Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          k6f+Tq4tlsj1V2qhKioomSNAU0yFgnTAa3tPqoG/2lU=
Subject key identifier:   ED:6E:53:A8:F9:33:E8:D8:D1:27:22:5A:76:34:4D:DF:95:45:19:23
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       0198D54EAE8218C993D89F724FE9595AF80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          1394
Signing time:             Sat 23 Aug 2025 05:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:39 +0000
Files and hashes:         1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
                          2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
                          3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
                          4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
                          5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
                          6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
                          7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: 17HUtfdMGDucAfFzPRu9F0/Urp+C1D40khVm+jltIk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:ae:82:18:c9:93:d8:9f:72:4f:e9:59:5a:f8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Aug 23 05:02:39 2025 GMT
            Not After : Aug 24 05:02:39 2025 GMT
        Subject: CN=ed6e53a8f933e8d8d127225a76344ddf95451923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:a6:53:87:6a:c7:ee:3e:40:bc:87:7f:18:
                    d4:6a:3f:ef:ec:52:9c:10:eb:eb:00:fb:c0:c4:bb:
                    a1:1c:77:9e:f6:e8:fb:50:b2:0c:fc:d7:e9:04:8a:
                    af:7f:50:be:5e:6c:19:d4:e1:c5:65:2e:fc:b5:dc:
                    d1:56:e5:37:ce:7d:dd:d0:a0:f1:b7:42:4c:7f:b7:
                    4e:9f:61:eb:ea:45:2f:7c:bb:d7:d7:4d:6a:49:19:
                    54:fe:59:ea:2d:d2:be:d9:8b:0e:dd:5b:7b:3e:60:
                    9a:94:01:99:23:77:1c:c9:c5:b3:e1:f1:ac:47:48:
                    c8:48:cc:99:d3:6b:b2:be:43:aa:57:85:ec:28:65:
                    b3:53:fb:7c:c5:bf:73:17:41:15:2a:1d:18:20:02:
                    a4:bc:b3:be:a7:57:82:db:82:84:b8:f3:7c:2f:be:
                    fa:df:90:a8:68:ae:5c:eb:6d:1a:b6:3c:f4:4f:57:
                    9d:a3:cd:e6:01:98:7c:8b:f1:4d:9b:86:c5:6c:ae:
                    d1:27:46:98:7e:75:dc:0d:b0:72:8f:80:b8:28:01:
                    c7:ab:4c:cb:5c:36:7e:2a:05:8e:13:26:60:2c:32:
                    05:bb:58:00:7c:5e:c5:a8:92:72:89:f2:26:ce:18:
                    42:42:3a:ce:bd:f9:d7:63:74:b8:6e:1d:be:40:c9:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:53:A8:F9:33:E8:D8:D1:27:22:5A:76:34:4D:DF:95:45:19:23
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:af:3e:f9:65:f3:86:04:a2:b8:67:ef:c7:d4:6a:c1:21:65:
         86:eb:71:64:f6:5e:05:45:4e:93:63:30:a5:bf:ba:ca:cf:36:
         d7:9c:98:81:1a:78:39:d2:60:f1:93:0b:6b:70:14:a8:ef:4e:
         72:2b:56:d2:c2:c4:17:9d:f0:1e:61:95:24:8c:a5:c7:2f:f8:
         77:cf:0c:df:93:96:31:1f:e1:aa:2d:62:4f:47:c4:ce:8b:d1:
         e0:d0:10:3a:b5:93:ef:23:6d:a3:57:99:97:c0:f8:41:e7:ad:
         ad:8e:7b:01:c6:5a:77:45:e8:49:14:63:4c:40:1f:9d:75:66:
         5f:9e:23:96:30:e5:f5:df:c1:4a:88:e5:28:20:38:83:c4:e4:
         e5:cb:5d:ee:34:e6:1b:eb:f4:f5:e3:57:a8:3f:4c:0c:4c:53:
         12:16:d1:ee:9c:80:76:32:06:02:0e:71:12:dd:de:b8:25:ff:
         df:53:13:4e:b2:a2:34:6b:19:32:db:52:48:2b:4a:f9:d7:ff:
         3a:9d:ac:65:9f:eb:6f:9a:f4:84:5a:ab:5e:17:36:30:66:5d:
         c5:b9:48:87:b7:23:39:b2:44:72:d3:15:60:3c:3d:3f:fa:7d:
         a7:a8:22:8f:46:c8:ab:26:0d:b2:90:8b:60:78:9d:8c:28:04:
         0f:76:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:29 2025 by rpki-client