Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          Jp8pFouARLc1eJliU5ES/TSJoLJtbxGEyVnjGRhiRag=
Subject key identifier:   9C:80:66:E2:3A:F3:5E:97:5D:94:08:3E:E0:21:0F:B8:99:48:90:73
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       019A03354A317AB5CB88D217E8C4EDDFB37B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          1464
Signing time:             Mon 20 Oct 2025 20:00:15 +0000
Manifest this update:     Mon 20 Oct 2025 20:00:15 +0000
Manifest next update:     Tue 21 Oct 2025 20:00:15 +0000
Files and hashes:         1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
                          2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: Ps728FLvUqKCGQ2yFnOKhbmEEdXNtHrp18IA7p/j2vc=)
                          3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
                          4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
                          5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
                          6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)
                          7: mV18Ah11BcP39CQhLtpf79pVug8.roa (hash: RGt06BrejPetx9+VOGQ2Y1/RTWPMTF5VhkkYrYGyW40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:35:4a:31:7a:b5:cb:88:d2:17:e8:c4:ed:df:b3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Oct 20 20:00:15 2025 GMT
            Not After : Oct 21 20:00:15 2025 GMT
        Subject: CN=9c8066e23af35e975d94083ee0210fb899489073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:3c:58:32:1d:2c:b3:88:a0:28:97:b3:79:
                    45:e4:c3:38:e9:b1:6b:26:9e:95:10:e8:1b:4c:8e:
                    88:61:dc:4e:27:22:0a:6a:bc:5f:9f:38:3d:5e:5b:
                    bf:af:cc:ae:f4:3c:4e:83:66:8f:6f:0b:9d:56:4c:
                    a2:b5:15:2c:54:b9:9b:7e:91:67:23:39:48:02:e4:
                    7c:e6:1a:27:0a:41:ee:54:8f:e4:be:10:20:f0:72:
                    75:82:ac:23:f2:6c:43:14:80:ab:3c:a0:17:5b:8a:
                    8a:6f:02:fe:e8:96:0a:f6:f2:c5:b3:0a:a3:d2:89:
                    73:7a:6e:5b:bb:fc:b4:cf:fe:21:d0:1c:33:8e:95:
                    26:5a:1e:aa:81:4e:c6:bb:81:e4:a8:ce:17:5d:84:
                    b4:96:ef:ee:2e:7f:80:48:7b:bf:e3:41:c2:2c:8e:
                    ac:bf:d2:c3:e4:28:52:8b:5f:56:7a:af:49:84:38:
                    dd:0e:e8:b0:63:d6:34:96:27:0a:e9:48:1a:55:93:
                    7b:1a:4f:e6:e5:7f:b5:85:b6:05:de:a4:71:ba:0b:
                    4f:88:f9:22:f4:f1:e8:5a:d5:c7:cc:bd:e1:85:ee:
                    d2:0c:30:c7:34:08:da:77:0e:59:2f:b4:2a:18:be:
                    05:b3:7a:ea:b7:35:85:e1:4c:37:63:0e:b0:87:fa:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:80:66:E2:3A:F3:5E:97:5D:94:08:3E:E0:21:0F:B8:99:48:90:73
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b4:24:c2:e7:80:fc:a1:76:c6:ae:54:fd:b0:a2:cf:77:a5:
         67:86:d3:55:72:3b:c8:83:96:31:96:67:c4:74:05:78:14:99:
         ed:f4:19:d3:8d:1c:48:da:e3:0e:c4:ab:8f:15:48:50:57:50:
         a6:b5:04:85:6a:4e:b3:01:60:45:ba:79:e0:c8:58:7e:c6:ec:
         72:15:8e:e5:e0:cf:60:55:9f:31:0a:57:a9:fd:a9:bb:0b:66:
         2c:b9:39:ef:a7:42:e3:4a:e7:54:9d:2a:db:11:b0:e8:e2:ca:
         9e:7b:46:da:49:83:53:a3:ff:20:08:a9:4e:89:58:07:da:71:
         a3:de:af:5a:0c:1a:2f:b1:63:29:7e:35:2c:94:e1:85:8e:89:
         e0:f7:ef:52:00:94:9e:d4:9f:f6:32:4c:b3:4c:5d:9b:99:a0:
         fa:ea:db:68:e6:17:9e:49:b5:03:c4:5b:1a:1e:9e:c8:82:36:
         6b:93:93:fc:7e:9d:0c:7b:16:56:61:ea:66:8d:db:ae:3f:6d:
         e3:4b:46:24:d9:b6:c8:36:b2:34:9c:6a:10:d7:af:56:c3:de:
         d8:46:61:e1:c8:65:94:03:9b:0d:bb:83:8d:e4:10:86:e0:6c:
         e6:ab:b6:2f:a0:60:f8:54:48:39:4a:dc:ab:03:62:0a:88:c7:
         d9:9f:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:57:08 2025 by rpki-client