:01:8e:ac:ba:99:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Sep 20 01:01:21 2025 GMT
            Not After : Sep 21 01:01:21 2025 GMT
        Subject: CN=1104701ab91e8386206785d9747c87bbe9ba283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:62:d6:80:bd:41:15:b3:59:e8:f8:32:e5:
                    ec:64:ca:c5:ae:1c:f1:64:91:ea:24:58:1a:82:00:
                    cd:34:a9:17:d1:ff:fd:b9:a9:b1:e6:7d:d5:93:03:
                    e1:5a:be:b1:e3:86:e9:d7:aa:5e:91:94:7b:18:34:
                    7e:50:8f:fd:96:0f:3a:be:c7:c1:bf:8a:92:fd:19:
                    b3:fe:3c:23:0f:80:57:88:44:81:c5:db:23:1a:9a:
                    a7:ed:51:0b:c9:9d:6c:e3:17:91:90:69:65:eb:08:
                    41:ce:60:4e:1e:5b:a3:68:82:c7:27:bb:ff:c6:d5:
                    4f:68:1e:03:4b:e9:88:62:48:62:63:7e:ac:c2:c9:
                    59:ab:03:92:4b:6b:eb:2c:bd:7a:d9:86:6d:1b:79:
                    c8:95:9c:1c:a1:2c:62:d9:e0:3f:78:72:b7:e4:c3:
                    7d:04:64:82:f3:a6:00:89:b2:fb:0e:52:72:66:d3:
                    14:0f:b1:1d:80:af:21:16:ef:d2:cf:6f:d3:07:20:
                    c0:21:b0:67:9f:39:e7:7c:9a:a8:44:bf:b9:20:3e:
                    cd:00:ef:6a:2a:16:46:bd:9c:7f:1a:c3:f1:30:59:
                    5b:a6:9a:3c:17:fd:2a:67:97:c9:bd:f6:4f:bb:e8:
                    51:ae:c0:8a:66:57:e2:f4:5d:cd:64:d6:d5:c3:53:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:04:70:1A:B9:1E:83:86:20:67:85:D9:74:7C:87:BB:E9:BA:28:3A
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:5c:0d:f7:69:a5:80:4a:d1:64:d1:47:2e:87:68:35:9c:
         bb:7e:be:e0:11:fd:b1:db:71:33:6a:d6:fd:7f:9e:a5:a2:7d:
         13:34:1b:f4:63:20:0c:13:e6:8a:32:be:b3:38:6d:5e:ca:70:
         16:b5:37:f7:44:6e:42:be:24:68:0a:26:6f:fc:89:df:1b:cf:
         57:d1:b8:21:11:e4:5a:df:17:1b:be:b5:65:3b:a1:62:be:46:
         2a:e7:2d:55:92:81:d4:e1:4c:9d:0c:6c:fb:fa:1d:db:11:05:
         5c:36:e0:6b:34:75:1b:ba:a6:e6:71:b0:33:f9:29:e2:39:d1:
         22:9a:e1:50:00:28:5e:af:0f:c3:03:04:c2:db:80:6f:36:0f:
         9a:75:44:70:e0:09:2f:dc:72:8d:2d:9c:75:61:72:57:dc:5c:
         4c:5c:be:89:27:24:4b:70:09:0a:e0:f7:4f:67:d4:bb:57:d3:
         6b:06:0f:db:df:87:23:84:0e:6e:0c:cc:8d:39:c2:b0:e2:c7:
         ae:63:65:c3:ce:1d:04:bf:7f:c6:51:a7:0b:dd:89:e8:e8:a9:
         21:d7:d8:ac:24:24:4e:4e:f8:70:ae:32:1a:50:de:b3:68:c4:
         c8:7a:04:a5:f4:7c:5b:88:5b:5f:a8:19:09:2d:03:bc:4f:4e:
         07:a2:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 11:09:10 2025 by rpki-client