Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          vA4k9eL7LK5xZJruHvo3ku4zUMQcTcz3ItTC3lIMSVA=
Subject key identifier:   31:7B:DA:30:29:9D:72:BF:18:E1:84:5A:A7:B4:9E:C4:51:2A:46:7D
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       0198733D8E70C3948E7EC4EF056B6F588B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          1063
Signing time:             Mon 04 Aug 2025 04:01:10 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:10 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:10 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: Wgpra2w7rRog5J3cuIycuxsnLsMOuRlYt3wER/tiD74=)
                          2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:8e:70:c3:94:8e:7e:c4:ef:05:6b:6f:58:8b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Aug  4 04:01:10 2025 GMT
            Not After : Aug  5 04:01:10 2025 GMT
        Subject: CN=317bda30299d72bf18e1845aa7b49ec4512a467d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:c9:ec:70:c4:e2:c0:4f:b5:55:78:39:f5:
                    a8:1a:19:2c:8d:79:15:82:68:88:74:be:61:5f:62:
                    da:bb:e5:8d:fd:c4:21:ba:81:0b:7c:82:ad:28:ca:
                    87:62:22:97:cb:cf:2c:87:6d:a7:92:44:f8:56:41:
                    01:ec:5e:a3:e0:b2:92:bd:bc:a1:ae:c7:ba:69:7f:
                    be:56:21:7a:35:7d:2e:b2:9b:7e:17:f1:65:ec:f4:
                    f0:e8:f0:7a:e7:3e:9e:a9:37:05:14:15:c1:da:48:
                    53:c9:25:0c:98:51:7c:a3:6a:40:d7:8f:d9:bc:0c:
                    ef:10:e3:51:32:33:0d:b0:f9:14:9d:94:12:bf:3e:
                    fa:5b:40:cc:d5:8d:82:78:c1:50:6a:41:89:9e:60:
                    c5:c3:59:25:6a:8d:2e:a9:18:5f:f7:09:f8:a3:88:
                    a1:d8:26:81:24:9a:39:6c:e1:6e:dc:ff:a7:9a:d1:
                    a5:41:63:a4:89:3a:b1:8a:43:7d:af:ad:b9:bf:ca:
                    c2:d6:e4:e7:81:1a:68:dc:cd:5c:5f:a5:62:5d:cf:
                    05:db:08:6f:db:4a:40:39:f5:4f:df:12:f9:eb:d8:
                    22:15:ef:ce:bd:00:99:68:de:e5:8b:83:24:9e:ca:
                    7e:ed:94:41:9c:43:d2:e4:a4:cc:84:b0:9e:e7:05:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7B:DA:30:29:9D:72:BF:18:E1:84:5A:A7:B4:9E:C4:51:2A:46:7D
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:e0:77:4b:77:28:f3:83:83:7c:f1:d5:5d:22:2f:20:39:6c:
         0a:32:1e:d3:f7:b6:a6:5a:a3:5b:6f:dd:63:43:54:c7:65:f9:
         6f:bd:72:86:6a:09:ed:76:9e:aa:a5:f2:af:4f:10:3e:ef:6d:
         9b:76:07:4f:86:66:82:4a:b5:bd:d9:69:ca:df:44:9b:e4:9f:
         f0:03:50:73:5b:ac:eb:7b:9a:b2:01:f1:a8:02:87:4c:3a:59:
         19:ee:3e:95:f5:01:e5:a8:ca:ae:ec:df:72:ac:ef:ef:e9:3e:
         45:c9:c1:3f:fd:34:2e:3e:b0:0c:31:b1:f8:1b:f1:d6:65:85:
         fb:09:bc:42:c1:71:e3:d5:8e:0b:e0:dd:3b:99:00:ad:ef:3f:
         e4:d6:97:e5:61:d2:4d:33:2a:f2:65:e7:08:9e:85:87:e5:e7:
         7c:25:a4:25:02:58:b7:7d:8f:90:80:28:aa:a9:52:f8:2d:00:
         f6:2f:8d:63:44:84:90:02:26:6c:02:fa:30:60:a8:e2:7b:e7:
         a6:9f:60:d7:7a:4c:ab:dd:7c:4c:d4:fc:1b:f3:c4:c1:75:25:
         60:e3:ed:92:cc:f0:6e:6e:9d:80:a0:45:b2:f0:7b:59:0f:54:
         69:92:35:44:3c:46:d2:b2:dc:b2:ab:42:3d:26:4f:0c:90:62:
         d1:fa:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:21 2025 by rpki-client