Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File:                     fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier:          4CaxvKsNKd6DYO28I79Qwm8V/OQ0cRKW1YLWhPF82IM=
Subject key identifier:   B5:C2:22:11:CC:D0:F1:1E:85:FF:7D:19:12:B8:99:B2:DD:75:26:D6
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer:       /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial:       01987306AEDD5E9452A93930B7AD6139675B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number:          04D5
Signing time:             Mon 04 Aug 2025 03:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:14 +0000
Files and hashes:         1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=)
                          2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: OnII9vAKyBvqJ+n43Wii2HCykdgNPxBYilSGHTMehIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:ae:dd:5e:94:52:a9:39:30:b7:ad:61:39:67:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
        Validity
            Not Before: Aug  4 03:01:14 2025 GMT
            Not After : Aug  5 03:01:14 2025 GMT
        Subject: CN=b5c22211ccd0f11e85ff7d1912b899b2dd7526d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:19:46:f7:4e:29:7a:f7:f3:ce:b6:d7:89:
                    c0:09:5c:b5:75:bc:09:b0:8a:33:c2:31:c0:b5:54:
                    19:df:23:68:07:7e:4d:a7:f9:4e:ef:8b:6c:07:29:
                    2e:e5:09:fc:01:0d:4e:dd:d1:c1:f8:4d:14:66:27:
                    21:01:8d:91:dc:73:fa:cd:90:d0:29:69:10:8c:61:
                    e4:d5:bd:fe:f1:9d:f7:f7:1f:69:ca:e5:2b:4b:35:
                    1a:79:f4:a9:82:23:09:05:2c:6c:ea:93:15:a3:e7:
                    79:8c:cd:40:65:36:92:aa:84:23:0b:01:6d:97:9d:
                    38:dc:a7:d5:69:43:53:3b:f1:5a:42:b9:f5:48:c9:
                    84:3b:a1:bb:b0:ac:0d:79:45:6c:ab:5a:e0:ca:ea:
                    f3:7c:4b:8d:27:19:98:f7:c7:80:f1:ce:f5:e0:05:
                    71:b9:de:6a:be:b3:23:27:58:05:fb:1a:74:1a:97:
                    be:c0:61:6d:e9:74:b4:72:09:51:8a:21:a2:87:f1:
                    36:fd:c6:4f:34:fa:c2:20:59:18:f1:1e:7b:0d:24:
                    76:9c:53:5c:72:d8:62:02:0c:07:ce:1e:a8:69:fc:
                    f4:f7:7e:f5:9d:a5:8d:3b:2e:ee:f3:b6:4f:16:7c:
                    27:08:18:5f:5c:54:c9:40:c7:c7:03:21:71:f0:57:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:22:11:CC:D0:F1:1E:85:FF:7D:19:12:B8:99:B2:DD:75:26:D6
            X509v3 Authority Key Identifier:
                keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:de:80:03:14:7e:f7:b2:6a:73:70:12:a0:0a:22:a4:69:
         8a:fe:8b:ca:de:78:da:24:68:32:40:3e:c1:d1:ed:ff:a9:7b:
         48:ed:aa:34:be:ec:e0:09:ac:63:ed:0d:b2:91:fa:4b:d2:35:
         e4:04:4f:99:a1:54:53:be:12:c4:95:7a:88:06:57:4f:f1:37:
         16:be:2c:de:59:4a:07:53:63:2f:99:31:47:c2:e8:b3:90:8e:
         3d:73:64:9c:13:4f:7b:e6:90:29:a0:76:b6:b5:cb:55:35:4e:
         b4:fc:bd:f3:1b:b3:71:90:d4:f2:4a:09:83:da:b0:4d:1e:04:
         09:5f:8a:00:28:b5:42:de:69:a1:e3:52:51:95:ed:36:f4:66:
         af:7c:0f:e4:0a:cb:55:b7:af:91:05:81:8f:71:52:d4:0c:4d:
         35:bb:4b:28:ca:57:bf:ac:8b:e5:15:95:34:89:bf:7c:11:7d:
         8b:59:c9:7e:ee:9c:f0:92:28:ff:f0:3c:f4:c9:43:1f:b1:b6:
         4c:d2:7f:e7:85:d5:ef:73:20:c8:84:db:fd:90:35:d9:de:41:
         a2:b6:27:f9:a4:94:d9:92:4f:c0:f4:de:58:ec:3d:b1:68:03:
         cf:26:02:24:68:01:00:36:c6:7c:ff:a8:1e:5b:40:1f:0e:00:
         74:8c:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:01 2025 by rpki-client