Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File:                     5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier:          DcSXH6P7dqNu4k9qXfHdxr7kH+MdKzxmNUDhKn0Vu9w=
Subject key identifier:   99:07:74:EA:1F:47:3C:72:AA:88:67:42:09:8F:47:C1:BC:03:73:71
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer:       /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial:       0198D54ECDA4AFEA293F3B646F9AEA2F5A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number:          0D67
Signing time:             Sat 23 Aug 2025 05:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:48 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:48 +0000
Files and hashes:         1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: y3aMELsTzhCBowgeGhyiP7Bz9p+75KJxf/ZwKFivqm0=)
                          2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:cd:a4:af:ea:29:3f:3b:64:6f:9a:ea:2f:5a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
        Validity
            Not Before: Aug 23 05:02:48 2025 GMT
            Not After : Aug 24 05:02:48 2025 GMT
        Subject: CN=990774ea1f473c72aa886742098f47c1bc037371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:48:2e:1b:46:3e:e3:2d:0f:79:db:2f:32:
                    26:50:43:02:e6:0d:f2:62:07:61:8f:6e:c1:32:eb:
                    9b:cf:4d:75:28:fc:9b:42:3a:9f:f6:dd:fc:9a:11:
                    c4:96:2b:c8:2f:a7:cc:2f:3e:81:f7:cd:ca:36:5f:
                    a3:c2:ac:02:4d:e3:c5:67:91:b7:b0:8d:5a:9a:14:
                    15:c1:17:5d:31:07:da:c6:df:4b:94:39:5b:5f:71:
                    a9:10:5b:7d:32:02:c6:2d:aa:f1:84:ae:06:37:0a:
                    f3:a5:da:16:d9:40:2d:c5:64:61:8b:19:39:5a:ab:
                    47:9e:a2:5c:a5:ca:3a:a7:0e:a7:5f:98:64:46:d1:
                    f0:f3:a1:4e:c6:8f:a8:18:91:b2:67:21:28:eb:f1:
                    6c:62:8c:f9:37:f8:dc:7e:47:13:e0:d9:32:f5:bb:
                    aa:1e:00:d0:dd:37:35:9a:a8:79:f0:95:7f:fa:7f:
                    b5:e3:86:cd:35:f6:e2:2b:a8:1e:d2:ff:15:7f:c3:
                    47:00:71:96:b0:b7:22:99:81:aa:0d:c4:ff:69:84:
                    5a:52:83:26:8f:66:de:11:1d:0f:24:ea:72:34:ce:
                    63:65:fa:9b:8f:a9:73:f8:c1:85:ca:81:3a:86:02:
                    e5:68:68:86:b2:53:47:d3:4b:80:12:6a:9c:de:7a:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:07:74:EA:1F:47:3C:72:AA:88:67:42:09:8F:47:C1:BC:03:73:71
            X509v3 Authority Key Identifier:
                keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:e2:ce:f5:63:48:83:0e:5d:06:f5:da:21:7b:9a:f8:4b:
         e4:a9:88:4b:70:6c:0c:ce:19:61:46:b1:41:c2:f3:fb:b4:82:
         77:2d:fd:5e:ef:a1:ed:30:ad:25:92:95:16:fe:ad:11:23:b9:
         4d:bf:44:55:38:41:e1:16:54:2b:24:f1:84:77:ca:45:06:ba:
         65:51:a1:f9:18:8e:26:bd:a6:1b:ee:ec:51:79:0a:f8:c7:1e:
         cb:77:84:dc:48:d1:91:29:2a:27:2a:69:df:5e:49:4b:d4:16:
         cd:de:a1:e0:d6:96:96:3f:aa:f8:56:bb:8f:bb:77:39:de:4b:
         74:33:18:fc:a1:52:73:c9:77:11:25:ba:b0:e9:c0:e1:d8:2b:
         b0:0b:a7:ea:b5:e6:d5:07:55:31:bb:cc:03:3b:b4:7e:fa:3e:
         73:5f:a7:3c:cc:32:b7:54:96:15:3c:b1:54:f3:a6:f6:d3:ff:
         10:c2:ed:ca:30:74:32:a3:d4:bc:7c:2f:55:ef:b4:7d:c8:1e:
         ef:23:b4:72:a6:ab:97:aa:df:9b:22:75:78:1c:c9:a1:0c:ae:
         c7:61:8e:91:71:a2:bf:a1:66:fe:8f:e4:e2:68:98:90:2b:23:
         22:e4:52:47:0b:08:e3:b4:0b:96:8c:5b:fe:06:85:2a:6d:40:
         27:f2:64:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:28 2025 by rpki-client