Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          6jpWOY/pjdJlV9aerSz9eAl3ioyEMw4yFaJecMOXyCc=
Subject key identifier:   63:EB:F8:A8:7D:F0:C5:DF:DD:77:BE:15:E1:59:3F:FA:97:23:FE:3B
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       019882E7D3190A03C8EC4587FAB904296332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          04AF
Signing time:             Thu 07 Aug 2025 05:01:27 +0000
Manifest this update:     Thu 07 Aug 2025 05:01:27 +0000
Manifest next update:     Fri 08 Aug 2025 05:01:27 +0000
Files and hashes:         1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: 4g3yIXKn7NWp0IabnkxMQTeznNvidDMbSZsS8eyWEkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:e7:d3:19:0a:03:c8:ec:45:87:fa:b9:04:29:63:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: Aug  7 05:01:27 2025 GMT
            Not After : Aug  8 05:01:27 2025 GMT
        Subject: CN=63ebf8a87df0c5dfdd77be15e1593ffa9723fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:a1:42:25:f4:91:af:b7:4f:40:1b:5f:b7:
                    64:e8:ae:6d:44:99:c5:7b:9f:35:2a:51:6b:d4:4a:
                    40:f7:af:ee:99:2e:86:0f:9a:2f:e6:56:85:ad:bd:
                    38:21:d5:f9:01:09:e3:69:d7:97:16:e7:89:d5:54:
                    0e:34:89:33:5b:ed:da:43:d3:4d:e3:8a:86:24:92:
                    f5:65:cf:b7:b8:9c:57:77:72:d5:1f:a4:d9:64:d2:
                    64:dd:39:d5:40:b9:10:56:88:4e:74:c8:6a:e6:2d:
                    58:9e:13:f8:cc:ac:c0:8f:e6:7f:03:86:60:60:52:
                    6b:dd:fd:6b:72:07:05:02:6f:b4:15:d0:7e:26:37:
                    51:52:f4:9b:55:76:76:0c:21:69:9b:07:3f:87:cc:
                    ad:a4:1c:b9:e8:84:d4:e0:b8:65:27:1a:ff:f4:73:
                    73:7b:c7:7e:29:b8:2e:82:81:bc:fb:ef:8c:dd:2d:
                    64:bf:c0:ba:25:3f:f4:02:c0:5d:47:0e:69:1b:37:
                    23:23:b5:1e:e7:92:63:8d:fb:5c:c2:68:d2:74:e4:
                    96:c2:a0:fd:60:e4:38:b5:ba:80:46:a9:8f:09:5e:
                    e6:ba:4c:07:c8:ae:c9:4a:d4:98:9d:de:f5:19:46:
                    2c:00:70:a0:c7:f2:67:bc:5b:9e:39:04:3e:55:f4:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:F8:A8:7D:F0:C5:DF:DD:77:BE:15:E1:59:3F:FA:97:23:FE:3B
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:37:d7:bc:aa:e2:32:4f:6d:c0:41:60:7d:29:fd:f3:6f:40:
         a1:b9:06:37:ff:e3:00:a6:d6:be:06:d9:cb:39:c8:d2:61:1d:
         e6:dd:5e:5b:d5:c1:46:81:59:79:8d:a8:fa:85:1b:31:4c:69:
         42:73:64:bf:3e:55:88:ab:33:ed:e2:f6:82:6f:3a:00:83:81:
         04:89:1d:27:42:93:73:f6:2d:ce:9b:ad:1e:60:7f:8d:12:ca:
         1e:e7:9e:bd:89:97:4a:a5:e3:50:a6:87:85:55:9d:d0:64:05:
         87:55:71:1c:be:28:b8:0b:26:7c:26:c1:76:c9:eb:c1:c9:d4:
         cf:7c:ad:3e:25:c2:df:e9:71:4f:bc:61:fc:0f:1e:74:15:da:
         42:32:32:38:d3:45:b3:ed:a9:01:d5:f8:89:f6:b5:ff:68:18:
         40:23:5e:17:dc:15:5d:75:a3:4e:fa:46:e3:cd:be:4b:cc:0d:
         88:90:83:0d:f3:d5:5a:56:92:57:66:09:5d:5a:52:47:d7:83:
         48:c9:78:4a:b5:19:66:71:e1:76:0a:25:e5:73:9f:6a:40:29:
         d8:82:04:33:1e:d7:df:a7:c6:24:af:ea:e5:cc:df:56:aa:24:
         c1:0e:5b:d4:0a:11:6b:74:dd:d6:56:d9:87:5b:bd:fa:82:e5:
         7c:0c:e5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:18:50 2025 by rpki-client