Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          2+rfEV/wX41/6vp0J5kT7OzMLcEoi+l2Scrsw+VCfLA=
Subject key identifier:   9C:71:FA:6A:3C:D9:83:B5:D0:B0:4B:D1:F4:21:DF:14:1A:E0:F6:DD
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       0198D47424376A834642BBD98EE2FBD2A14A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 01:03:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:57 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:57 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: tLng9klfOQmx4sKtBhk97AOKqUSf1cU+b/m8JltKrKs=)
                          2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:24:37:6a:83:46:42:bb:d9:8e:e2:fb:d2:a1:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Aug 23 01:03:57 2025 GMT
            Not After : Aug 24 01:03:57 2025 GMT
        Subject: CN=9c71fa6a3cd983b5d0b04bd1f421df141ae0f6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0d:c7:6d:2b:3f:0f:f1:d2:a2:54:20:a7:4d:
                    2d:7c:05:67:0c:f3:31:1f:c3:fb:e9:40:cd:ee:21:
                    65:06:1c:3d:db:fb:91:14:2d:0a:de:26:37:17:fd:
                    8e:13:5c:6c:e5:f5:ef:b4:ef:8c:8e:a6:8f:f8:23:
                    06:05:a2:62:03:cd:08:c2:51:b9:ce:b0:25:08:61:
                    f9:a7:c8:ca:88:86:7f:af:19:7c:78:1d:73:7a:dc:
                    9c:2d:dd:5d:c9:e8:fd:c9:c4:22:a8:1d:15:e9:1b:
                    4f:46:49:0d:f8:6a:d2:48:70:fa:46:4f:5f:b8:93:
                    d3:64:3a:83:b0:25:53:ec:b2:71:65:be:52:d5:a1:
                    75:03:e5:3b:a0:13:b4:b8:33:38:80:5a:7a:a2:a6:
                    70:8a:ac:09:e6:c6:c8:67:20:e3:83:fa:b8:9d:ab:
                    b4:d4:30:78:5b:a9:b5:ec:2f:56:ba:1e:8d:cb:86:
                    2a:6f:05:0a:77:4a:b3:4c:23:0f:63:ae:88:16:fb:
                    d3:23:5e:62:09:c9:13:3f:b4:da:4e:a8:fc:56:ea:
                    b8:f1:ec:f3:be:2e:2f:80:46:80:99:9d:71:f5:49:
                    b4:e3:92:b8:7c:e3:3b:f0:26:39:45:fb:79:dc:0a:
                    15:7b:b5:ca:fd:fd:19:62:fb:e7:43:67:04:c3:00:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:71:FA:6A:3C:D9:83:B5:D0:B0:4B:D1:F4:21:DF:14:1A:E0:F6:DD
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:53:bd:9e:b9:7b:c2:7c:97:cd:84:c9:d3:ad:7c:1c:cc:1e:
         50:3d:15:c7:51:07:ab:18:56:17:31:c5:c7:95:d0:b1:4a:18:
         d5:fb:5a:55:2b:d8:8c:41:c1:07:76:c2:bd:45:29:17:e2:fe:
         7a:1b:ac:b1:23:ea:d9:e5:68:06:4e:6b:48:6e:62:b5:64:ed:
         fd:ea:22:bb:d2:c8:ae:15:e2:6c:e8:7b:a1:92:9a:1f:b0:7d:
         93:1e:b7:f5:65:b0:ff:a6:59:a2:e5:9a:fa:23:31:c0:99:63:
         42:e8:5c:55:55:15:31:b4:bf:78:ac:c2:90:a1:8d:48:14:e2:
         86:e8:1a:46:bf:49:43:f3:9b:53:70:32:ba:6b:ee:ed:65:b0:
         91:f0:af:72:19:a7:2e:d5:83:4f:c2:05:2e:0b:02:66:cb:45:
         75:6b:0f:ad:11:23:53:43:7d:13:0c:ae:b0:d6:b4:e6:2c:31:
         cc:06:b3:8e:a5:e8:fd:ac:9a:83:39:db:a3:de:fe:1f:44:de:
         4c:8c:2a:30:3b:d2:08:2f:bc:5e:c2:b5:ed:d5:d7:ea:0f:97:
         a2:b6:ae:3d:8e:54:ec:6e:a4:2a:a1:b9:19:cc:d1:08:92:44:
         a8:4a:82:5a:8b:78:c2:93:f3:a0:ca:e5:b9:fc:98:a2:99:f7:
         67:e0:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:14 2025 by rpki-client