Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          4yIR3VzaIhG6l3f7StJwMDomrRhVbGy+OI1TItmYxFo=
Subject key identifier:   F7:F8:47:FE:49:7A:70:73:24:F1:5F:7D:E0:13:E2:9D:AB:57:CC:8C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       01992C6B63C62426A474923174313D326431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          16C8
Signing time:             Tue 09 Sep 2025 03:00:59 +0000
Manifest this update:     Tue 09 Sep 2025 03:00:59 +0000
Manifest next update:     Wed 10 Sep 2025 03:00:59 +0000
Files and hashes:         1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
                          2: JEcABUIWGeGAB7DoV3FGz8zRXXA.roa (hash: 7sPzS1pkPk8O4WZjl6r+glhCeSX8/f48mK6NROPhc4o=)
                          3: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
                          4: NL8Ou-iATsKp5WM-gQatVEp_ul0.roa (hash: DC+WUcLNi+F3Lcer1Mx3nWvFPfItInB9MdTm2tGHge0=)
                          5: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
                          6: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: 7h2Q35NfWJIPqvP3V7lyMVnHvLn8n5nZumnsDJXCU5U=)
                          7: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
                          8: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
                          9: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:6b:63:c6:24:26:a4:74:92:31:74:31:3d:32:64:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: Sep  9 03:00:59 2025 GMT
            Not After : Sep 10 03:00:59 2025 GMT
        Subject: CN=f7f847fe497a707324f15f7de013e29dab57cc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:2e:06:cf:45:fb:7c:41:20:19:7a:62:7f:
                    79:d4:19:0f:73:8f:1d:3c:8b:a0:1c:c5:be:09:da:
                    fc:0a:f6:c5:76:0c:ce:75:37:b3:0a:13:86:ef:9b:
                    81:e9:65:8b:0b:ad:7b:b0:57:64:01:27:6f:8a:9f:
                    5e:21:8a:6f:35:5c:ca:4b:42:4c:99:e8:f3:8e:68:
                    99:24:ba:a7:b0:03:78:86:48:45:35:9e:03:88:b2:
                    87:70:c7:bb:ee:41:10:24:80:92:e4:c9:82:9c:c2:
                    c5:6f:eb:e9:e7:bc:a5:d3:af:51:b1:c9:b9:73:10:
                    71:08:8d:d0:8c:f5:05:d5:c5:a5:ad:de:36:5e:0c:
                    94:58:a5:ff:30:b7:46:56:a9:be:2d:f7:2a:16:77:
                    4b:10:86:54:ff:9d:42:f5:78:5b:2f:c9:ca:f6:43:
                    10:c4:39:c6:1b:de:59:2d:36:da:de:4f:e9:61:fc:
                    c9:f8:40:a9:cc:c9:18:b2:bc:9e:9f:cd:e1:34:26:
                    fc:a4:05:6c:12:62:33:fe:e1:2a:eb:23:9f:6d:10:
                    06:1f:ea:56:f6:84:46:32:d0:2d:76:7d:f8:29:4a:
                    fc:c1:3a:7a:dd:fe:6c:97:d3:95:8d:57:2d:bc:92:
                    50:da:13:f4:d2:2d:ec:6d:dd:dc:67:b1:61:10:a5:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:47:FE:49:7A:70:73:24:F1:5F:7D:E0:13:E2:9D:AB:57:CC:8C
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d4:e3:9f:49:1b:15:e1:d2:59:4b:71:99:71:ca:d5:90:a6:
         bd:a6:8d:07:5d:72:84:d1:d4:10:ff:e7:ff:1d:ca:75:45:fd:
         21:34:50:8f:3f:21:8c:5a:7e:ac:1f:57:f0:a0:82:a1:e5:ca:
         20:56:0e:cf:fc:45:82:2e:be:4a:2b:cc:32:97:ed:52:1f:52:
         78:78:cd:21:07:78:77:c7:60:f8:71:4d:df:83:a5:82:19:92:
         42:82:85:a0:b5:9c:31:1b:69:8d:83:46:71:68:85:25:df:36:
         83:23:7e:ca:bc:1c:d0:ce:2a:b7:97:18:c3:fb:8a:93:97:d7:
         f9:5b:f8:e8:dd:ee:3a:af:95:2c:8d:b6:91:a5:5f:f6:52:42:
         0a:ef:00:76:8e:25:37:fe:a0:3d:65:2e:02:70:cd:7c:19:e4:
         69:65:27:83:37:dd:6e:ea:34:82:c8:cf:a4:1e:c0:d4:af:56:
         29:42:63:70:64:02:19:f5:38:ee:93:48:2b:df:3a:56:bd:8f:
         e7:81:c6:33:96:6a:62:6c:53:62:b6:37:4c:7b:6a:c0:c1:4e:
         6c:01:73:42:93:8a:e5:de:a3:64:fe:00:09:a1:7e:a2:3d:c0:
         4f:7d:1d:4f:79:5d:1c:55:eb:ca:b5:bb:7f:4e:8b:24:12:05:
         a6:aa:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:57:39 2025 by rpki-client