Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          kz0tNtbJo6QEEA61UZsCqbF79AdP5U2JBQxbCzO3690=
Subject key identifier:   0A:7A:82:7B:DF:5A:A5:11:6A:E0:03:E3:E7:E3:D2:F5:20:1B:58:5C
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       0198D515CA998C85B5733B38959CA6CD2FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          165A
Signing time:             Sat 23 Aug 2025 04:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:31 +0000
Files and hashes:         1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=)
                          2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: dmbeU4lTpEoJe4Gda2f/gFE7B3GGZjehXodAK0Xg93w=)
                          3: 8bzVTIvU7VLto519WM6kmb1aC88.roa (hash: RKtsKte4GFMP8uvXTysNKUtwWTqGBn/sT3xSLBAL7kc=)
                          4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=)
                          5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=)
                          6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=)
                          7: U0jLu9ql5SdWIQT76CBH027LVAA.roa (hash: PMh+5OCLPKe8/WakcVuCjjuQ331xyUdKEkuwBGpmve4=)
                          8: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=)
                          9: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=)
                          10: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=)
                          11: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=)
                          12: j9WZYSGRdVfvzLNu1mDZtYatwaY.roa (hash: nUy51L/tmtGCGiZiltuVFci4bpVMC+ZdBO8uYz2YP0g=)
                          13: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=)
                          14: rXg2JiPJpfAU79JRlEbsnp3pLc8.roa (hash: MQVzfSubZdxq5yFhe68zUL+Rr+rpOcHAqeIz000zyLw=)
                          15: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=)
                          16: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=)
                          17: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=)
                          18: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=)
                          19: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ca:99:8c:85:b5:73:3b:38:95:9c:a6:cd:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Aug 23 04:00:31 2025 GMT
            Not After : Aug 24 04:00:31 2025 GMT
        Subject: CN=0a7a827bdf5aa5116ae003e3e7e3d2f5201b585c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:0c:cf:b0:86:27:95:54:11:01:fb:c1:7a:
                    68:f1:d1:ea:08:2c:42:91:3b:19:80:40:4b:a4:76:
                    bc:b4:21:9a:9f:a9:89:43:29:e8:84:fe:10:6e:e8:
                    96:6d:45:d2:b3:63:a3:de:10:a8:d7:d7:dd:af:fd:
                    28:49:fc:15:93:90:02:8c:f4:07:8a:e1:eb:ed:1d:
                    f5:9b:66:de:6a:5c:21:92:ca:dd:43:3f:b1:37:85:
                    5e:d4:f6:0e:bc:70:8a:4d:31:e4:53:90:25:df:67:
                    e1:f4:d5:ac:a4:5c:db:9c:6c:99:ce:b2:7a:08:51:
                    29:0c:f6:d0:f4:bf:86:a4:2a:12:56:cc:26:01:3b:
                    c9:52:2c:ef:d5:8f:b3:1d:44:95:af:08:6a:f3:1d:
                    27:75:40:88:c6:47:8e:9e:3b:a5:9d:b5:57:6c:b1:
                    9c:b4:de:64:27:bc:e5:d3:a6:3a:b2:0f:97:83:16:
                    d1:a3:7a:43:62:00:fa:fa:8d:f9:48:54:7b:26:54:
                    16:6f:79:9e:07:27:be:c3:c9:26:df:03:8f:f2:d7:
                    bf:72:c8:48:d7:2d:0c:4f:5e:0e:88:c3:d6:c1:62:
                    b9:73:2c:c7:2f:a5:5e:b7:e5:7f:fb:78:d2:0d:57:
                    68:aa:2e:3f:f5:ea:bb:5c:b2:9e:79:24:40:3a:ed:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:82:7B:DF:5A:A5:11:6A:E0:03:E3:E7:E3:D2:F5:20:1B:58:5C
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:46:9a:f8:b1:ef:a6:13:02:b5:c2:a3:ea:bd:d9:ca:a6:b7:
         a4:19:ec:56:90:d8:ee:8c:98:9c:12:c6:e9:ef:96:d3:55:2a:
         3e:1c:28:8a:30:bc:3b:9e:61:e7:f9:3f:28:2b:c8:e1:a9:87:
         07:d0:77:a3:d2:4e:41:f9:47:1e:fd:6d:93:18:86:92:29:48:
         bb:7f:bb:25:ae:7c:04:1d:9d:c1:3f:74:0e:95:a2:91:db:6e:
         64:d5:bb:b3:da:11:67:a6:de:d2:d7:0f:fb:75:73:1c:09:eb:
         c6:c6:5e:86:c3:e8:24:c4:78:f5:98:73:00:75:af:31:f4:dc:
         61:87:02:fb:b5:d9:4a:e9:83:2c:5c:22:fa:5c:dc:b9:4c:29:
         67:63:b0:4a:9a:67:81:2c:18:08:bc:37:fc:af:75:39:86:cc:
         37:44:1f:fb:e2:26:bd:29:51:49:3d:83:dc:d3:ff:9f:15:da:
         ff:ac:ab:c0:06:e0:4a:b4:13:cb:3f:34:48:40:a0:c0:0a:44:
         02:c7:7d:a1:e8:7d:6d:c3:f6:d0:81:fe:17:7d:a8:76:c4:04:
         77:5d:ea:d8:36:1b:3e:85:cd:19:fa:32:bf:8e:66:9f:df:ed:
         27:f0:b6:14:92:81:4a:51:8c:61:4b:05:f1:2a:b1:c0:1f:7d:
         92:49:50:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:17 2025 by rpki-client