Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File:                     g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier:          SfA6wtG1J6C4popHMdoaSQpRI9TjE1riEqJJCQqQwdg=
Subject key identifier:   E6:5E:C6:45:EE:EE:11:EC:D0:7E:7D:AC:AB:D1:67:75:69:15:48:EF
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer:       /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial:       0198D6988C6232795CAC3DCEE45BD374FC82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 11:02:58 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:58 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:58 +0000
Files and hashes:         1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
                          2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: jNyJnFl50bJeSXtMer1CW5wrmukxBFvoqGfU7wBJ+J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:8c:62:32:79:5c:ac:3d:ce:e4:5b:d3:74:fc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
        Validity
            Not Before: Aug 23 11:02:58 2025 GMT
            Not After : Aug 24 11:02:58 2025 GMT
        Subject: CN=e65ec645eeee11ecd07e7dacabd16775691548ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f0:64:84:51:39:48:d1:78:fd:5a:8d:7d:c8:
                    af:db:da:75:b8:13:ed:35:e6:4c:11:64:8f:76:8e:
                    bd:c7:df:9f:e9:05:51:14:b0:df:44:8e:b4:4d:6e:
                    92:28:45:cb:0c:2a:bd:7f:15:4a:61:e4:ae:15:db:
                    08:6c:5f:e8:a9:6d:3d:e8:fc:91:dd:07:5b:93:a5:
                    11:21:13:27:6a:5a:c1:9d:66:4f:ee:33:5a:71:4f:
                    91:82:2d:8f:0b:40:05:3e:d9:48:d1:09:fd:e3:2b:
                    de:5f:4c:d4:77:a2:18:67:32:61:7a:41:84:5a:4c:
                    43:b3:ea:52:46:bd:f1:2c:9f:4a:13:87:39:5f:43:
                    f2:10:c6:63:6d:2c:e8:c7:92:50:95:13:4b:b0:15:
                    07:99:66:c9:72:10:9f:4f:6f:61:d4:58:07:94:5e:
                    84:b5:a3:ac:77:bc:89:7a:e1:67:ad:32:f4:1c:80:
                    42:04:24:db:5f:36:64:7d:df:21:16:d9:56:58:d6:
                    e5:16:37:b2:7f:18:fa:7b:92:11:af:0b:ee:f6:c9:
                    ce:27:98:9e:2b:33:63:91:27:26:40:85:36:60:48:
                    61:8a:d4:1b:eb:b5:b2:87:3a:8b:04:aa:10:04:00:
                    f0:42:11:b1:82:67:2d:12:b4:cf:51:36:67:ea:83:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5E:C6:45:EE:EE:11:EC:D0:7E:7D:AC:AB:D1:67:75:69:15:48:EF
            X509v3 Authority Key Identifier:
                keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:81:34:75:c5:92:9a:db:21:b6:ee:b5:bf:cb:15:69:87:13:
         8b:97:c9:2d:7a:cf:3a:fb:41:c2:62:a4:7a:fe:90:5a:f9:cf:
         99:b6:82:75:12:2d:1f:96:17:51:6f:04:00:f5:1b:01:e3:4d:
         bd:8b:73:83:02:63:da:84:ac:43:bf:ed:2a:ec:ef:8d:61:46:
         01:95:cf:84:fe:ee:7c:b9:7b:45:e0:2b:0b:4f:5c:d3:40:12:
         77:5d:fd:0a:4e:af:37:32:c8:21:b0:61:7d:36:5e:e2:4c:94:
         ed:d4:10:3f:63:13:da:39:92:6f:67:aa:44:b4:d6:fb:00:74:
         a5:2b:e1:e7:45:75:cb:2e:39:9e:65:5e:2a:98:84:61:01:af:
         6d:8a:e5:79:93:eb:24:fa:76:4d:92:cb:ba:51:0c:41:69:aa:
         50:db:de:19:47:67:d8:ff:5c:86:13:ee:b0:99:fd:37:79:e6:
         3a:f9:26:e8:a5:8b:41:67:be:97:4e:12:e0:3a:33:04:57:2e:
         4f:b8:c1:2d:bd:89:3c:83:d6:cf:d5:06:d0:85:b8:fb:0d:31:
         35:d8:94:82:e6:00:29:64:4f:14:2e:5f:5b:36:ab:9a:cd:76:
         55:7c:83:10:bb:83:1a:f7:43:fc:a4:0b:d8:fb:da:d4:cd:d4:
         02:f9:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:20 2025 by rpki-client