Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File:                     cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier:          etmremyBSBW+agd0m/JLpWyWGe6GACZhrlsvV803IcQ=
Subject key identifier:   5E:3A:00:80:07:7C:2E:2C:4D:1D:69:2D:BA:D0:2B:36:CC:73:29:40
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer:       /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial:       0198A04E1D806A35EEA88474F9A8F70E134F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number:          0711
Signing time:             Tue 12 Aug 2025 22:02:10 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:10 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:10 +0000
Files and hashes:         1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
                          2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: cHqjPFlH8lIpYAVGPpWoBMF8pjA85WqqCDdtG8zwkds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:1d:80:6a:35:ee:a8:84:74:f9:a8:f7:0e:13:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
        Validity
            Not Before: Aug 12 22:02:10 2025 GMT
            Not After : Aug 13 22:02:10 2025 GMT
        Subject: CN=5e3a0080077c2e2c4d1d692dbad02b36cc732940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:bb:9d:d6:49:83:42:aa:cd:2d:f2:a7:6a:
                    ea:af:75:6a:c1:4a:a9:4f:2d:3d:e7:74:83:87:e1:
                    56:cd:57:dc:8f:93:89:5f:54:00:28:d3:94:30:cb:
                    d1:36:fa:bd:8e:a6:8b:2a:ee:50:a9:26:f7:f6:25:
                    b0:3e:d2:04:64:d0:72:c8:88:09:9e:df:50:df:41:
                    98:df:86:97:4d:a6:e8:06:05:57:b0:1a:02:2e:f5:
                    d5:2d:9d:7d:8f:9c:43:42:5d:df:a7:40:22:4f:12:
                    41:09:91:d3:28:8e:87:a1:73:6c:3b:02:95:65:d9:
                    5d:66:9d:08:33:06:a9:0a:99:00:12:13:db:b5:ca:
                    f1:04:26:3b:83:c5:65:14:8b:f6:04:22:22:b9:fb:
                    48:c1:f6:5d:5b:c6:ae:a8:0e:e9:bc:bb:4f:56:8b:
                    0c:d1:d3:fa:b4:c2:6d:18:a6:32:80:42:29:89:cb:
                    c5:1b:4e:e9:0e:08:70:ad:9e:3f:e8:25:d3:24:0b:
                    78:4a:c6:aa:ff:f7:b1:ea:37:d4:4a:ca:a2:a2:ab:
                    66:b2:94:16:3d:85:1b:e3:b3:c8:4b:9e:d6:8f:81:
                    ee:94:9e:d9:77:d6:82:0a:4d:0f:f6:7e:f2:36:5c:
                    99:a0:92:c1:10:02:87:ca:6f:25:29:d8:b4:f1:41:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3A:00:80:07:7C:2E:2C:4D:1D:69:2D:BA:D0:2B:36:CC:73:29:40
            X509v3 Authority Key Identifier:
                keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:a2:e9:93:17:cf:4d:2b:fe:c1:86:01:b7:e4:44:ec:62:
         50:7e:8b:fe:24:6f:68:92:36:36:ec:a2:98:02:a8:78:b4:98:
         4b:1a:08:3a:6b:e9:09:50:a0:c1:0a:42:0c:11:c8:4e:45:a0:
         a6:e2:5f:9b:10:ef:26:3a:64:52:21:26:ef:d7:84:ee:8d:1a:
         2a:8d:c8:49:71:1e:18:53:e5:d5:57:85:58:be:26:b4:e5:af:
         7d:1f:b8:15:1f:a3:6e:f9:2a:95:bd:9c:1c:bd:34:18:95:24:
         2d:e9:c2:e8:f8:b7:e7:03:74:5f:e3:76:e9:99:c1:89:47:af:
         b6:9a:cb:61:74:52:ad:82:db:14:c4:5e:9e:6d:6f:5e:99:bd:
         7f:19:8f:d8:39:c0:bb:9e:88:26:f8:af:6b:21:63:d5:37:e8:
         e2:3f:62:ae:dd:68:04:50:20:8f:1a:d2:22:46:27:2e:68:76:
         6b:9c:a9:5e:33:a5:38:d4:d6:1a:90:25:3b:8c:ad:ae:b7:c5:
         17:e1:21:9d:8c:02:8e:2b:08:96:c6:d7:a7:05:b8:c0:2a:b0:
         fb:d2:57:b2:ca:0d:7b:a3:c7:cc:88:ae:8d:82:b8:10:0a:b3:
         8b:d5:77:82:1b:86:a7:37:44:bd:5f:7a:40:ff:10:0f:13:7f:
         84:cc:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:42 2025 by rpki-client