Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          z+/GYj/JT4AUXVEYZkOmIlHNHGkATWegwnshO/F8/wA=
Subject key identifier:   B2:6D:6A:39:18:4C:AD:56:B0:20:66:C9:4D:0B:1E:D9:37:6F:EA:20
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01987C0A0F3589698D94FB1EDD3D5C0B8859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          11DA
Signing time:             Tue 05 Aug 2025 21:01:30 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:30 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:30 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: 2bElekhVAFY6Q1aSiJKmIlzoR/zksaKCNnK2CKG+cEM=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:0f:35:89:69:8d:94:fb:1e:dd:3d:5c:0b:88:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Aug  5 21:01:30 2025 GMT
            Not After : Aug  6 21:01:30 2025 GMT
        Subject: CN=b26d6a39184cad56b02066c94d0b1ed9376fea20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:54:23:b8:d3:68:7f:88:f8:1f:0e:ef:bc:
                    43:5d:a3:eb:d4:ae:bf:60:65:ca:d2:d7:24:0e:f7:
                    df:0d:16:1f:f3:29:cf:31:55:b4:8e:ef:c7:6b:6c:
                    86:dd:a5:79:fc:c2:4a:b5:ec:bc:0f:3e:af:2b:85:
                    d8:37:e6:6c:22:eb:01:0d:55:0a:bc:b3:10:40:1f:
                    d0:07:bc:d1:ae:7e:9d:db:f6:52:df:d3:2f:5f:8f:
                    0f:f3:12:79:4a:50:97:74:76:bd:60:b9:fc:18:de:
                    9c:d3:76:4e:66:f9:49:35:7f:b7:84:38:b2:c1:fa:
                    5f:44:56:68:f4:81:11:81:ce:28:90:1a:1c:a8:1a:
                    07:bc:09:d1:aa:b5:02:18:98:81:76:94:e2:18:27:
                    96:56:59:a8:da:25:11:c3:ca:17:bf:36:10:38:58:
                    7d:e6:1c:55:b8:db:38:bb:e2:16:69:c1:d5:01:dd:
                    1d:8a:d3:b9:82:e9:cd:95:97:4f:4e:b0:d9:e2:8f:
                    97:08:4d:19:fd:8f:09:d5:8a:40:ba:d5:f5:b7:ae:
                    c7:df:8c:34:3d:64:22:8e:64:49:80:e0:70:0b:9b:
                    b6:9a:cc:92:0f:6a:d8:6b:1c:7a:30:eb:df:e3:bb:
                    df:e6:3d:6d:b5:0e:1c:d2:68:53:1e:54:33:47:de:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6D:6A:39:18:4C:AD:56:B0:20:66:C9:4D:0B:1E:D9:37:6F:EA:20
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:94:0f:ec:0c:fa:0d:69:4b:07:42:93:35:a1:05:dd:c1:c5:
         2a:c3:4e:f0:ba:92:57:a1:a9:c4:8e:64:90:3f:ca:16:a5:98:
         05:a1:d5:d2:62:06:7d:bd:2c:f8:65:76:9b:43:b2:e7:15:15:
         9f:23:78:43:2a:f5:b1:b0:60:84:05:cc:a8:a8:4a:f4:3f:4f:
         b6:30:b9:ad:ed:91:cd:af:fb:a7:94:30:1c:d3:8f:1e:c9:9d:
         40:a7:8f:f8:07:37:d2:ea:43:ad:01:3b:66:6a:24:ff:af:ea:
         de:84:1d:ea:21:6a:88:0f:98:2b:3d:6d:27:4a:56:bc:df:c9:
         91:62:43:26:55:9a:02:4a:e9:33:ee:36:26:40:bd:0e:56:03:
         d1:46:c8:4d:dd:85:1b:8b:e2:1a:4b:5e:69:4a:1f:00:7b:98:
         3d:d1:b6:6a:af:58:9d:05:a6:45:38:58:a5:96:db:5b:27:f9:
         c5:9a:1a:2d:25:45:d1:30:a9:09:0d:6c:46:f7:58:25:ce:0c:
         47:88:bb:ce:00:3c:7d:07:4d:19:3a:8b:ae:62:51:84:11:44:
         15:63:f7:d6:51:a3:4d:dd:58:c1:f2:c6:eb:92:00:f8:49:a0:
         51:6f:a5:f9:be:d3:f2:13:89:bc:cd:d2:37:4e:01:df:b7:ec:
         40:fd:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:26 2025 by rpki-client