Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          1EE45Flk1MKjgwGtnUMklmy806SjOD6eO488iVXAmX4=
Subject key identifier:   24:14:9A:F2:DE:0E:E2:19:D9:22:18:C7:1C:D7:21:2C:D3:C7:AE:9D
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       0198D660BD41B48E763C50866E70CB40CC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          1284
Signing time:             Sat 23 Aug 2025 10:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:00 +0000
Files and hashes:         1: 7McjxupphmUTIDMB5hb0zSdkKPU.roa (hash: EbiTg62JkmhMKsH+lFrkNiNAuLRjLLKFna7hKz3yDps=)
                          2: A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa (hash: 2Z2MMJPop83/eKqvvRjbHx9UxdjVWLlOnDA0QnBD8dM=)
                          3: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: qIauPN6Knj62vM0QsgD7ZKGGudseVuGgt5eLcRhpjTw=)
                          4: pjqTP4jfQfsNA8tjYi42Sc1-S88.roa (hash: H5/YZQfh0J/SWAF5xqrnL8j1DdrlYslU+4bEkRfwqM8=)
                          5: s9-7uzfILp_wqpuTQ6RY06M_vb0.roa (hash: Pd9QbCwquRy9rtMT/uczWDR3qfrQi3t7npfRPZFPtOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:bd:41:b4:8e:76:3c:50:86:6e:70:cb:40:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Aug 23 10:02:00 2025 GMT
            Not After : Aug 24 10:02:00 2025 GMT
        Subject: CN=24149af2de0ee219d92218c71cd7212cd3c7ae9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:91:8b:fd:b3:50:13:b2:9b:e3:42:03:b9:
                    0c:81:54:46:b5:a5:f3:49:4b:27:4c:12:77:ea:85:
                    17:ef:c4:bc:3d:dd:2a:1d:9b:70:dc:c7:de:93:9b:
                    d9:9d:50:82:59:03:60:ce:51:f1:a0:e7:fc:9f:e5:
                    8f:06:6c:07:e0:cc:85:2f:45:5d:c9:db:f3:88:6d:
                    e1:db:4d:20:d4:0c:91:84:79:37:9d:e4:41:b3:e2:
                    33:4e:f4:dc:13:48:ba:13:7f:0e:67:ea:01:61:64:
                    08:f9:3c:7b:85:d0:9f:04:98:13:1f:55:19:34:96:
                    37:21:bd:c5:69:15:8f:06:f4:14:5c:70:48:43:7b:
                    6f:fe:fc:ca:10:92:68:89:bd:56:ce:87:bf:92:82:
                    90:db:4d:5e:61:40:fd:53:9c:9e:15:5a:2b:93:18:
                    ec:ec:61:93:1d:d8:dc:0d:2e:36:57:05:43:5a:08:
                    a0:00:43:d1:ae:4a:2d:f2:bd:00:22:07:7f:b9:fb:
                    e9:76:44:58:4e:e1:17:0b:95:94:af:8b:45:41:75:
                    85:7e:78:f8:d0:31:ab:32:79:41:28:09:99:bc:6f:
                    5d:06:95:4f:ee:b4:23:44:16:2b:f9:0c:47:29:fc:
                    bd:e7:fa:bb:25:de:79:97:b0:f9:c1:09:d3:be:94:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:9A:F2:DE:0E:E2:19:D9:22:18:C7:1C:D7:21:2C:D3:C7:AE:9D
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d4:21:de:b7:58:e0:8d:8e:1f:36:de:db:c0:2a:f1:b8:75:
         2f:32:e7:f2:e3:ad:84:cb:e8:8f:1b:15:10:6f:21:ef:05:d3:
         fe:92:11:41:ef:29:55:06:ff:3c:25:ff:a6:7e:89:0c:0b:9f:
         26:26:a1:b7:5a:4c:52:3d:35:9b:0b:fe:00:c3:49:70:3e:b8:
         72:c1:2c:6e:95:a3:65:c5:25:39:b4:4b:16:41:58:40:15:52:
         6a:a5:cf:78:2e:e8:27:d8:42:52:ea:c1:f6:9c:6a:e9:7d:c9:
         cd:75:fe:80:04:d1:fa:cb:64:3c:35:67:63:c2:5c:0e:46:98:
         56:34:1d:d4:ad:5f:c3:18:6a:30:1a:72:26:13:b3:e8:f2:d1:
         37:76:1d:41:e7:e7:cd:59:81:09:04:12:67:5e:77:c5:af:b1:
         05:37:a5:fd:e8:98:16:65:81:42:28:6c:f1:ee:f6:fd:ed:e5:
         ec:9e:c4:68:72:72:79:e7:27:6c:40:15:ac:a7:b9:09:99:a5:
         1f:e0:ec:bd:65:70:80:e3:86:24:7d:28:44:2e:1c:f1:91:19:
         ef:7e:0f:9a:b5:97:b4:32:06:9a:c6:c4:f8:f3:da:4f:c4:3c:
         02:8e:e7:5c:84:68:20:09:e1:0c:32:4d:65:ea:4b:e6:a4:96:
         5b:28:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:37 2025 by rpki-client