Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File:                     aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier:          0CTkwXxYMbx+s6vQdgD8M1HlXzj7tYiLj6bh8zCy050=
Subject key identifier:   5B:9F:D3:6C:10:ED:E4:78:83:21:87:DE:E9:C6:77:92:21:2F:29:73
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer:       /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial:       0198D4734C642CFE9FBD93816ADD9DA3D86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number:          0135
Signing time:             Sat 23 Aug 2025 01:03:02 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:02 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:02 +0000
Files and hashes:         1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
                          2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
                          3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: 9HjWmqGjLmrX1NwlMLXeuXW7FA/of66QeJSxWYL1KJM=)
                          4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:4c:64:2c:fe:9f:bd:93:81:6a:dd:9d:a3:d8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
        Validity
            Not Before: Aug 23 01:03:02 2025 GMT
            Not After : Aug 24 01:03:02 2025 GMT
        Subject: CN=5b9fd36c10ede478832187dee9c67792212f2973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:55:3e:89:bd:69:fd:da:cd:d2:b4:b4:cc:
                    80:52:c8:00:f0:1b:a5:ef:20:1b:01:4b:5a:54:39:
                    a2:ea:b0:08:8e:b5:a2:0f:76:12:db:47:29:3d:39:
                    73:e5:c8:92:c2:4b:12:db:0d:55:0f:7a:f7:07:0f:
                    dd:10:2c:36:02:d1:34:c3:8a:29:88:f8:c6:24:1a:
                    8b:14:3e:d4:23:f5:26:e9:b7:cb:8a:c6:4f:ad:16:
                    88:b4:02:78:e2:e3:ea:92:09:be:82:b9:88:a0:94:
                    39:5f:bd:1e:16:4a:b2:70:af:64:53:ec:a3:5a:b3:
                    6f:be:16:48:2e:d6:ac:74:83:f3:c2:85:47:d5:4c:
                    3f:09:99:0b:06:01:38:ff:6c:49:40:a5:ba:f0:66:
                    18:05:bd:95:8d:81:f7:47:29:81:e7:4f:ad:a1:c1:
                    e3:e8:8c:cf:6b:79:9a:96:bc:28:4d:de:19:19:27:
                    9a:83:0e:9b:f7:c2:6a:53:fe:99:a4:f9:52:25:12:
                    7b:3c:44:62:40:a5:fb:4a:db:d5:82:b3:51:c2:fe:
                    38:8f:34:03:b1:67:e6:b5:55:a5:52:af:de:5b:67:
                    19:6e:95:45:0b:47:ab:86:0c:9b:45:24:52:95:36:
                    a9:56:32:64:6a:36:c5:95:0d:6a:72:4e:7c:39:97:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:D3:6C:10:ED:E4:78:83:21:87:DE:E9:C6:77:92:21:2F:29:73
            X509v3 Authority Key Identifier:
                keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:2d:05:b7:6b:80:bb:23:82:0c:5b:bd:3c:12:cd:e8:09:
         a9:63:3e:d9:57:bd:1e:24:4b:47:fc:bf:1c:fc:f6:c7:ed:91:
         92:cf:2b:a6:a9:01:81:20:20:71:b6:5d:35:bf:5e:3b:a4:69:
         78:d2:63:76:c2:aa:cf:e6:ed:e2:61:44:f4:49:d9:3f:b2:4b:
         73:10:c3:2c:9e:44:1d:cb:bb:31:c6:a8:77:29:ac:50:3e:43:
         de:b4:3e:79:39:5e:05:a2:cd:40:8d:db:a0:ac:b2:f8:79:47:
         b4:83:6d:81:5e:fb:e6:d4:6f:b1:06:41:bd:56:7c:87:d3:0c:
         69:12:fd:49:8b:a3:d1:c8:0d:3a:62:e2:3d:75:7f:45:bf:39:
         c3:67:74:c7:02:29:37:fe:74:71:70:02:3e:64:92:fc:68:ec:
         c5:21:c4:0b:1b:bf:07:19:41:d6:1f:69:cc:df:48:24:53:ab:
         9f:9b:b6:26:6c:97:92:12:da:62:05:24:8f:63:0f:ed:dc:10:
         8b:07:0a:ee:11:39:0b:ca:51:ea:cf:e7:b6:fb:1c:22:3a:73:
         10:ca:ea:02:6d:2b:0a:21:6a:ac:1b:02:4c:3f:18:d9:20:8b:
         99:a5:ef:7d:cb:ff:27:94:d2:c0:d5:10:4d:bc:55:f3:f1:91:
         93:76:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:10 2025 by rpki-client