Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File:                     5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier:          N2Td23OsyhCTl4+9ugPSU0GxbZQDUlFXajXAvnY+30Q=
Subject key identifier:   AF:18:7C:3D:AF:C7:19:10:2D:43:31:9F:E5:25:88:0A:89:9C:99:07
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       0198D5BBBCC24340EDC1CA54064F4EB0E0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number:          12F6
Signing time:             Sat 23 Aug 2025 07:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:47 +0000
Files and hashes:         1: 1-gxOhCZj8nS37sWsUDKlmcK-Rw8.roa (hash: /+5YDb/LdEiV9iy+qGtaTiI/QdW15m+uapnwWEACL9w=)
                          2: 4Pfo6dr7-737k8tyVTjGVmWtq04.roa (hash: q2tjhHYa3ywzq75oRuuLup6rX2uYWNVGvc0AQBtWN4U=)
                          3: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: 8KoehYBpVXLdRh37J5fevw4M9K6Pe6796+Lws8S6+9Q=)
                          4: JBj8FsplA-MBUc0zqf4_NLYuJ-Q.roa (hash: ecVjlw+CLQrBEbrHY/WkvclcM5Zgixit06zD/ClEBGI=)
                          5: ZicUZ02N1eUvCal6PMWmf8ikzmg.roa (hash: XC9+u93DV5Xgz3s+Skf+JUuuT8ulGq7q/bcHNoP7ndc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:bc:c2:43:40:ed:c1:ca:54:06:4f:4e:b0:e0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Aug 23 07:01:47 2025 GMT
            Not After : Aug 24 07:01:47 2025 GMT
        Subject: CN=af187c3dafc719102d43319fe525880a899c9907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:37:3b:88:d4:3c:0a:60:b9:e5:e2:4f:8c:
                    9a:49:f7:af:53:22:9a:f9:b2:42:7d:b4:72:66:4a:
                    42:9b:16:d5:84:37:fa:94:b8:bb:37:4c:c9:05:8f:
                    82:fa:ee:89:ef:5d:62:48:f5:92:2b:17:eb:89:37:
                    40:89:dc:bf:b5:6e:d6:db:64:00:1f:e0:b6:06:16:
                    8c:fa:4b:da:07:aa:7e:7a:2f:81:5c:2e:05:d7:59:
                    49:58:92:1f:26:46:b4:9b:72:35:1a:7e:96:48:1d:
                    44:76:12:c8:a4:ce:06:b3:b6:89:e3:42:98:34:94:
                    a0:77:f7:dd:28:7f:d3:75:63:f8:54:37:d6:17:24:
                    6a:67:24:07:f0:82:79:43:b6:82:7e:c1:c4:b6:fe:
                    ab:91:6c:2f:9c:f4:2e:cb:51:88:f0:d4:df:b6:c5:
                    4a:ee:fc:43:25:09:6f:12:0f:b0:84:04:79:d2:8e:
                    75:8d:20:88:5f:46:58:7d:a3:9f:7d:af:ee:2a:38:
                    3c:fd:c1:2e:cb:97:e4:b5:01:e5:5c:15:96:85:25:
                    7d:b5:9c:d5:f0:0f:03:11:3c:6b:88:92:6a:ba:2b:
                    ad:c7:5b:63:49:72:18:29:fb:51:d7:2c:bb:a3:8d:
                    bd:f2:f4:b5:6f:34:2b:22:cb:56:4a:a0:89:72:e9:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:18:7C:3D:AF:C7:19:10:2D:43:31:9F:E5:25:88:0A:89:9C:99:07
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:66:e4:70:34:6c:bf:fb:f8:0e:0b:00:02:eb:27:b1:75:10:
         41:ad:bf:75:41:d3:7e:34:8d:f8:12:44:e9:7b:ab:61:0e:98:
         1b:a4:b5:c3:d4:37:fa:07:46:67:c3:15:ad:68:37:d6:ae:da:
         12:c3:8f:e0:dd:c1:4a:78:6f:b9:76:22:30:ea:0d:e6:fb:13:
         1a:a8:ea:28:d6:61:db:b8:10:27:c0:04:2e:a8:a8:70:f4:3d:
         4a:21:be:a0:a5:aa:ef:4b:b4:73:25:62:b0:54:50:2d:1e:5f:
         51:09:74:67:29:b7:37:b5:b2:c7:86:66:77:7c:65:7b:ce:fb:
         cc:df:c2:ec:0f:b6:db:64:b1:7d:c5:1a:69:32:d7:bd:18:d3:
         71:22:4c:1f:9d:70:e3:24:0d:8e:a3:fb:49:1f:9c:41:da:ad:
         26:92:e6:b5:30:8d:c6:7b:6f:44:78:45:54:b3:76:97:36:a1:
         27:2d:94:67:c8:81:b4:9d:ff:b3:1b:55:96:3f:8c:fb:a3:d3:
         96:2e:7f:4a:bd:17:c4:a2:89:5f:28:04:9e:96:19:b3:a9:5e:
         2e:ec:28:f7:01:09:23:48:71:90:88:0e:99:1c:b3:27:09:48:
         6a:e0:be:cc:1c:08:24:65:a9:68:fd:af:31:f0:2b:43:bb:cf:
         77:42:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:29 2025 by rpki-client