Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          TiTMTCpPdReoKJfAXgjBeYE/aZLW8rcKyMtCTHvoctk=
Subject key identifier:   F3:AB:C5:DF:5A:FE:E0:36:99:B1:34:27:C1:DF:9E:51:AB:D8:93:DF
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       0198D5F125E493434D604046E129DA409386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          13C8
Signing time:             Sat 23 Aug 2025 08:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:07 +0000
Files and hashes:         1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
                          2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: C62vmaxZVyJFRE4a352l0N/todXjasU7CGfMNzw//9E=)
                          3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
                          4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
                          5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
                          6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)
                          7: mV18Ah11BcP39CQhLtpf79pVug8.roa (hash: RGt06BrejPetx9+VOGQ2Y1/RTWPMTF5VhkkYrYGyW40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:25:e4:93:43:4d:60:40:46:e1:29:da:40:93:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Aug 23 08:00:07 2025 GMT
            Not After : Aug 24 08:00:07 2025 GMT
        Subject: CN=f3abc5df5afee03699b13427c1df9e51abd893df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:1d:a1:06:14:02:1f:a0:46:90:45:33:a5:
                    42:bb:17:96:0b:c7:56:d6:4a:01:f5:32:9a:f1:b4:
                    8f:05:3a:60:95:b3:ea:3e:be:25:d0:e6:94:28:40:
                    e2:f1:9c:7c:9f:34:3d:98:12:93:eb:49:c2:ae:27:
                    1f:77:db:ee:70:51:3a:4c:33:22:8c:fa:ee:0d:57:
                    e8:5e:20:4e:d1:4e:88:fd:d1:28:2f:0d:dc:ca:4e:
                    74:75:95:b2:bc:be:6f:82:5f:b8:eb:c1:1a:a4:14:
                    e5:9c:ab:1a:68:ba:4e:af:eb:f6:46:7b:ef:a5:55:
                    be:16:fe:8c:e6:90:45:d9:00:8c:ce:10:19:71:16:
                    b0:03:c8:60:97:f0:d8:6b:11:a1:1d:a2:04:bc:58:
                    7a:31:f4:4a:91:58:ff:09:ad:81:d5:5a:aa:44:5c:
                    6d:08:03:c0:27:77:ff:3b:b9:ce:67:3c:54:80:cc:
                    ca:3d:13:cd:15:a6:1c:8c:67:56:24:23:93:5d:f8:
                    a1:d2:97:f9:7b:da:66:9a:2d:f9:4c:bf:d4:40:31:
                    78:04:e6:14:da:cc:63:4c:41:c1:ed:df:4f:ae:5d:
                    e2:36:cf:93:92:21:27:b3:ca:ce:96:25:26:76:f5:
                    45:63:46:cf:97:3a:42:50:10:3f:d1:81:88:2f:7b:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AB:C5:DF:5A:FE:E0:36:99:B1:34:27:C1:DF:9E:51:AB:D8:93:DF
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:50:90:f9:af:35:71:35:64:b7:10:30:5b:ce:a3:c8:f4:02:
         8d:a8:c0:93:eb:32:6f:d2:8d:d1:c2:3b:7b:e3:f9:f5:c8:56:
         84:a6:ec:88:6c:2c:37:55:66:35:a8:8e:aa:e1:f1:05:59:eb:
         c7:83:30:69:27:6e:e9:d6:55:b3:c0:b1:9b:55:8e:06:ab:ae:
         8b:4c:3b:b1:ce:bf:3b:87:ba:28:31:f1:90:54:4e:b7:fc:93:
         e7:d3:2a:0f:fc:d1:9e:d5:17:c7:90:97:84:22:84:96:25:b8:
         23:10:66:4e:c8:86:fe:4e:18:77:0b:4c:fb:c2:49:40:88:60:
         67:74:18:40:41:4f:ca:8a:fc:0d:2b:74:54:15:8c:22:b7:50:
         15:71:58:ad:e8:85:16:df:55:24:cd:3b:01:ec:3d:65:60:b9:
         13:a7:eb:64:55:f2:b0:ec:61:0f:44:5e:d9:b8:b6:4e:0c:68:
         0c:5e:9e:69:cf:8d:99:79:b9:9b:68:16:e6:1b:4b:e5:bc:0b:
         86:4b:47:38:9c:bd:88:e3:0d:da:6b:72:c6:0b:ba:47:5a:b2:
         e3:17:8b:48:a8:cc:88:e6:77:10:48:0a:79:c3:40:1b:b4:fb:
         b8:a0:00:59:5d:70:73:cd:56:81:48:a5:df:20:fc:ef:88:c7:
         a1:1b:0e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:24 2025 by rpki-client