Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File:                     Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier:          G7KGBZad5AKAM197NSq1jqT2oS8XnWK/rwMxCtPi4Uk=
Subject key identifier:   5E:2E:31:99:CC:36:09:3F:46:9E:3E:AE:17:35:69:CC:C4:09:A6:DF
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer:       /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial:       0198955B0B398EE451CDB16D51044AC35005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number:          1327
Signing time:             Sun 10 Aug 2025 19:00:28 +0000
Manifest this update:     Sun 10 Aug 2025 19:00:28 +0000
Manifest next update:     Mon 11 Aug 2025 19:00:28 +0000
Files and hashes:         1: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (hash: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=)
                          2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: gFk2uv/8nt3hBlFOYJJoZT9JJAC0s9enJCk4SoXesiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:0b:39:8e:e4:51:cd:b1:6d:51:04:4a:c3:50:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
        Validity
            Not Before: Aug 10 19:00:28 2025 GMT
            Not After : Aug 11 19:00:28 2025 GMT
        Subject: CN=5e2e3199cc36093f469e3eae173569ccc409a6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:b5:f1:f4:ba:8c:a1:84:03:be:c8:90:69:
                    62:ee:6c:a7:80:f7:e5:a1:b1:aa:00:5e:61:31:b4:
                    63:d1:8f:30:ca:35:b4:47:7e:04:13:d8:f9:21:72:
                    c5:7c:8e:a6:40:5e:50:23:b1:df:ae:8c:b8:b5:ae:
                    a0:fb:ee:0c:d0:a8:7e:fa:2e:9b:56:56:6b:85:56:
                    d5:4a:83:7a:4f:79:c3:f2:0a:7d:6e:e0:d4:67:c8:
                    49:54:e5:49:ad:d9:dc:4a:7d:55:30:14:cb:57:b7:
                    d0:7c:26:48:75:ee:77:04:bb:1f:5a:07:56:fb:86:
                    82:dc:4c:9c:b3:c7:6e:b6:8d:d4:2d:06:ae:45:42:
                    f4:49:fb:14:38:ff:53:72:e6:94:bb:a1:82:a4:06:
                    dc:7d:12:b1:58:8c:6c:46:ab:d9:a5:61:7a:37:8d:
                    bc:aa:ea:08:f0:02:c7:7e:f8:9a:5c:58:5f:71:a3:
                    44:30:0b:9f:d1:77:55:fd:6e:7f:48:5e:57:b2:be:
                    82:76:12:21:2c:b7:ab:b4:4d:f6:00:3d:08:fe:f0:
                    0c:3b:f2:bb:40:e6:df:29:38:d8:51:70:ee:e1:4a:
                    7e:e0:87:cd:68:4a:77:1f:13:cd:b5:fc:d3:f5:b6:
                    35:5e:70:dc:8c:75:ca:26:f9:8a:fa:de:54:b8:13:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:31:99:CC:36:09:3F:46:9E:3E:AE:17:35:69:CC:C4:09:A6:DF
            X509v3 Authority Key Identifier:
                keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:86:09:7d:4a:d9:9a:b6:28:f5:f8:05:ab:1f:3a:f8:65:
         56:c9:8f:55:f7:48:b0:b8:0a:65:be:e1:91:72:ec:1e:fc:e1:
         c8:bf:e3:c7:c3:ef:0e:fe:de:40:e5:2d:05:e6:33:6c:8c:eb:
         15:cf:09:86:aa:99:9f:f0:90:30:eb:32:69:a3:4f:9e:18:ed:
         85:c4:5a:a6:9c:da:86:a9:d1:a3:68:d6:b8:94:80:3f:8a:0c:
         a8:2d:0b:11:49:3f:8e:97:e0:2b:f4:65:82:e6:19:af:c1:99:
         c6:39:4e:c1:ee:03:89:d9:46:7c:8c:c7:fa:13:11:5e:0f:08:
         14:5d:e0:2d:f0:b5:a6:d2:0b:f5:2e:b0:92:0a:be:78:6c:f7:
         a7:3d:00:c6:2f:9b:b9:da:bf:3e:89:38:16:86:77:b5:3d:ae:
         49:57:f6:6f:47:66:b6:e0:98:d0:cb:3a:ab:12:f6:bf:93:3e:
         a3:9d:c7:0f:4a:2e:e6:5e:15:9b:23:e4:54:bb:f9:de:36:81:
         7c:96:e1:6b:3f:4a:3f:b5:7d:d7:cc:a6:f1:ef:ce:31:c5:e0:
         f0:23:9b:d5:ff:8e:6a:e3:1d:b9:0c:a2:69:0a:15:bb:6c:44:
         6f:b1:f3:54:ca:dc:90:7a:55:ae:0b:f2:20:ed:e2:02:bf:a4:
         7e:7d:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:12 2025 by rpki-client