Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File:                     b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier:          LCO99qlfTTstimdJBNBbbyB+6nM4hCxy77ePZbfTkSs=
Subject key identifier:   4A:31:65:9C:16:67:8B:C6:F6:15:07:B8:DC:71:F2:EA:EB:F9:FA:D4
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       0198D4E0B5DE591C12B26F7A01A15606CA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number:          0A57
Signing time:             Sat 23 Aug 2025 03:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:33 +0000
Files and hashes:         1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
                          2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: 5V2FXBWW5W3RI5BdmAEFkle1Wt7SHc9jgEr5+0I3t7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b5:de:59:1c:12:b2:6f:7a:01:a1:56:06:ca:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Aug 23 03:02:33 2025 GMT
            Not After : Aug 24 03:02:33 2025 GMT
        Subject: CN=4a31659c16678bc6f61507b8dc71f2eaebf9fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:1a:1a:17:72:6e:d3:eb:32:f1:d3:99:9c:
                    fa:17:89:f7:77:ad:ec:d7:16:9f:c0:ce:20:fd:8e:
                    56:b0:e8:d7:31:fd:4e:a3:bc:ad:a6:d6:65:94:d5:
                    46:7b:da:4d:e1:af:71:da:7c:02:8a:86:55:ef:7f:
                    40:96:ac:4e:0a:f2:d0:17:25:31:fc:5b:aa:8b:5d:
                    71:19:92:4c:85:d7:3e:29:1f:60:94:d1:16:36:c1:
                    18:b1:6b:f0:b0:e8:5a:3a:7e:bb:ab:23:5c:67:1d:
                    62:44:a4:06:60:8a:4e:f8:4d:20:d5:73:08:65:11:
                    34:74:17:15:47:8d:6e:59:22:d0:5c:eb:e4:14:c6:
                    26:84:86:72:25:c1:b7:51:0e:6d:b4:ab:b2:c8:7d:
                    8d:53:34:ed:d4:59:83:14:1e:d7:83:36:af:8a:a4:
                    f5:c5:bd:89:eb:b9:77:0e:7c:e4:9a:de:b5:7d:06:
                    e2:ac:4a:27:5d:00:6b:e3:b2:4f:3a:ae:d6:52:46:
                    6e:bc:85:3e:74:37:df:a0:2e:50:00:11:bb:83:7b:
                    a0:9f:3f:a0:82:4a:ac:2e:65:4c:21:4f:bb:ed:54:
                    4a:5f:41:f2:7c:70:ea:78:e1:ca:7a:22:bb:fd:4d:
                    06:71:02:dc:2f:ae:29:c7:9f:be:2f:70:81:c6:24:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:31:65:9C:16:67:8B:C6:F6:15:07:B8:DC:71:F2:EA:EB:F9:FA:D4
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:90:ed:33:11:8f:8f:0f:76:f2:e1:4e:60:57:dc:30:ab:d1:
         86:a7:2f:01:a3:ef:cc:61:61:db:bb:73:de:88:66:ac:dc:db:
         93:13:14:3b:e8:3e:a9:1a:2a:83:0e:cb:2b:24:19:d6:1b:e6:
         b4:62:07:19:f3:24:c7:1d:bc:b7:cb:08:85:d6:95:9d:40:7a:
         6a:ec:5e:ae:5a:ad:45:a1:3c:65:c9:b3:8e:22:4e:44:8c:74:
         f4:a9:ea:0d:8c:11:25:8d:98:d0:4b:0f:74:52:03:71:8c:56:
         49:5a:51:80:e0:7b:d1:89:77:c6:b5:23:58:0b:dd:37:75:40:
         53:8d:78:2f:fe:ec:cf:1e:cf:4c:e4:0c:83:ac:a0:d4:e4:60:
         95:9e:78:ba:cf:c6:d1:ad:33:9b:b2:dc:67:d3:35:88:c3:34:
         ab:90:ac:84:ab:2a:9f:d4:a7:3f:4e:8d:e0:94:b7:26:58:84:
         5e:53:44:a1:94:46:57:f4:e9:23:f9:09:08:f6:96:ce:e6:ff:
         10:36:43:a9:1b:a0:67:ba:c5:92:34:c1:ac:b9:50:d8:5c:f9:
         ae:02:1e:10:95:55:a3:67:d2:53:a3:b8:2e:83:06:1a:8e:60:
         eb:6f:bc:d1:84:43:45:17:b3:02:aa:f2:65:eb:b2:fb:46:ce:
         d1:18:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:33 2025 by rpki-client