Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          HXa79y5poh+IQzItiiFAaeQAIVNKKYHnYl0A8Ty0ESA=
Subject key identifier:   EF:54:28:14:D8:1B:50:0A:B5:A4:BF:AD:E7:51:9D:1F:01:D4:B1:67
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       0198D5BC110BA648E4D131D9906EDEF38E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          1096
Signing time:             Sat 23 Aug 2025 07:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:08 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: qBdQL83W5ipWcUk8AmZFCKqJAbYFUuLs5LTsBwDtzg0=)
                          2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:11:0b:a6:48:e4:d1:31:d9:90:6e:de:f3:8e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: Aug 23 07:02:08 2025 GMT
            Not After : Aug 24 07:02:08 2025 GMT
        Subject: CN=ef542814d81b500ab5a4bfade7519d1f01d4b167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:1b:63:4c:e0:c8:58:ae:02:35:a9:ee:24:
                    94:18:c6:98:54:78:20:13:a5:a2:b3:6d:56:87:de:
                    50:d1:d4:c1:96:0d:03:0d:94:ad:87:ea:79:61:ee:
                    b7:d2:ca:60:bd:44:f2:f0:7e:a2:b1:01:e0:3b:ca:
                    38:05:9a:3f:73:17:cb:10:3c:ee:21:23:b5:f5:3f:
                    95:90:59:00:60:28:93:05:18:6c:68:55:eb:1e:d8:
                    df:0b:25:ec:2b:1d:bf:d6:46:af:e6:c2:aa:91:93:
                    79:9f:86:f3:e8:59:56:e1:ed:d5:05:20:00:00:09:
                    b7:51:52:9c:f6:46:85:db:3a:1a:a1:95:65:43:70:
                    05:e7:71:74:dd:7a:7a:31:41:79:42:b7:c7:23:f1:
                    ae:27:06:51:8f:2d:36:d8:a2:cd:92:02:5a:f4:87:
                    00:dc:15:e8:c0:82:fa:15:61:7d:23:e3:71:42:48:
                    44:f1:55:14:fe:53:c1:18:13:65:6b:dd:65:ab:8e:
                    8c:94:8b:85:04:da:0a:4f:8c:95:88:16:75:13:90:
                    d1:4d:a5:30:f0:31:92:a3:ac:57:68:08:9d:a3:2c:
                    2a:00:0a:9f:61:64:25:74:e5:52:7e:70:29:5e:98:
                    bb:68:62:03:cc:65:76:b3:41:4d:12:a9:8e:36:bd:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:28:14:D8:1B:50:0A:B5:A4:BF:AD:E7:51:9D:1F:01:D4:B1:67
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:37:8e:8c:18:43:64:a8:85:2b:a0:8c:0c:77:c8:cf:f3:
         81:fc:12:a1:fc:ea:15:36:94:54:d3:d9:13:29:91:45:21:98:
         1a:86:f9:68:75:30:e6:c6:76:43:88:6b:4e:f2:49:e8:e7:c9:
         8b:bd:9c:7b:a3:4d:ab:74:00:48:00:56:20:4b:1d:e3:5b:d7:
         f4:59:39:3d:f5:e4:1d:53:c4:14:37:02:4f:9d:42:0d:61:4d:
         9c:ce:c1:b7:fd:45:ae:4f:c4:0f:72:f0:19:3c:46:ef:12:7e:
         ce:d1:14:be:46:9c:1a:95:43:cc:79:10:2b:d4:e5:ce:4d:a8:
         14:a3:fe:b3:41:68:f6:6a:7b:f4:d7:88:6c:fb:4a:54:86:c4:
         34:db:0d:8f:ed:8e:cf:9f:81:8c:65:b1:1c:a3:77:1b:37:d8:
         36:59:4d:3e:17:54:62:48:89:de:13:dc:12:ee:67:3a:eb:a0:
         f3:6d:b7:52:47:0c:29:b4:ef:09:a9:09:99:22:f4:47:ed:1b:
         17:4d:23:47:33:af:9d:84:7a:62:7d:46:90:e1:d5:a6:d2:64:
         03:49:a4:12:2b:7f:b6:79:45:41:90:a2:cf:82:bf:bb:70:ee:
         5e:16:99:dd:f8:93:19:4f:c3:9d:cc:1c:d1:f9:c7:74:8d:31:
         46:d1:43:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:53 2025 by rpki-client