Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File:                     rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier:          p/S2ukYvCxbabrQy+Dy2N8faQZFIxhg5S85L/ZkYPT8=
Subject key identifier:   52:EA:82:85:BE:9F:3B:B7:85:24:AD:E0:95:DE:71:58:62:3F:7A:29
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer:       /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial:       0198831E19AAA93F615FFEF4F6EC7C8701A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number:          05E0
Signing time:             Thu 07 Aug 2025 06:00:44 +0000
Manifest this update:     Thu 07 Aug 2025 06:00:44 +0000
Manifest next update:     Fri 08 Aug 2025 06:00:44 +0000
Files and hashes:         1: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: XZwdmJm8B4ksZgKZOquh23lFRxlS7wJ4NB6Bj+YbhwI=)
                          2: ujnQqcYkw8DTp3TTHKzAXwe78Ws.roa (hash: wFM6YX8J+HgwhH7ugAfhLxZTumTN8/lCEBbdI40glto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:1e:19:aa:a9:3f:61:5f:fe:f4:f6:ec:7c:87:01:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
        Validity
            Not Before: Aug  7 06:00:44 2025 GMT
            Not After : Aug  8 06:00:44 2025 GMT
        Subject: CN=52ea8285be9f3bb78524ade095de7158623f7a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:2c:0b:9e:df:75:91:b5:6f:d9:9a:8b:fa:
                    25:08:31:db:c2:c6:1f:be:a1:e6:3a:70:bb:84:9f:
                    48:4c:82:d7:a3:32:d2:7b:78:7e:8a:e6:f7:6e:53:
                    23:02:9f:cc:3f:0f:dd:4b:f8:19:40:25:93:30:6c:
                    37:44:6e:c6:34:47:66:ab:d8:9e:54:c1:f6:0f:d9:
                    69:62:f0:a8:e7:2d:59:91:24:25:85:cd:a1:ab:21:
                    ad:66:03:81:af:1f:66:1b:1e:5f:fb:43:57:bb:d5:
                    88:b2:54:9b:c0:30:3c:0d:af:c6:7b:db:38:eb:b5:
                    fe:7e:8b:b0:e9:6b:4f:e9:a3:c6:16:cf:06:6b:e6:
                    6a:50:cb:31:6e:7f:c4:c5:fa:18:4c:43:81:a2:21:
                    49:4b:ec:d5:fd:a3:dd:4a:97:e8:b0:a7:31:22:5e:
                    7b:2c:9c:5a:61:b8:02:6f:d4:bd:3b:28:21:5d:e4:
                    16:53:77:45:c3:0b:83:72:f8:39:4c:ba:f7:5d:61:
                    5e:e9:a0:ad:65:de:b2:d6:55:c6:48:ad:1e:6e:0a:
                    06:78:0a:e6:c9:cc:63:c4:b1:3d:48:f2:12:30:e3:
                    3d:44:16:c4:1d:1e:85:11:09:e8:51:4b:c1:78:82:
                    ab:75:46:26:09:3a:90:4b:3b:04:98:cc:25:44:4b:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:82:85:BE:9F:3B:B7:85:24:AD:E0:95:DE:71:58:62:3F:7A:29
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e1:42:2b:b7:9c:90:da:1e:2f:24:d6:01:29:7a:78:56:b7:
         1c:73:1b:f3:2b:cf:b0:b7:12:91:19:ff:64:19:15:d9:f5:6e:
         c3:ba:86:1b:54:c3:f7:73:ef:63:aa:52:c5:24:11:cf:55:57:
         37:36:03:26:e3:e3:ab:97:32:eb:7f:5b:95:50:3b:38:83:0f:
         b9:bd:17:10:7e:61:90:23:32:ce:b5:f2:01:fb:20:9e:39:9e:
         2b:4f:0a:b8:22:10:16:e8:12:47:0d:6f:21:1a:b3:e1:03:8d:
         d9:55:9c:b8:34:67:60:15:b8:68:7b:a1:27:89:f7:c4:2e:52:
         ec:56:78:cf:88:cf:61:44:61:68:be:12:84:54:17:9f:8e:7a:
         42:e2:2d:79:f4:5e:31:18:c3:9c:54:b7:bf:df:37:1d:08:05:
         ef:9f:7a:97:13:fc:d5:f8:0b:1a:ec:cc:8b:a1:a8:95:04:c3:
         5c:5d:28:29:c0:77:f3:9a:f2:87:ee:36:fa:8c:c1:be:72:0d:
         d8:a8:c0:14:2b:8a:a5:35:de:87:83:e1:35:46:3a:b4:3c:52:
         6f:f5:6d:b2:59:45:2c:74:96:79:fb:13:d1:06:25:f1:1e:c8:
         54:dd:c5:21:07:9f:f4:fe:d7:41:34:a5:47:e9:a9:d4:05:32:
         5f:8c:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:06:55 2025 by rpki-client