Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File:                     5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier:          oCX1KpLE5bW9YZxuChsh90jXpN86O/54MGrPbLDxa3c=
Subject key identifier:   69:2E:D9:69:55:93:06:B4:C1:2E:B2:18:D4:7C:DF:99:80:03:9E:F2
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer:       /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial:       0198D583612F0A2D05DF0E9111BAF5735472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number:          13D2
Signing time:             Sat 23 Aug 2025 06:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:13 +0000
Files and hashes:         1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: w0zsthiMpSrWUDW43I7dygDqBn1C0DKpOoaFK4Nlc+0=)
                          2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:61:2f:0a:2d:05:df:0e:91:11:ba:f5:73:54:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
        Validity
            Not Before: Aug 23 06:00:13 2025 GMT
            Not After : Aug 24 06:00:13 2025 GMT
        Subject: CN=692ed969559306b4c12eb218d47cdf9980039ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:aa:00:4a:a2:04:ca:69:2a:c8:c5:c2:e4:
                    dd:4c:25:0f:8d:50:01:39:61:36:4f:04:70:4e:f0:
                    de:a7:9e:00:d5:26:71:8b:6c:d8:c4:5b:e9:57:2b:
                    03:a8:13:98:22:fe:33:0e:c7:49:43:34:cb:f0:04:
                    17:21:87:bd:42:07:5c:c6:fa:71:4b:3e:2b:3a:f0:
                    18:63:c5:8e:34:18:a7:93:ed:16:5b:73:de:cc:0c:
                    5f:7b:5f:2a:c0:9e:b0:7f:ca:36:fa:87:f1:fb:64:
                    53:e2:0b:b1:10:dd:2e:e0:96:dd:b0:7f:47:ce:68:
                    89:00:b8:0b:df:54:e7:a2:a3:b8:28:89:b6:78:a1:
                    5a:c6:6f:96:3e:40:1d:be:69:bf:bf:a7:eb:24:ea:
                    40:22:1f:8c:97:2d:87:43:1e:ab:04:35:9a:9a:01:
                    4d:80:f1:37:bf:35:3b:8e:6b:c2:2e:bb:1d:60:1f:
                    29:4f:7e:5a:59:f7:2f:82:20:7f:70:f9:5b:d6:e7:
                    76:1e:59:1f:5f:f2:ec:1c:19:38:01:47:8f:02:b7:
                    77:4e:ff:f6:66:38:e3:12:92:cf:b3:a6:2a:e7:fc:
                    bb:74:34:bb:fe:c3:0c:02:01:e1:92:d8:47:de:fa:
                    72:df:0b:13:b5:69:f6:a9:b7:89:0d:e5:0d:c9:9d:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2E:D9:69:55:93:06:B4:C1:2E:B2:18:D4:7C:DF:99:80:03:9E:F2
            X509v3 Authority Key Identifier:
                keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:67:0c:20:17:b7:8f:d9:60:6c:66:48:1c:b4:b7:32:85:5b:
         18:c5:46:ce:3b:2d:3d:4f:53:fc:2d:0a:f9:16:bb:6e:6e:c0:
         0f:18:35:fc:fd:cd:4b:46:c8:3f:f5:39:d7:f7:6d:c5:7c:75:
         be:0f:ce:ab:a0:4c:3d:90:42:9f:da:f1:80:5a:96:fc:e3:fd:
         8f:92:2d:e0:64:43:01:33:26:0a:2e:7a:31:5b:59:38:f8:39:
         86:01:45:64:5e:8d:3e:ff:ac:34:9c:ff:67:db:ea:dc:5d:b6:
         85:9f:52:7c:62:b1:5f:de:39:5a:f2:01:c1:ba:c1:32:24:09:
         17:d4:8b:13:ba:e4:5b:5d:da:11:9d:97:dc:58:d5:49:d2:17:
         23:f3:25:f0:73:84:00:74:d2:ae:37:cb:69:c1:94:af:18:33:
         47:08:17:e5:5d:26:6a:23:4c:c0:ea:04:32:03:67:28:53:84:
         7c:47:4d:3d:18:57:cd:6b:a1:d0:75:7a:bd:9e:ed:c8:c1:d5:
         ed:a5:44:d4:ca:d1:22:03:04:8e:d0:38:46:cf:2b:3a:8e:01:
         44:63:68:ff:f8:84:ac:52:43:42:ae:92:86:57:09:e4:8c:88:
         45:2f:d2:2e:02:f2:69:0e:55:5f:e9:c3:7c:b8:6a:5d:12:fb:
         22:ca:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:41:12 2025 by rpki-client