Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File:                     p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier:          2cHYmurBEnmW7JN/Kyq4+klCP5tXRBWOPIK9T1vUEm0=
Subject key identifier:   77:A3:53:42:5A:AA:15:00:68:A6:7D:61:73:5B:38:6F:04:2B:F9:42
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer:       /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial:       0198D54DD9D72090D6EF44C3E298BE0F31D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number:          1363
Signing time:             Sat 23 Aug 2025 05:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:45 +0000
Files and hashes:         1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
                          2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: vi7JFgD0hkKYoiLBc6DO8fDT+KEtcpD0uLcXeD3yuCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d9:d7:20:90:d6:ef:44:c3:e2:98:be:0f:31:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
        Validity
            Not Before: Aug 23 05:01:45 2025 GMT
            Not After : Aug 24 05:01:45 2025 GMT
        Subject: CN=77a353425aaa150068a67d61735b386f042bf942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:1a:f8:6e:ca:bf:0d:58:59:fe:51:5e:4e:
                    ce:01:f4:64:cc:a1:e9:ce:ff:e2:16:36:ef:a6:30:
                    7b:42:8f:a9:ce:dd:fc:6e:e0:9d:7c:01:e7:a4:60:
                    06:2c:2e:ca:a5:f2:b2:d3:3e:8e:65:45:4a:55:eb:
                    ae:a9:42:47:fc:7f:e0:87:19:26:31:a0:c7:df:9b:
                    e5:6b:1b:2a:37:1e:8c:35:72:8f:96:b1:10:5c:35:
                    d3:87:5a:8b:e3:f4:f6:a5:23:6f:eb:eb:b2:2d:cb:
                    ed:df:bf:71:e2:b2:8c:c2:20:eb:fb:28:db:90:f2:
                    70:21:12:57:14:4c:1f:a0:e1:78:51:ea:75:11:82:
                    9d:d4:d7:88:20:1d:8f:95:44:98:ce:dc:d7:9c:46:
                    8b:f0:dc:6e:68:13:3f:f9:9a:79:1a:f8:de:f1:9b:
                    63:58:bc:4c:10:df:c0:09:14:1e:52:e9:4e:03:2a:
                    23:27:65:39:80:e1:70:ee:1a:d3:2f:18:a9:73:1d:
                    36:14:13:eb:5d:ae:b4:b5:08:e1:9e:a7:ee:08:cc:
                    af:08:3d:80:b2:a5:3c:67:24:2f:94:35:98:03:92:
                    88:0a:47:dc:28:dc:76:1b:2d:d2:64:b3:8d:36:da:
                    38:99:cc:ea:d2:8e:36:b4:1f:0d:1a:75:3f:7b:e5:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A3:53:42:5A:AA:15:00:68:A6:7D:61:73:5B:38:6F:04:2B:F9:42
            X509v3 Authority Key Identifier:
                keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:40:dd:93:76:56:a0:95:de:ea:2c:72:69:3b:8d:80:c4:
         d0:b4:5c:60:b0:f1:cc:c5:e5:48:5d:17:72:52:aa:62:98:0d:
         fa:05:16:3a:be:93:4c:88:84:76:ec:de:a3:6a:9f:28:b6:74:
         fe:f0:ba:bb:86:7b:16:a0:d6:22:4b:dc:d4:5f:d7:aa:e8:fd:
         66:da:97:c2:9f:a2:47:3e:1e:71:e6:14:dd:26:30:ed:9f:b1:
         15:00:0d:38:9b:04:25:4c:27:cf:18:0a:64:8f:32:43:0a:1a:
         3e:39:a6:06:5b:d1:a2:23:09:1d:91:72:5b:cd:e4:56:ec:a9:
         aa:38:0b:8a:ea:47:62:3c:60:15:fc:05:58:3a:9f:a3:6f:97:
         e5:e3:03:e5:82:38:b2:e8:b8:cc:08:ff:da:00:db:d5:8c:33:
         3a:57:e2:e5:ef:5c:b5:13:31:b7:d7:3f:c6:68:30:49:75:e1:
         29:65:24:b0:8b:77:cb:8d:d7:ed:53:ed:8d:a2:64:a6:7f:8c:
         26:b2:70:b4:41:75:d9:fc:ad:04:48:e8:15:b8:13:5b:78:71:
         bb:26:77:9f:07:bd:94:d0:33:4b:2a:4f:51:47:76:e7:0f:e1:
         09:ec:59:34:32:3d:bd:b7:e9:51:eb:2d:a5:b2:08:fc:8a:69:
         c7:9e:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:20 2025 by rpki-client