Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File:                     _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier:          5icWlRRuJbi7SDxDlwZ+IADTMBxect4lTseOBUPuP9I=
Subject key identifier:   FB:9F:78:56:58:8E:E5:2C:4E:F5:30:1A:B8:9B:82:82:B6:67:31:52
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer:       /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial:       01987E668DAE987FBC00C7706509C779F9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number:          0292
Signing time:             Wed 06 Aug 2025 08:01:46 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:46 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:46 +0000
Files and hashes:         1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
                          2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: CDGAdca/P/DpwJvAbvnJ1ZPzpozBQDdOLIvVeBinpl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:8d:ae:98:7f:bc:00:c7:70:65:09:c7:79:f9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
        Validity
            Not Before: Aug  6 08:01:46 2025 GMT
            Not After : Aug  7 08:01:46 2025 GMT
        Subject: CN=fb9f7856588ee52c4ef5301ab89b8282b6673152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:7f:56:1c:05:f0:96:f8:0f:8a:d5:cf:ab:
                    aa:71:60:64:7e:c9:16:a6:ff:8c:a9:c4:6d:85:2c:
                    c7:a7:1c:39:69:47:0a:64:fb:fc:34:1f:d7:53:83:
                    19:55:0a:af:14:ed:37:d6:c9:5a:ca:56:4e:8e:93:
                    97:8f:de:17:e4:07:35:e7:7e:b1:be:7a:58:4a:b5:
                    32:ce:03:75:4b:25:5e:f5:3d:79:a1:fc:55:a0:8d:
                    f7:02:ea:f5:c3:ee:06:e2:5b:72:48:96:ca:87:ca:
                    f9:d1:e5:d6:a5:47:b1:7e:c1:8d:84:e3:86:dc:e8:
                    79:89:16:3f:b0:08:93:87:81:d1:aa:1c:ca:97:4f:
                    3f:20:fe:15:e4:01:0e:4c:91:f4:41:38:32:b3:40:
                    33:bb:9b:72:e6:c8:3b:56:49:00:76:ba:87:63:8a:
                    81:a4:d8:e3:9e:1a:b3:42:65:54:ea:3b:a5:2f:54:
                    49:f4:76:c4:1f:4e:97:dc:b4:43:79:85:64:7c:35:
                    53:58:22:09:15:aa:1b:c4:84:53:65:5e:cd:20:12:
                    41:27:bf:d6:39:5e:87:08:cd:45:10:a0:df:5c:52:
                    76:e6:94:d7:7f:e8:c0:3d:86:ee:74:d3:88:9a:f2:
                    94:b9:c1:42:92:4c:59:6a:c6:a0:30:ec:82:0b:43:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:78:56:58:8E:E5:2C:4E:F5:30:1A:B8:9B:82:82:B6:67:31:52
            X509v3 Authority Key Identifier:
                keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:5d:aa:1b:19:5d:0f:2f:ed:05:fe:22:d4:01:b0:d3:b9:
         1f:3b:c7:3b:8f:8f:bd:c8:7d:51:71:bb:f7:77:1e:45:32:10:
         03:89:5e:76:9e:4c:14:9a:b9:4a:eb:80:6d:a8:70:54:25:d7:
         f6:76:4b:16:68:c4:4d:c3:ae:6f:5d:a3:c7:c5:6d:c9:00:bb:
         46:d3:07:6f:ba:f8:fc:c7:9b:6a:e8:d6:2f:5a:92:3d:78:cf:
         7b:da:dc:9c:39:42:8a:92:0d:48:ef:d9:c6:e3:10:db:57:ba:
         d3:a7:15:4d:07:79:22:d2:43:9c:e1:8f:d2:46:f9:3b:f3:0d:
         e2:2f:3b:25:5d:71:e9:2a:72:27:17:95:43:b6:fb:7f:d3:77:
         dd:3e:0c:98:ca:dc:22:e5:07:21:be:bb:b9:0f:22:c1:f5:97:
         ad:24:94:25:cc:d2:84:cf:ee:b6:a6:13:f4:ae:5d:c3:2e:25:
         70:c1:45:7a:38:b2:db:70:c2:8e:c8:08:33:b7:d0:b4:54:7c:
         da:67:57:25:f3:88:5e:34:0b:f6:b0:03:85:61:0f:b5:d2:65:
         ab:62:f1:f3:b1:36:37:72:0c:d6:88:37:72:36:05:f6:4e:70:
         31:1a:b1:0e:db:a0:30:6e:88:7f:48:dc:2d:fc:8b:8a:06:05:
         c7:3c:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:22 2025 by rpki-client