Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File:                     p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier:          GBGllpbrRj+fzbH3OFrKDQqSeVzwRVw6h9tq4J+fz2I=
Subject key identifier:   EB:C9:AA:C3:B8:C4:D7:D1:7F:6B:83:82:6D:A2:82:83:57:D1:4C:8D
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer:       /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial:       019889FBF4C41519B269EF58BBFC6BDE02AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number:          1326
Signing time:             Fri 08 Aug 2025 14:00:47 +0000
Manifest this update:     Fri 08 Aug 2025 14:00:47 +0000
Manifest next update:     Sat 09 Aug 2025 14:00:47 +0000
Files and hashes:         1: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (hash: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=)
                          2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: vzH0DBTOzMkX1U/cn7syT8Ih2X6pgFEqNVG6d2URsSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:fb:f4:c4:15:19:b2:69:ef:58:bb:fc:6b:de:02:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
        Validity
            Not Before: Aug  8 14:00:47 2025 GMT
            Not After : Aug  9 14:00:47 2025 GMT
        Subject: CN=ebc9aac3b8c4d7d17f6b83826da2828357d14c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:e0:d1:d5:68:dc:82:23:26:ab:1f:f2:99:
                    5d:92:d9:ae:c1:1a:3b:b4:43:78:0e:88:90:6e:63:
                    a0:ac:99:0f:bc:9b:0a:bf:08:46:0e:8c:9b:7f:ca:
                    5b:f9:a6:bc:46:b1:a2:f9:fc:91:b1:40:89:36:08:
                    58:cf:8a:c4:97:e4:6b:dc:14:0d:e9:ac:9f:b3:2a:
                    15:84:a5:0a:21:3b:7b:e3:f7:dd:b8:02:32:cd:7e:
                    61:ef:92:ab:d8:47:5f:c9:db:fa:b7:af:91:c1:5a:
                    e2:02:7e:0a:44:c9:d2:9c:f6:e9:77:1c:06:32:9b:
                    c6:93:12:69:a0:8f:6c:9e:78:71:2a:df:d9:7e:26:
                    0b:b0:bd:fb:0a:2b:28:c8:9b:f8:07:b9:92:89:7e:
                    6b:36:c3:80:48:31:ff:54:c7:c1:84:3f:24:89:82:
                    cc:c5:79:18:8d:30:57:65:f1:45:d3:6a:a6:61:ef:
                    69:b3:fd:0d:3a:bb:cb:cc:82:50:8d:b0:94:83:25:
                    d7:e3:b1:9a:1c:48:a5:28:11:6a:fb:38:87:30:b7:
                    5a:43:3b:a9:bb:cf:ad:6a:07:fd:fd:fb:8e:e9:52:
                    31:62:03:7e:ca:44:78:45:77:0e:e5:f4:8c:40:da:
                    39:11:aa:ad:ff:96:15:5d:63:d4:6f:3c:f9:b5:a9:
                    59:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:AA:C3:B8:C4:D7:D1:7F:6B:83:82:6D:A2:82:83:57:D1:4C:8D
            X509v3 Authority Key Identifier:
                keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:c8:05:50:af:a0:22:97:de:ed:82:b6:0c:f3:00:aa:b6:
         8b:50:79:53:df:69:fc:0e:c3:31:d7:c3:a9:d1:ee:8b:b1:89:
         4c:2d:5c:ef:96:dd:ed:08:29:1f:81:4f:5c:12:ef:0f:7f:d8:
         f8:05:9e:99:7a:b5:30:2d:31:77:58:01:37:67:d2:6f:67:c6:
         60:aa:95:a8:28:1e:51:98:e0:6e:67:4b:d3:24:be:d0:47:f5:
         9d:ca:0a:0d:0e:e5:9e:a6:fb:e3:56:ed:8d:22:6e:08:03:f2:
         95:de:a8:6c:77:1b:d2:af:f8:e2:79:de:96:b0:08:13:3e:80:
         e3:ed:24:f4:e6:69:3c:e8:f0:33:22:f0:1b:cb:73:4b:7c:cc:
         ce:c3:c8:42:03:f2:44:db:e7:83:e6:aa:b2:59:c3:4f:cd:b6:
         c9:0a:3e:d0:4a:94:65:ba:51:1d:41:49:83:31:93:3a:aa:38:
         44:fe:1b:9b:51:32:b1:97:87:0b:68:e2:6f:c3:ea:4c:b6:2d:
         eb:1d:4b:02:9b:13:8b:ef:80:86:88:c0:5c:a1:f5:2b:78:58:
         82:29:bf:35:91:a7:7d:68:b8:78:67:4f:65:aa:e2:f4:44:29:
         d9:36:fb:11:17:6c:c8:36:2a:40:f1:b8:f3:60:92:82:ed:ad:
         30:0c:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:41 2025 by rpki-client