Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          CrOXyAWBMXtvCiAawNEiG7ZEC6Ur9KtvV+O/LMBapG8=
Subject key identifier:   CD:97:37:B9:3D:62:B1:4F:E9:4A:56:CE:CC:9C:D2:FA:66:8B:5E:0B
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       019927E97E755FAA2AD76243B9C5D5D2B1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          08EE
Signing time:             Mon 08 Sep 2025 06:00:37 +0000
Manifest this update:     Mon 08 Sep 2025 06:00:37 +0000
Manifest next update:     Tue 09 Sep 2025 06:00:37 +0000
Files and hashes:         1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=)
                          2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: pUlE/UqeNmTE6xovpAL3SUvvOtg8cn2F9ErP6yOrKTE=)
                          3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=)
                          4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:e9:7e:75:5f:aa:2a:d7:62:43:b9:c5:d5:d2:b1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Sep  8 06:00:37 2025 GMT
            Not After : Sep  9 06:00:37 2025 GMT
        Subject: CN=cd9737b93d62b14fe94a56cecc9cd2fa668b5e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:d5:2a:ca:d0:85:11:20:58:e4:50:8d:ed:
                    40:3b:08:12:7f:f0:5f:36:6e:32:aa:09:0e:c2:e4:
                    af:c4:ff:4b:f1:7b:fc:32:71:81:d0:7f:eb:f5:61:
                    a4:91:fa:d4:7c:a1:03:00:96:1f:8d:fa:10:4d:ee:
                    e1:c0:4c:c0:94:85:bc:b2:c9:19:94:70:9c:68:c1:
                    25:7a:a1:80:0b:63:80:f9:16:1f:a4:78:af:10:6e:
                    84:e4:ba:f9:a3:a6:c8:06:33:e0:88:ad:56:03:74:
                    68:95:12:5f:12:0b:c3:ba:69:14:a5:b9:f2:84:66:
                    c3:04:7a:bc:a6:6e:5f:31:ce:13:e4:34:95:2d:3e:
                    59:32:7e:de:65:4b:c6:ac:6e:99:17:f2:ca:76:d7:
                    38:04:a5:cc:c5:ad:81:89:cf:9b:98:66:3b:a9:14:
                    85:37:f8:10:63:7b:e7:4c:54:d7:a7:d1:65:37:64:
                    53:53:f7:f5:32:ea:30:1f:92:ab:11:3a:47:2a:43:
                    cd:84:97:21:6e:bc:03:53:18:f3:81:40:b8:6d:36:
                    8f:e2:27:f7:0a:c5:7d:3b:74:90:49:51:ef:d8:00:
                    82:a0:0c:b8:c7:b6:db:e6:17:2f:d1:52:16:44:09:
                    cf:6f:f7:97:6c:b0:0c:0e:b6:12:b7:7d:e4:da:37:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:37:B9:3D:62:B1:4F:E9:4A:56:CE:CC:9C:D2:FA:66:8B:5E:0B
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:0a:ec:de:5e:82:e5:b1:a7:b4:94:73:44:17:15:b2:f3:
         16:e9:91:f2:72:54:8f:30:47:3c:64:7c:a6:fd:08:b2:6b:b4:
         3a:87:20:68:12:4b:60:11:41:9d:54:09:93:7c:8a:53:c7:75:
         3e:19:63:e4:3e:0c:7e:98:07:80:04:c7:a3:4e:15:f4:2a:8e:
         c3:df:bd:47:e6:a6:f0:81:c3:1c:c0:c4:e7:e3:c0:6e:30:c1:
         3f:88:71:f0:49:8c:79:e3:20:ea:f3:53:6f:e9:58:90:a0:63:
         5c:cd:34:39:26:e1:12:ba:6c:93:51:d4:08:9e:4f:ec:c1:56:
         e6:b9:10:1b:05:ea:60:74:fb:36:18:da:3c:11:7f:2a:2d:6f:
         de:a1:e3:8f:1b:7f:ed:39:4d:dc:ff:e8:e6:ed:16:96:d2:c9:
         7d:e1:a0:c9:4f:b5:8a:36:3e:95:dd:30:9f:8c:ef:8f:13:ac:
         19:2c:37:ad:28:83:0f:e5:e4:42:cc:af:13:09:f4:c9:bf:cd:
         09:20:df:c2:6d:02:9d:c3:0c:55:d7:bf:9f:6c:22:b6:85:62:
         17:c8:a6:d9:47:f8:85:92:d9:87:5e:2a:c6:88:ca:1b:b7:66:
         a5:4d:e0:df:46:e3:8f:79:a9:68:ed:bb:56:50:85:8c:bf:9a:
         86:8e:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:36 2025 by rpki-client