Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File:                     5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier:          DqHlduZF/vQ2ZbQsmFcQnpQk/Cd0QpEScY5maJ0ZO6U=
Subject key identifier:   7F:80:C1:15:15:B2:68:85:C0:F8:A8:D1:48:9E:D3:59:76:88:A5:84
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer:       /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial:       0198D473C63A71E3670F612C9DC16E494A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number:          12DA
Signing time:             Sat 23 Aug 2025 01:03:33 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:33 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:33 +0000
Files and hashes:         1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
                          2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: YWC6AgJNaP7iPa3cBexIAnTTtJOK09mneviBqCBVjmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:c6:3a:71:e3:67:0f:61:2c:9d:c1:6e:49:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
        Validity
            Not Before: Aug 23 01:03:33 2025 GMT
            Not After : Aug 24 01:03:33 2025 GMT
        Subject: CN=7f80c11515b26885c0f8a8d1489ed3597688a584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:df:57:3e:38:e8:7e:38:63:19:6e:96:ad:
                    52:0e:c6:26:f8:29:e4:60:36:79:63:da:92:98:b9:
                    d8:25:5b:24:2d:77:b3:b8:23:41:95:a9:a0:cd:17:
                    86:1b:a7:32:26:61:a6:2c:2c:fe:bf:b1:18:fe:00:
                    88:fb:29:71:d0:a6:a7:11:12:33:53:86:11:41:d6:
                    b0:2a:86:c6:aa:f3:c8:97:bb:9a:ab:1f:31:8c:6e:
                    b0:bd:8e:58:05:af:d5:8f:2a:72:1a:8f:6e:8b:da:
                    51:4d:5c:33:5a:0f:63:5c:9f:f0:cd:60:85:4c:e9:
                    c5:28:c7:d7:83:20:6e:40:77:e4:66:e4:73:fc:13:
                    0b:f0:a9:9c:0b:8c:c9:aa:5b:66:7d:d0:2c:bd:fe:
                    1b:73:97:c8:56:d0:f9:df:25:52:f6:00:a7:18:58:
                    ed:3f:ca:e6:6c:05:93:53:cc:60:21:df:ab:fe:28:
                    de:e5:31:5d:77:b3:74:34:a7:fc:2b:f4:d8:c0:07:
                    86:d1:58:b6:ed:95:d4:f7:de:17:ec:50:c8:d2:17:
                    d2:4c:47:b2:c2:76:e7:84:34:85:95:48:12:26:fa:
                    7a:49:ff:f9:e1:47:2f:87:0b:88:50:bc:47:1b:6a:
                    62:8a:a1:be:e1:66:1e:09:b2:55:74:68:44:3f:4c:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:80:C1:15:15:B2:68:85:C0:F8:A8:D1:48:9E:D3:59:76:88:A5:84
            X509v3 Authority Key Identifier:
                keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0e:9e:bb:24:88:e5:d2:bf:35:ed:bf:b3:a7:88:32:37:fc:
         56:39:3a:5e:7e:35:a8:f6:c6:cc:97:e0:93:7d:bf:73:12:ed:
         30:a8:9c:2d:41:02:42:44:6a:5b:f5:3d:de:5c:95:11:30:57:
         5c:b1:fc:a0:22:7b:98:28:97:63:e1:a6:d6:ac:39:c9:85:d8:
         0e:28:ef:e3:5a:d9:20:e5:59:a0:ad:79:0d:02:b6:92:b7:78:
         14:6d:7c:dd:f7:46:69:f9:de:e9:9a:0c:ab:5c:3a:1e:2a:da:
         ab:21:67:de:3b:cd:69:5c:fc:c8:5a:45:15:a1:60:ea:9d:f6:
         13:d2:31:30:c7:6e:9d:bc:66:30:8a:a2:e5:d6:95:b8:20:e3:
         f2:eb:72:99:2d:d9:fa:66:4a:ea:28:53:be:44:f4:e0:1f:a5:
         a5:6e:48:8c:f4:5d:b3:45:f9:37:da:45:67:10:bb:95:81:39:
         62:8d:74:03:99:f0:28:77:84:8f:f1:00:cc:e7:b4:54:2d:bf:
         a2:10:12:4e:bf:9a:0d:e2:a7:bf:43:64:3a:4f:80:7a:99:3b:
         a2:87:35:b7:f7:2b:d8:31:e1:cb:96:f8:9f:a2:e8:17:3c:93:
         e7:28:df:59:53:5d:a4:49:02:a3:3d:4c:9b:c3:10:d4:0a:d2:
         be:08:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:08 2025 by rpki-client