Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          vzA3EskfYZISikBbDCxj07+sNOzMg9oTCcyu11ielYw=
Subject key identifier:   F9:C9:58:5C:AA:49:B9:B1:AD:A6:3F:8A:A0:D1:B1:2E:AA:F5:5C:BC
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019894EDC0D49C0A49C4C0C9CEA66D972F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          08D5
Signing time:             Sun 10 Aug 2025 17:01:05 +0000
Manifest this update:     Sun 10 Aug 2025 17:01:05 +0000
Manifest next update:     Mon 11 Aug 2025 17:01:05 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: nypcN8RlH8+7Gx+3J7VTC/rfBmIYLbRlupDxbLWHtc4=)
                          2: 6cLAgXwPPVUqW2fRnVcUpzYI2Tc.roa (hash: Bs4bkMnVZAFLVbVBGdk7KMWKzWNkbw7qAniJUdhBj3A=)
                          3: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=)
                          4: mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa (hash: TADBUKVvbfWL8WOCN7ye3V2kF6YpMBXr/Ao/gRMpF0w=)
                          5: qpT2fz7gBHouwLsuowbAYvgg-Ig.roa (hash: o0L42Hh+TFiS6tacfIvRtxQ2lA2AeiIQCwPGgLIErJk=)
                          6: tLtgUfd0ui74NFHNYFQ3DTMpTpY.roa (hash: t0Rcfn+Zo7QZAW0FXDZgWJxfMhFkyCKBVpW7cC1Ejw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:ed:c0:d4:9c:0a:49:c4:c0:c9:ce:a6:6d:97:2f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Aug 10 17:01:05 2025 GMT
            Not After : Aug 11 17:01:05 2025 GMT
        Subject: CN=f9c9585caa49b9b1ada63f8aa0d1b12eaaf55cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:86:9e:05:ad:39:27:bc:60:33:4b:6e:d0:
                    f3:b5:fb:64:b9:e4:6c:59:ce:5c:4c:99:6c:3f:6a:
                    6b:77:34:14:3c:54:52:2e:df:cd:ef:de:45:f4:a3:
                    be:01:a4:49:f6:ca:93:4d:f0:ce:97:4a:26:ac:31:
                    f7:db:cf:fc:e6:bd:00:86:1c:1a:b3:e7:c4:bd:e8:
                    55:73:85:30:88:d2:f8:85:4c:1c:c7:41:71:4f:ba:
                    16:d2:2c:24:c2:9b:d1:a3:ab:b8:a5:8b:ab:24:70:
                    79:a3:4d:f4:10:80:ac:ba:ec:b4:85:8b:0d:46:85:
                    98:59:99:1d:ce:a5:59:bb:60:52:e5:5e:ef:a5:ce:
                    a8:af:c9:96:87:f8:24:47:be:51:fa:3a:fc:77:a5:
                    5e:3f:4f:e1:2b:20:17:16:10:d5:9a:91:9e:ac:2a:
                    6c:55:61:08:e5:3d:6c:a7:da:b7:0b:48:55:be:c2:
                    84:ce:0a:6f:df:1b:e7:df:02:04:1e:79:9e:c1:d3:
                    ea:d1:11:1b:34:f7:7c:6c:be:94:46:63:e1:db:76:
                    2e:a9:96:44:9a:5b:a8:6e:0c:a2:d7:2f:39:28:12:
                    cb:52:d3:c6:83:a3:08:42:a6:c7:24:aa:95:97:5d:
                    34:8a:1a:63:1a:22:30:2c:ee:fe:b9:1c:b9:d6:27:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C9:58:5C:AA:49:B9:B1:AD:A6:3F:8A:A0:D1:B1:2E:AA:F5:5C:BC
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:89:b8:51:80:c7:59:94:4a:3c:8e:15:9b:bc:10:db:d8:5f:
         9b:3a:f6:e2:f0:c5:7a:1f:7c:8a:36:de:f8:77:9e:11:8e:6a:
         ac:25:08:f9:e9:32:ac:2d:6d:44:dd:2c:3e:bf:fb:5c:5e:a5:
         10:a1:0f:4c:c6:d9:1e:05:45:4e:04:4f:76:8a:8e:1d:0c:18:
         2f:51:0e:b8:dc:78:29:bc:d0:60:6a:3f:b5:eb:3c:e9:5d:87:
         51:7b:d4:32:6e:48:cf:39:df:8c:07:ba:da:3c:f6:39:78:6b:
         e5:97:f9:69:94:42:4c:67:4c:07:f5:ec:f3:fc:73:00:15:7c:
         d9:ed:0b:7f:d8:0a:6d:29:30:b2:99:74:38:34:ca:a0:87:7f:
         7b:b0:f3:eb:40:db:8e:c5:49:c0:9b:41:79:d1:dd:15:8c:8d:
         2e:e6:db:c0:ad:83:5e:06:90:fe:a4:16:5b:09:8c:6f:b6:75:
         2e:42:50:ef:97:4e:b4:09:22:72:f1:17:46:55:17:d2:97:b5:
         52:c0:46:93:6d:2c:a7:47:12:e5:3d:de:ec:5f:5c:31:0f:0d:
         12:0c:8f:00:e6:ee:ce:3e:3f:d4:20:cf:ad:33:f3:2a:da:fa:
         85:d6:6d:10:d7:99:85:4f:b6:c2:5d:8b:a6:49:0e:b0:81:a0:
         d6:87:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:53:11 2025 by rpki-client