Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File:                     5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier:          T3eNLHdgnXguZNYtsi5xIUCMICf9Blrbnt07kuZnK2Y=
Subject key identifier:   13:60:CC:A1:CD:DA:31:CF:64:11:26:E2:CD:CD:D6:A1:C4:94:74:92
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       01987562A805492FAD14487E7A7406A849DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number:          12C4
Signing time:             Mon 04 Aug 2025 14:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:56 +0000
Files and hashes:         1: 1DU83f7JxI7Sp8tmdZFdvOkj9UM.roa (hash: m5+cRbmLBaQfjeqZJxbrTjitfAYv2UFOw6PPMKpFi68=)
                          2: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: RhCmkLQ+wjD0LNiaR2c6Uf+Owd0r9f3jdsFhR3d4tRg=)
                          3: JBj8FsplA-MBUc0zqf4_NLYuJ-Q.roa (hash: ecVjlw+CLQrBEbrHY/WkvclcM5Zgixit06zD/ClEBGI=)
                          4: ZicUZ02N1eUvCal6PMWmf8ikzmg.roa (hash: XC9+u93DV5Xgz3s+Skf+JUuuT8ulGq7q/bcHNoP7ndc=)
                          5: ayjaap4ka_lQWrGxWLl32b5Fi3A.roa (hash: i4p4u+LsRwVKKJIqZTRL9Zq1bS8WjRYzlYA9QdMm8K8=)
                          6: sHQalHC2kGBmqdUs9aj081_Resg.roa (hash: ygo+vrz6Ex95kvWb5fe7rBFq1CBBbH1XzoihEVkVxBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:a8:05:49:2f:ad:14:48:7e:7a:74:06:a8:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Aug  4 14:00:56 2025 GMT
            Not After : Aug  5 14:00:56 2025 GMT
        Subject: CN=1360cca1cdda31cf641126e2cdcdd6a1c4947492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:8e:ca:69:cd:7b:f7:85:70:32:5f:73:a5:
                    03:a1:54:5b:99:21:aa:e0:f1:bc:64:1c:59:59:d9:
                    4e:5f:81:bd:0a:16:98:93:c9:da:c9:d2:d5:57:4b:
                    28:f9:a3:1b:4f:b9:53:9e:33:a2:06:f1:c2:c5:c3:
                    81:98:6d:3d:d3:d8:a5:11:e5:60:64:19:d8:4e:bd:
                    09:69:1a:8a:4b:83:d5:c0:b3:ec:bf:88:6f:e1:50:
                    4d:ff:3c:e5:9f:0e:c2:50:9e:81:fc:c0:f2:aa:3e:
                    b9:f9:d5:53:d9:61:17:62:80:fa:74:2b:26:53:0b:
                    73:3a:a0:b4:da:56:f4:40:45:9b:15:74:c1:7b:aa:
                    4b:f1:d5:f6:b8:0a:a2:6d:a1:2f:17:d2:58:ce:ae:
                    61:88:30:46:f0:1d:f7:89:e1:30:77:2b:24:e8:62:
                    8d:0d:a4:26:a9:d9:7b:b0:7f:24:b4:4c:d6:b0:c3:
                    62:05:0c:cd:0c:24:12:77:2e:b7:1f:5d:66:24:4f:
                    90:08:3d:24:f2:a6:4b:0a:5c:7d:0f:c7:94:24:59:
                    ff:f7:07:d4:17:a8:b5:65:93:c3:c3:21:30:d7:07:
                    cc:39:58:34:35:51:41:68:8d:aa:64:d6:0e:8c:d8:
                    ec:c1:92:e2:a5:76:3a:c9:fe:71:d8:2a:9d:93:c3:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:60:CC:A1:CD:DA:31:CF:64:11:26:E2:CD:CD:D6:A1:C4:94:74:92
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:d1:3a:6f:89:40:81:dd:f2:08:e2:8b:c7:53:1b:0f:0f:
         73:8b:58:76:71:80:56:0d:bd:76:c8:fc:8c:01:0f:b4:da:56:
         6c:ad:5b:7c:11:dc:1d:5f:00:b0:5b:4b:91:77:2d:e7:0d:00:
         b2:52:02:37:70:45:2a:93:7a:12:b7:18:68:be:70:06:39:a4:
         e6:65:59:a9:6a:3d:25:96:d2:42:f0:16:0d:e4:77:1d:58:ba:
         3b:f6:70:56:58:0e:aa:43:49:7a:5f:4e:2c:f8:07:f8:87:04:
         34:b7:c5:7c:c0:0f:9a:2f:3e:06:f8:73:77:43:d1:a6:4f:0e:
         0e:4e:51:8b:29:48:fc:55:50:2b:ab:30:d2:f2:d4:46:89:5c:
         fd:25:72:53:20:17:63:cc:bc:c2:3f:b7:4c:8e:c9:31:98:44:
         88:d6:04:37:d9:f8:6b:22:40:a1:74:a3:fa:ba:49:63:05:89:
         f3:67:3f:dc:72:5e:29:75:12:4f:61:ba:fa:b6:f1:92:7c:73:
         54:5d:ab:38:55:3e:39:a6:f0:12:df:17:0e:6b:b0:d7:92:5b:
         14:f4:bb:d2:bc:0c:5f:e4:80:19:21:33:7e:f2:da:d1:2b:23:
         b5:66:35:36:b7:29:80:ac:0f:2b:3d:35:88:29:70:a3:f9:69:
         7d:1e:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:27 2025 by rpki-client