Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          9ZlRL/GxfTvfrWqegnF2EpzQkfUfzLsYmDlAe7vWJEg=
Subject key identifier:   14:CC:04:FC:C4:DE:57:D4:C6:05:15:68:F3:FF:B0:80:CF:AF:78:66
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       01988A69D2D7DEBDA5FD82E0FBA1CBDFE911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          05A6
Signing time:             Fri 08 Aug 2025 16:00:47 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:47 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:47 +0000
Files and hashes:         1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
                          2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
                          3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
                          4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: /SCRsfCmj3c2lKSuT2KG4uuzOg15Xae4pyOGTpSD58g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:d2:d7:de:bd:a5:fd:82:e0:fb:a1:cb:df:e9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: Aug  8 16:00:47 2025 GMT
            Not After : Aug  9 16:00:47 2025 GMT
        Subject: CN=14cc04fcc4de57d4c6051568f3ffb080cfaf7866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:40:85:bc:49:88:da:a0:d3:61:29:58:95:
                    b7:50:85:af:8f:ad:8e:ea:3f:d0:67:06:5c:66:33:
                    db:a8:0e:ef:91:4e:ec:c0:e0:86:98:e1:8b:4b:b6:
                    17:51:90:5a:c7:d8:5d:22:4a:9c:94:48:74:ac:0b:
                    1f:e0:c1:18:74:2a:fd:90:4d:ef:6f:ec:a1:dc:df:
                    70:4e:8f:2d:fe:d3:e5:37:22:63:12:c1:8e:99:ed:
                    97:79:77:29:36:6b:42:28:42:a7:1e:9b:20:4f:a2:
                    ae:a6:2b:8d:87:5f:66:86:25:1a:0b:98:d8:1c:9f:
                    54:ec:56:e3:d0:fd:09:bc:43:57:37:3d:30:8d:41:
                    0e:07:42:3f:fc:bd:f0:f4:61:f9:4c:c6:8a:44:84:
                    f6:8f:74:73:3a:21:a8:53:eb:e2:4d:f0:e0:56:55:
                    21:4c:6e:b2:c2:4e:18:a1:c7:e7:f9:d4:ca:f4:bc:
                    5d:79:cb:6d:04:52:1e:51:f1:ed:b6:a5:ab:e3:ca:
                    d6:98:82:ce:5d:64:11:a4:41:a8:7b:2e:28:9b:0b:
                    60:d8:b7:17:a7:e9:f0:e4:53:a1:a9:32:ff:f2:62:
                    19:6f:38:f7:70:e0:39:08:72:8b:7b:ea:1d:5a:59:
                    bb:3f:a3:b4:1a:95:d5:7d:40:7b:c5:1a:f9:7b:e6:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:04:FC:C4:DE:57:D4:C6:05:15:68:F3:FF:B0:80:CF:AF:78:66
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:54:6e:1b:8d:da:19:70:7b:fd:62:72:7e:a1:e6:63:73:c9:
         04:7a:e6:01:ea:30:86:6c:f0:77:83:80:96:62:ed:a0:d1:15:
         fe:da:8d:55:3b:0a:c5:07:af:6c:c6:5c:0e:b9:ce:4c:4e:28:
         cb:85:1d:bd:4f:5d:72:32:d2:f3:6a:8a:26:eb:98:ad:a8:52:
         86:bf:3d:a9:45:27:e3:cd:4e:12:dc:bf:52:bf:95:28:1d:fb:
         e6:92:56:21:7b:56:2b:5a:83:5b:a9:f3:e3:c5:44:14:29:17:
         e7:7b:72:d2:83:0b:2c:f9:f5:2e:bd:1d:56:70:cf:ba:13:ca:
         2b:b4:8b:67:5d:cd:69:0d:38:74:32:03:f4:cd:12:96:e8:98:
         78:a4:14:ae:80:5b:5d:d8:6c:e1:13:7f:77:2a:b6:f9:7d:4e:
         38:54:e4:4b:15:95:5d:21:67:a6:d3:39:6d:78:e8:a3:58:25:
         b5:9a:f8:da:56:6a:f8:30:9b:0b:fe:72:bf:39:cb:27:22:1e:
         46:4c:df:4b:42:d0:16:c0:a7:9c:9d:5e:bf:13:96:9f:a5:72:
         21:19:5a:2f:b5:c9:60:73:2e:96:5c:95:80:1f:be:f0:0b:12:
         96:28:b6:56:68:84:54:74:53:2e:a5:d1:ab:5c:23:40:99:e1:
         6e:03:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:22 2025 by rpki-client