Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          yCYme0BdR4NqyRN+1iIcI7k1nY14ff0MDd+3c/Koh2I=
Subject key identifier:   9D:C8:2C:09:D1:A4:2B:63:5E:78:39:06:1E:10:9A:99:1C:46:8D:C2
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       019878638D205DE3E01A64EF43117A9EE336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          1148
Signing time:             Tue 05 Aug 2025 04:00:46 +0000
Manifest this update:     Tue 05 Aug 2025 04:00:46 +0000
Manifest next update:     Wed 06 Aug 2025 04:00:46 +0000
Files and hashes:         1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: qQOUPi61QmBgW+EHbqKzU5u43kjdIkHu46TV6wLHE4U=)
                          2: LK4TWd3KSu93MW0gFtmcBWt8flw.roa (hash: nqDel+YdRE6L57XNCBc1XqYVOxjyDCGN0EdIBVWAyjg=)
                          3: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
                          4: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
                          5: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:78:63:8d:20:5d:e3:e0:1a:64:ef:43:11:7a:9e:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Aug  5 04:00:46 2025 GMT
            Not After : Aug  6 04:00:46 2025 GMT
        Subject: CN=9dc82c09d1a42b635e7839061e109a991c468dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:51:98:db:9b:09:e7:ed:8e:ab:12:7d:fd:
                    57:98:5b:54:af:07:f2:45:9a:fb:68:7f:0b:d6:14:
                    94:96:80:36:82:ea:4c:3c:3a:c6:15:0a:d4:19:fc:
                    3a:bd:e7:11:d6:3d:f5:15:ed:85:c3:1f:18:bf:ed:
                    8b:16:2f:59:ff:df:b0:91:0e:41:36:b8:57:6d:aa:
                    39:f0:6d:52:29:9b:1f:e5:05:13:f7:8d:91:33:ad:
                    c0:73:f9:2c:22:2a:10:81:4f:59:60:60:12:b6:23:
                    54:36:3d:50:46:a9:c4:ab:d4:46:fa:55:41:72:74:
                    47:4b:72:93:f8:2a:8e:46:c4:c0:ac:99:f7:f2:ee:
                    d0:ce:21:ed:97:df:3d:e4:86:3e:7f:a0:0a:71:b2:
                    49:23:ae:2d:83:3d:d3:14:9d:27:de:23:15:ce:9f:
                    24:9d:38:5e:62:c6:7c:ef:f9:de:c5:e3:7e:0c:fb:
                    88:24:8c:09:dd:89:02:65:96:22:f3:7f:84:d7:e8:
                    3c:52:75:40:70:a4:cb:d5:d9:43:40:0c:f9:2d:ea:
                    09:7a:f7:a9:f2:27:49:f1:ef:42:8d:43:49:7e:bb:
                    aa:5b:1b:07:3e:42:7b:51:e9:28:77:d8:13:0a:b1:
                    7d:dc:83:52:57:59:11:7a:e3:81:08:ec:96:7d:61:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C8:2C:09:D1:A4:2B:63:5E:78:39:06:1E:10:9A:99:1C:46:8D:C2
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3b:69:cc:cc:9b:f3:b3:ad:2a:eb:b2:75:e4:d8:48:a2:eb:
         81:91:07:b6:70:57:9f:a8:76:bf:66:7e:a1:52:21:13:e5:2f:
         bc:7d:6f:07:ee:e5:2d:38:dc:31:8c:45:c4:0b:0e:09:56:26:
         03:d9:8b:13:e1:3b:73:7c:37:35:90:62:ed:5c:30:d1:8c:ad:
         07:98:6c:f7:d1:16:ee:5a:d2:53:a8:a3:af:ad:c2:f1:9e:9d:
         69:54:fb:5d:5e:1e:98:8c:98:31:99:c9:f7:9a:e4:c4:fd:ed:
         6d:cc:15:a9:d6:c2:f5:94:a5:11:7c:20:5a:dc:28:09:9a:59:
         c2:61:54:4e:b3:81:d7:db:4f:0c:87:e4:14:a0:96:d8:27:2a:
         6c:b5:f0:04:39:94:6b:b1:bb:fc:09:7c:e9:80:40:5b:52:48:
         d4:74:96:03:de:45:da:03:3f:20:f3:e0:42:db:c2:24:8e:ce:
         e7:8f:e5:04:63:48:fb:b8:54:61:a3:82:ae:46:ee:b0:9e:bb:
         90:ca:d0:2b:62:1a:38:66:eb:02:5e:f9:36:c9:cc:15:ba:de:
         8e:6d:2c:cc:e9:f3:af:67:84:2b:e9:28:ac:16:46:93:73:ba:
         9a:a6:ca:85:67:f0:b0:69:d8:50:f9:ff:d3:b6:01:77:46:82:
         ce:a5:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:23:06 2025 by rpki-client