Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File:                     5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier:          oG4LNvKxYzqHPg9hBlfYSsPvfNc64UYo8msc0hhgD/U=
Subject key identifier:   AC:84:A8:D6:53:6D:3F:61:48:60:4D:5E:F3:02:7C:20:92:C6:35:CA
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer:       /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial:       019874BD8F70ADC6AC6D0B46C29B8AAE03B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 11:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:36 +0000
Files and hashes:         1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: YKCu9pwmDw+7P2vLuVs+HmT24ymyvU+r/oq49Bf1pJg=)
                          2: AfwJnib3HYEEvfX22iQD4QQrJJU.roa (hash: ZxsajNoVQaxEO2iOv8vpTbsfS52PxCBiq/kifGttXT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:8f:70:ad:c6:ac:6d:0b:46:c2:9b:8a:ae:03:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
        Validity
            Not Before: Aug  4 11:00:36 2025 GMT
            Not After : Aug  5 11:00:36 2025 GMT
        Subject: CN=ac84a8d6536d3f6148604d5ef3027c2092c635ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:b9:9f:c7:b0:dc:1a:1e:4f:54:1f:1e:36:
                    3b:a5:f4:34:52:de:72:7e:32:a9:32:ba:4b:d3:32:
                    40:a7:5c:f1:a8:5f:82:3c:7e:c4:3a:77:cd:78:b0:
                    33:02:be:67:c7:cd:2e:5f:c7:c8:a7:45:6b:0d:73:
                    14:9c:39:e7:d0:af:f0:33:86:99:d0:a3:d9:7e:82:
                    79:84:26:eb:90:e7:56:a3:77:12:cc:54:e1:e5:1b:
                    2b:38:64:06:15:5c:15:50:a1:f2:19:b9:e6:19:a2:
                    a8:4c:cf:ad:83:42:67:99:cc:36:e3:41:9b:88:f9:
                    15:18:24:2c:4e:21:7a:83:53:b4:4a:16:36:29:29:
                    7e:92:40:ab:6a:cc:9e:66:5d:a8:99:93:cd:31:1f:
                    b4:0d:a4:4a:4a:db:9e:ae:fb:77:26:ea:e5:53:7f:
                    2a:62:00:67:fd:f7:ea:6b:d5:4f:89:75:e1:d2:10:
                    6f:58:07:96:5b:dd:e0:91:4e:7b:97:fb:cc:8f:d1:
                    65:ef:28:5f:28:05:c0:3c:84:87:ca:fa:31:ab:d7:
                    37:aa:0b:4b:c6:70:6d:ee:c5:5c:af:72:fd:1d:7b:
                    b3:69:ff:6f:78:53:53:b8:e2:d8:b4:26:42:62:52:
                    04:8a:3b:40:bf:9e:24:8e:4f:b2:e0:51:0f:03:55:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:A8:D6:53:6D:3F:61:48:60:4D:5E:F3:02:7C:20:92:C6:35:CA
            X509v3 Authority Key Identifier:
                keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:4d:c4:7b:ee:d1:92:e6:35:50:29:d2:44:e9:1d:6f:1c:
         85:0f:fd:d2:35:0d:d5:49:82:3a:54:8e:4a:97:27:00:cd:f3:
         2f:6b:cd:75:d9:72:c5:5e:0f:a9:9d:fc:6c:da:04:db:74:16:
         de:80:cc:0a:1c:3c:01:1f:db:83:06:e8:5b:23:47:eb:7c:76:
         41:d6:c3:fd:e1:cb:26:0d:a9:60:40:4b:5b:08:f1:2c:07:6b:
         c0:30:ef:7b:e4:d9:73:cb:58:fb:a7:bf:fd:2b:ec:4d:fc:c3:
         9f:52:b4:92:57:06:70:41:00:ec:0b:7e:2a:1b:2f:81:d3:ef:
         98:96:71:e7:89:2d:44:0f:df:16:d6:ad:59:99:54:a9:2d:94:
         4f:66:f7:30:06:7f:bb:8a:e4:2b:aa:a6:0d:75:b0:0d:c2:a0:
         73:15:9b:9f:a6:67:07:e1:e1:72:d0:ee:db:4d:8b:c6:83:2f:
         28:cc:9d:fb:c6:5d:83:7a:d0:31:7d:a5:20:81:a2:c1:33:ae:
         31:e9:23:84:d8:ab:e9:16:cf:e9:93:e2:58:77:d8:7f:d9:01:
         48:3c:79:39:8b:92:bf:bf:6b:3b:17:60:55:c3:ea:f1:c5:ef:
         55:a6:53:40:71:16:ee:56:f9:2c:88:d8:8d:2f:ca:c6:17:be:
         a8:1a:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:08 2025 by rpki-client