Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File:                     5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier:          /GRiqCtbjRURXYGDxk6o+d6m//M4WemHGx6IAK1mwfU=
Subject key identifier:   A6:6B:6F:0E:8A:7F:C9:10:A5:B5:F7:28:E3:41:70:A7:1B:A1:E4:4C
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer:       /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial:       0198D5BBB534FF3F4A63754B62AFA91AC703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number:          FF
Signing time:             Sat 23 Aug 2025 07:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:45 +0000
Files and hashes:         1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: 7TAv2M6Ovx9n2XlzgOnZMLOexxVJc9lBU/XNDeYvs8s=)
                          2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b5:34:ff:3f:4a:63:75:4b:62:af:a9:1a:c7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
        Validity
            Not Before: Aug 23 07:01:45 2025 GMT
            Not After : Aug 24 07:01:45 2025 GMT
        Subject: CN=a66b6f0e8a7fc910a5b5f728e34170a71ba1e44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:81:bd:76:74:4e:bb:8f:a0:d4:a5:72:ce:
                    11:5c:02:32:33:bc:61:dd:e8:1c:5f:29:26:b8:15:
                    8e:25:aa:9f:38:9c:e2:7e:74:ba:62:b7:5c:40:93:
                    e1:9f:f5:a2:8c:be:a2:94:8f:e9:25:14:db:6b:65:
                    fd:54:3b:ca:1c:73:32:1a:a0:a3:4b:e7:1b:64:fd:
                    13:6b:2e:65:df:2e:f5:fa:29:d2:08:96:a0:1f:93:
                    53:35:72:0a:5d:ca:51:40:c8:18:1f:32:30:ed:97:
                    9c:5b:dd:52:e5:cd:88:3f:22:df:7e:c1:26:38:cb:
                    e6:7b:4a:81:7f:bb:71:4b:85:4e:c9:9d:d4:38:f6:
                    08:77:4a:ae:c2:e1:da:9f:9d:56:3f:1f:d0:f4:7b:
                    79:3a:40:f7:5a:bb:da:94:05:8f:ae:6f:86:83:99:
                    9c:9e:b0:69:7c:09:e2:f6:d9:e9:27:55:70:fb:40:
                    0f:d2:18:ea:87:e5:9f:75:6d:4f:2d:12:0c:32:4c:
                    10:bc:3d:63:20:b9:15:1d:bd:29:39:f2:0f:2c:23:
                    0d:96:2c:5e:71:1e:97:e7:3c:59:65:2c:95:1c:64:
                    aa:6b:f4:f7:b5:b6:32:86:f1:b0:8a:f8:a0:c4:bb:
                    b6:f8:b4:c1:84:56:59:0a:47:dc:23:4f:7b:1e:9c:
                    49:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6B:6F:0E:8A:7F:C9:10:A5:B5:F7:28:E3:41:70:A7:1B:A1:E4:4C
            X509v3 Authority Key Identifier:
                keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:04:7e:71:fa:35:56:68:1e:ce:19:04:3a:75:9d:f0:21:
         e8:ac:59:b6:5e:65:da:af:77:9b:a0:8a:2e:8f:84:1f:d9:2a:
         de:37:05:67:e4:ac:af:02:c6:f1:14:64:02:8a:93:83:41:ca:
         6c:ae:7e:23:bd:e9:f6:4e:7c:a4:f4:05:2d:0f:3d:3d:9f:0f:
         25:22:ed:3b:3f:cc:39:ed:ef:94:0c:00:5c:d5:65:94:86:6f:
         ee:ff:4d:61:7c:ea:e5:f9:56:85:63:7b:7a:24:30:a3:2f:74:
         d5:f8:93:a2:f8:49:9e:64:be:90:1a:36:d0:32:3a:cf:ec:0f:
         c4:bc:cd:81:27:05:7d:c8:d3:99:24:9a:cd:50:5d:37:68:f6:
         cf:ba:28:ae:e4:4f:88:ec:34:0d:00:d6:84:8b:e1:eb:a7:a7:
         96:8f:fb:b9:d7:be:1a:03:55:eb:8c:34:68:fc:af:b1:08:ea:
         2a:e5:55:94:88:31:b6:aa:c8:b9:f5:c3:98:d2:34:3d:87:75:
         22:b5:ae:88:3d:02:e3:f5:90:4b:3f:d6:a9:fd:8e:58:1e:58:
         02:48:a3:9a:9c:cf:c8:9b:46:c9:e1:b3:6e:5c:5e:25:21:02:
         ac:6d:58:78:e1:3c:08:2b:63:c2:78:d8:aa:50:fa:8f:5d:94:
         1a:2e:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:52 2025 by rpki-client