Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File:                     d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier:          ruSRluzzxnWyHdluCE66ozddsaiI/ArK0JWefPEZ4d4=
Subject key identifier:   C5:40:6F:E5:AC:D2:79:DA:68:D0:A6:C5:8A:5D:64:A3:08:FA:92:03
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer:       /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial:       019884D5B61E3C829B762941683E779C4720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number:          161F
Signing time:             Thu 07 Aug 2025 14:00:54 +0000
Manifest this update:     Thu 07 Aug 2025 14:00:54 +0000
Manifest next update:     Fri 08 Aug 2025 14:00:54 +0000
Files and hashes:         1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
                          2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: IqbGqJlAKLgrbk1W80sRYuFMoQue1XFeuk8lstp7MvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:d5:b6:1e:3c:82:9b:76:29:41:68:3e:77:9c:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
        Validity
            Not Before: Aug  7 14:00:54 2025 GMT
            Not After : Aug  8 14:00:54 2025 GMT
        Subject: CN=c5406fe5acd279da68d0a6c58a5d64a308fa9203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:b4:71:fa:df:5f:11:f2:82:90:35:02:2a:
                    2d:15:dd:ad:c5:dc:e5:38:f5:be:af:0f:72:10:3f:
                    a2:3f:d7:aa:92:04:06:c7:1d:e8:8b:cc:32:81:46:
                    19:db:cc:da:a7:04:25:f0:7c:c5:07:56:e8:e6:2d:
                    aa:75:9c:e8:ac:be:71:70:fa:56:4d:18:ff:1c:c0:
                    49:ba:3e:5a:73:64:93:a0:cd:77:f4:2d:3f:c1:54:
                    54:7c:72:50:40:21:02:2f:af:3e:70:99:fc:9a:c7:
                    56:f7:f2:a3:5a:d5:35:b7:0d:5e:b6:0b:8e:12:43:
                    78:e1:eb:25:73:0a:b6:dc:67:fa:07:53:f9:2f:6f:
                    c8:2f:b9:4d:01:ee:b0:29:22:69:d2:fb:61:53:7f:
                    a5:fd:c0:5b:a7:1f:5f:54:05:17:38:82:9b:dd:20:
                    83:95:48:6e:87:37:88:65:55:5c:43:b6:df:e7:1c:
                    40:5d:7b:96:3b:2b:67:c4:2a:e7:fd:a5:da:e4:fa:
                    2c:8b:39:93:2d:a8:73:9b:88:b9:40:d4:11:a3:12:
                    d9:fd:8c:3c:ae:6c:29:36:9b:dd:d3:d2:12:17:42:
                    11:78:3a:73:38:88:b6:09:22:b3:d4:f1:80:77:b9:
                    5f:f3:fd:3e:8e:c8:21:1d:0a:32:e3:a1:14:11:d7:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:40:6F:E5:AC:D2:79:DA:68:D0:A6:C5:8A:5D:64:A3:08:FA:92:03
            X509v3 Authority Key Identifier:
                keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:be:6e:1d:7b:ed:e1:15:2d:c5:4b:53:0e:46:c2:8a:67:3e:
         de:88:9f:14:bf:5d:35:6b:ad:3e:3f:90:e0:8e:2a:21:6d:68:
         4c:3d:24:d7:1d:1d:9d:f0:7a:8c:96:5e:18:93:7a:b0:59:01:
         95:4f:5f:4a:94:e4:80:05:32:6a:e6:5f:7e:64:e0:f2:12:3e:
         99:10:bb:09:77:82:0c:c8:44:07:20:26:dd:6a:5c:c9:63:e5:
         87:a5:41:34:8a:1b:3c:f8:db:59:29:16:8a:be:c8:5e:9d:ce:
         06:ef:fd:fa:d2:cc:50:f7:36:d8:60:8c:43:11:f2:9f:b5:dd:
         21:81:39:22:b8:5c:7a:31:59:a2:07:8b:76:f4:1e:a4:88:59:
         a8:d4:01:a1:af:81:df:da:d6:d5:0b:12:bd:bb:92:ce:5d:36:
         f4:47:d4:96:f0:95:95:f0:58:db:7c:3f:6b:ea:57:1c:98:7c:
         96:49:62:a7:81:4f:35:c0:dc:a5:c5:b2:c4:22:8c:92:45:4a:
         59:de:bb:37:f9:0c:fb:dc:2a:6f:e2:ec:73:6b:30:ce:67:b8:
         1c:5d:2b:d6:7a:9c:f4:4a:5f:1c:cf:66:34:35:ce:f8:4c:04:
         92:70:e1:e1:ab:54:a6:3a:e2:b3:0e:74:dd:11:e5:f3:37:be:
         ec:d9:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:22:03 2025 by rpki-client