Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          KN/M4NQvjfvhDSDS7u/RsvLFEMOhXWi7Ti1Fuo95afM=
Subject key identifier:   B0:83:14:65:70:70:2E:45:AA:F8:04:1E:4C:C4:F2:E0:10:A6:C5:E4
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019885443DE3D7B3DABE8B19343032C53145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          1668
Signing time:             Thu 07 Aug 2025 16:01:38 +0000
Manifest this update:     Thu 07 Aug 2025 16:01:38 +0000
Manifest next update:     Fri 08 Aug 2025 16:01:38 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: hpiA4iKjY42zHMfG7R4XFK1JxQ7kgCc8R6nhV0SNnxY=)
                          2: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
                          3: Kcwvf_LAYIgCUsjZTWJ5jUAjHvs.roa (hash: DBuOCdcgOfeSRZCdhr9N5T6hmZRIvpkgOJLbi6ZyJsY=)
                          4: pKD8koif6pxD_upkcG702cWUH-s.roa (hash: LTn4m+Bc5kikqhdLQAuLMwNxnCZXA2794+iqmrbNiXM=)
                          5: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
                          6: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:44:3d:e3:d7:b3:da:be:8b:19:34:30:32:c5:31:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Aug  7 16:01:38 2025 GMT
            Not After : Aug  8 16:01:38 2025 GMT
        Subject: CN=b083146570702e45aaf8041e4cc4f2e010a6c5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:a4:08:82:b6:1d:34:20:f4:48:dd:a9:23:
                    f6:30:4d:d5:84:8b:21:77:05:53:44:7d:30:20:74:
                    44:21:d9:31:5b:86:25:cd:bf:57:79:b3:c8:cb:14:
                    e2:9e:ae:87:40:44:a4:b6:58:ee:68:6e:db:15:5f:
                    dd:03:11:9b:c7:e5:6e:78:0f:2d:04:e5:ad:3d:99:
                    de:41:01:04:39:93:b5:20:9e:6b:1e:b7:c0:b1:62:
                    5b:44:b4:ff:cd:ba:9b:19:51:0d:07:a5:97:2b:93:
                    57:fd:f1:9a:a9:0c:db:8c:92:fa:16:91:a1:c2:e9:
                    cc:18:a4:a9:96:95:bf:ed:23:e2:5a:4f:0a:ad:4d:
                    d1:e8:da:9a:db:56:96:f5:18:2e:44:88:fc:41:0d:
                    3c:b1:78:be:35:2c:07:b1:1d:58:f8:36:c8:d9:f2:
                    1a:ad:f7:a6:19:e6:53:62:04:90:12:2d:19:d8:c4:
                    af:c3:e8:21:e9:b5:cc:3c:0e:2f:4d:7a:31:e3:cf:
                    93:c0:91:57:81:a3:66:51:fa:e5:21:47:80:85:4a:
                    63:a5:06:27:b8:2e:7f:1b:29:89:5c:58:13:03:6b:
                    14:45:c7:e1:2c:fe:a5:a2:28:20:63:6d:02:31:ce:
                    78:1c:f2:fb:bd:75:35:68:92:82:4a:17:02:3d:74:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:14:65:70:70:2E:45:AA:F8:04:1E:4C:C4:F2:E0:10:A6:C5:E4
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:63:f6:96:2d:cd:37:06:b3:28:d5:c4:d7:05:73:f3:8d:ea:
         6c:dd:e3:11:e2:dd:22:80:08:e2:e2:b0:d7:82:d6:46:b7:bf:
         11:c5:1f:11:b0:e7:11:f1:a7:b2:a3:5c:f4:2f:8b:77:60:d2:
         bd:cd:ed:74:56:d6:4c:aa:71:eb:8e:a1:50:8d:86:b5:3f:47:
         d7:c9:00:8c:dd:b8:4f:8d:76:26:a5:a6:66:fe:c7:2e:10:e0:
         4e:f5:42:b0:72:0f:42:1a:11:4e:85:22:1d:68:71:52:b0:08:
         73:86:f4:89:f6:30:eb:a0:0c:ff:1e:fc:86:07:6c:84:27:d2:
         e8:df:2a:9c:47:22:9d:5f:a1:15:1b:ac:1e:96:66:88:e3:66:
         79:4b:64:29:70:ef:da:a2:a3:49:b9:e1:1c:31:97:5f:0d:c7:
         8b:3c:25:00:16:fd:ca:87:f3:b0:48:ae:39:7c:b7:86:aa:ec:
         8f:5b:4a:10:68:62:fa:87:85:5f:c4:36:40:fc:2c:5e:0f:5a:
         b4:f3:fd:ba:52:6a:3f:5d:96:47:12:03:3f:df:58:b1:67:58:
         83:09:65:46:12:73:cc:81:2a:21:c3:a5:e1:21:cd:53:3c:48:
         e1:59:41:a3:56:a1:eb:88:cf:c5:95:e9:64:5c:42:50:9f:1c:
         b6:72:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:19 2025 by rpki-client