Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File:                     fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier:          wGFNLpUSW/lxl3FoRxxt1YyM6Li0R12BlcvaahvwRCQ=
Subject key identifier:   D0:A2:62:CD:59:ED:82:6D:BE:7C:0E:DD:0D:88:2B:4F:80:27:C4:F6
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer:       /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial:       0198D5161E0AC5C99FEC2A59F22F3EAB985A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number:          05F5
Signing time:             Sat 23 Aug 2025 04:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:53 +0000
Files and hashes:         1: 8Rj91VmErY8nG9AvttlpyE1wLJw.roa (hash: M9Ao53zeBk6GPnJYr5ZYdgrGPitX+aJ7EjLXG/7qqNM=)
                          2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=)
                          3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=)
                          4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: ikcDrOTe1uK3Ql0e6BPYlakDy5N5/dtoCfr9PI6HNK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1e:0a:c5:c9:9f:ec:2a:59:f2:2f:3e:ab:98:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
        Validity
            Not Before: Aug 23 04:00:53 2025 GMT
            Not After : Aug 24 04:00:53 2025 GMT
        Subject: CN=d0a262cd59ed826dbe7c0edd0d882b4f8027c4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:b3:1b:9a:69:fa:8c:97:7d:b1:c6:3c:76:
                    2b:1f:fb:e8:7d:b0:e0:ef:68:16:54:0d:57:dd:d7:
                    40:e0:bb:7c:0b:c8:0f:4a:a0:16:07:0f:51:f5:f6:
                    1f:09:3b:5d:51:7f:90:b8:e0:3a:01:54:38:d4:02:
                    e7:64:fa:5b:6e:8d:68:d9:0f:de:1b:39:df:1d:9e:
                    cc:53:9f:b9:07:87:54:05:cc:85:de:bf:4b:07:f0:
                    9b:bf:d9:f7:7c:74:2d:a9:60:03:79:ca:3b:d7:da:
                    4e:e6:aa:7d:9e:1a:fc:55:a1:07:41:05:02:7f:fb:
                    e3:30:c0:18:d4:3f:62:4e:6e:16:88:8a:2d:fc:a5:
                    d1:05:ce:55:75:b8:6e:fa:f3:33:bc:5e:a8:a7:2c:
                    ae:22:d9:70:98:6a:44:a0:8e:4d:37:c0:87:67:de:
                    98:59:15:8c:2a:31:1e:d6:bd:90:2f:47:ea:6d:eb:
                    99:09:36:0c:70:13:2f:65:0b:14:1d:2c:89:19:78:
                    76:f1:83:26:9e:fe:f5:eb:3d:3e:74:05:0d:0e:f3:
                    a8:7f:90:96:ba:76:00:8b:11:ae:dc:2a:7e:58:b8:
                    8a:12:d0:04:14:78:6a:c8:85:cc:26:33:1e:58:ce:
                    e8:45:92:c8:71:00:fa:78:8a:ed:2d:70:e4:23:63:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:62:CD:59:ED:82:6D:BE:7C:0E:DD:0D:88:2B:4F:80:27:C4:F6
            X509v3 Authority Key Identifier:
                keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:e9:35:78:3a:01:1e:f6:8a:5f:10:09:22:1c:7b:ad:ab:
         62:d8:89:90:f7:18:49:d8:b2:22:f4:8f:e1:5c:25:71:2a:e1:
         64:3a:f6:c9:20:06:df:63:bd:26:99:59:af:a1:5a:a8:df:73:
         91:04:41:1d:78:fd:90:4a:5d:ad:99:8c:5e:c2:ec:a4:1a:96:
         69:7f:f6:a1:a1:f7:09:5c:25:ce:16:be:a5:31:12:72:2b:05:
         e7:f7:d7:4e:5e:7b:aa:45:8f:5f:5f:6a:ed:39:6e:b4:76:26:
         16:b7:69:c5:e5:37:17:6d:07:ac:55:fb:ec:d7:e6:8f:93:af:
         75:15:32:d1:5c:a5:ad:e7:9f:0f:bc:cb:60:f3:42:69:97:93:
         09:d0:a1:36:a6:d2:30:d8:a6:38:fb:15:90:42:68:61:24:7f:
         0d:59:83:06:67:0b:f5:ce:cd:08:c5:19:58:69:20:29:0d:ed:
         26:d9:74:79:23:7e:ba:40:8a:34:48:0f:5f:ca:8e:62:e3:87:
         00:06:b3:b1:5f:b3:da:de:69:a1:c4:e1:2d:91:13:f1:da:f0:
         44:e4:bf:53:12:82:75:45:b9:f3:d4:b2:5b:34:72:be:bd:49:
         27:11:68:0b:0a:6d:d5:cd:f8:ca:09:91:84:b0:b9:fa:fc:e1:
         30:88:d0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:10 2025 by rpki-client