Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File:                     dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier:          Vkb3mxjlfToLqLbWTJdSv1+2KRBlGnRadiM8ThPe5QU=
Subject key identifier:   5A:C2:59:D8:0D:2D:CA:12:54:7F:15:A7:15:39:ED:FB:C2:7C:60:5B
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer:       /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial:       0198808B0F871DB171E0D3E91BBD000AC558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number:          05B2
Signing time:             Wed 06 Aug 2025 18:00:53 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:53 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:53 +0000
Files and hashes:         1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: gnMThUFEcQt3qGQAqvMUSh4UrXNdJr8D+IHGuEOh3d4=)
                          2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:0f:87:1d:b1:71:e0:d3:e9:1b:bd:00:0a:c5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
        Validity
            Not Before: Aug  6 18:00:53 2025 GMT
            Not After : Aug  7 18:00:53 2025 GMT
        Subject: CN=5ac259d80d2dca12547f15a71539edfbc27c605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:86:1e:e3:4c:82:d4:99:4f:dd:63:fb:8a:
                    dc:28:42:90:4f:ba:4a:f4:00:e1:0d:34:93:44:0a:
                    73:e5:4d:d7:2c:89:a8:6b:12:95:eb:2e:fe:82:9f:
                    f5:60:95:1d:2d:af:b3:5e:e7:b7:0d:a0:d5:3c:d0:
                    3c:5f:f7:79:5b:b9:85:d3:0b:64:8e:a9:b3:9b:a6:
                    60:04:9d:39:f2:41:08:fd:46:bb:4f:ad:b6:f1:b2:
                    cd:7c:be:36:df:f1:28:91:f2:b2:ba:ca:0a:94:a4:
                    c4:72:75:85:d5:a5:ae:33:ed:08:c5:8f:0b:fd:40:
                    f5:dd:d3:30:ae:81:de:b6:e1:fe:9d:50:08:d5:66:
                    51:2a:dc:50:d8:48:48:50:9c:0e:27:df:50:0d:bb:
                    30:13:88:64:77:91:6c:88:1b:55:7d:99:07:d9:e6:
                    6e:21:67:76:e3:e2:30:94:a8:0f:f2:61:8a:23:3e:
                    92:0b:3c:6b:49:02:5d:ff:b1:f2:00:8c:49:80:97:
                    22:77:ec:1c:ca:1a:66:de:01:f3:1e:94:60:45:e9:
                    b0:6f:a1:60:db:ef:06:41:a0:37:84:a3:ba:86:6d:
                    f7:2c:67:d5:37:55:8b:9d:21:2f:f9:21:e8:a3:bc:
                    a3:b5:18:39:45:7e:0c:ab:38:c9:75:e3:b7:01:ce:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:59:D8:0D:2D:CA:12:54:7F:15:A7:15:39:ED:FB:C2:7C:60:5B
            X509v3 Authority Key Identifier:
                keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:be:f1:bb:71:45:93:0e:9f:c7:07:70:b0:aa:11:c1:ad:b4:
         9a:38:b9:e6:c2:4c:aa:7f:8f:2c:ef:6f:2e:f5:50:a1:19:60:
         7e:54:f8:b5:d9:85:59:9d:3f:e7:4f:0a:9b:e6:d0:4c:9a:10:
         8e:69:df:2b:ec:2f:5c:6b:23:ee:d0:6f:e3:ce:4b:5d:ad:63:
         ad:d4:64:7f:43:2f:b7:7e:db:3e:92:6f:a1:28:cd:52:98:b9:
         06:8d:66:0a:31:35:71:42:d8:c2:e3:f6:dd:08:f2:be:cb:ac:
         26:8d:45:0e:f8:4e:fd:90:f4:de:d2:5b:06:d9:21:1b:88:21:
         7d:32:0f:25:ba:76:02:19:dd:bd:1f:62:8d:1c:f8:64:0d:87:
         37:31:23:e0:54:70:a3:bd:2d:e0:ce:d6:aa:9d:0a:82:6a:a2:
         4a:92:34:49:a1:92:92:fc:13:4b:1a:b9:60:69:67:e0:cb:cb:
         8b:3f:38:95:9b:5b:6b:f2:75:e5:b0:95:05:7b:23:c8:90:3e:
         93:c2:90:05:39:0b:5b:b1:00:be:8a:81:0a:bc:64:13:ab:49:
         52:44:e7:26:3e:e5:01:e9:aa:73:e4:ab:4f:17:09:e8:41:5e:
         4b:40:0d:84:81:f4:4b:6a:6d:30:8f:0f:ca:ab:c7:8e:71:47:
         c3:10:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:46 2025 by rpki-client