Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          KKaBml6OsilQ1/BF3kxESoNQzu9F+TsQIvupUFpUahQ=
Subject key identifier:   46:D1:67:46:56:35:3B:E2:4F:53:88:E4:A8:FE:C6:65:58:C2:9A:DF
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       0198D583B73E385F7C8E904BC428D43E5A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          126D
Signing time:             Sat 23 Aug 2025 06:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:35 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: uYvEx6Dds+Enn8WGA8VHMN9vkymoadTBwmPYXJcuSZY=)
                          3: 9F7dZYjOPi3rs5NLZXUfov8PBWU.roa (hash: j/9WP0wPl17yaC72aPiHSbkKMZUDz6oycbmdGLPUu6A=)
                          4: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          5: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:b7:3e:38:5f:7c:8e:90:4b:c4:28:d4:3e:5a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Aug 23 06:00:35 2025 GMT
            Not After : Aug 24 06:00:35 2025 GMT
        Subject: CN=46d1674656353be24f5388e4a8fec66558c29adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:cf:a3:2a:7b:e7:30:d9:13:23:2e:64:05:
                    ec:91:89:b2:0f:98:75:e8:6b:6d:46:af:3f:6f:00:
                    a1:f6:d3:e2:ef:4a:57:d3:e9:90:94:0c:03:7c:c5:
                    eb:2c:2c:e9:0f:e4:d4:74:a9:75:67:c6:8e:3d:e3:
                    93:be:da:d3:d5:38:df:f4:cf:29:58:2a:cc:0b:52:
                    13:0d:46:cb:58:93:28:9a:70:cc:2c:2f:dd:a2:bb:
                    cf:61:9b:c8:a3:aa:79:fd:31:17:1f:0e:18:cb:99:
                    0f:5c:49:95:77:16:41:b2:7c:e8:91:c6:a8:a0:03:
                    4c:be:27:79:61:be:2d:9f:96:b7:1f:f3:c6:a1:cc:
                    14:0b:0f:15:d5:9a:3c:8f:ff:a2:a8:68:9c:73:ef:
                    f5:38:11:25:86:95:d6:82:15:c4:71:5b:df:c3:6b:
                    33:93:80:44:e5:90:59:1a:de:c2:0b:a1:36:62:65:
                    e8:cc:dd:63:f3:86:5d:77:c3:31:8a:31:62:ea:0a:
                    5c:f2:98:31:eb:37:69:97:20:5f:58:46:56:4d:d2:
                    c5:b0:69:91:64:20:31:1d:ec:5a:65:aa:4c:75:74:
                    62:83:c9:6c:ad:0f:8c:14:68:f8:44:f2:d4:4c:7a:
                    2e:9a:4c:d5:8e:d2:33:10:72:95:18:75:90:a1:7c:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D1:67:46:56:35:3B:E2:4F:53:88:E4:A8:FE:C6:65:58:C2:9A:DF
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a4:b4:99:30:82:51:aa:28:4b:ad:26:ba:62:51:21:be:f9:
         eb:e2:ba:28:89:d8:dd:a3:d0:fa:ef:08:95:0f:10:d0:9d:0a:
         3b:d3:49:03:25:9e:80:36:7d:21:60:90:79:0b:50:ae:ae:bf:
         98:e8:f9:e4:c7:ea:94:16:5c:62:4a:09:69:cc:a7:97:60:50:
         d4:85:55:a2:51:b8:17:91:ea:9d:e4:b1:25:8b:02:43:b4:2c:
         ce:ac:69:18:9a:f2:55:59:82:6f:a2:86:3e:eb:e4:41:42:f2:
         80:e7:38:41:2e:4c:43:07:18:c2:20:08:0b:8f:67:41:21:c2:
         b5:06:cb:37:70:14:93:2b:fa:2c:9b:fc:25:16:f8:20:5d:e6:
         0d:c6:0f:7e:35:c5:16:bd:00:a4:97:59:6f:a9:49:12:23:8d:
         cf:83:7f:ce:cf:cd:63:15:09:46:27:2d:d1:ef:f6:a6:b5:09:
         12:37:ea:bc:8a:8b:5f:75:41:b4:c2:bb:76:f2:d2:d0:46:e1:
         af:84:c3:ad:1d:ab:9a:9c:11:be:f5:f7:15:f1:4c:11:45:f8:
         22:05:a3:06:27:a6:c0:01:64:0b:9a:ca:10:6f:df:00:43:44:
         cb:61:61:f7:12:b3:74:55:6a:c6:65:c4:09:61:c8:04:89:12:
         8e:7b:cd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:13 2025 by rpki-client