Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File:                     1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier:          KEwCoE2wgFpDgoiyYhWw+CBfZHw8TvAbgRIXpRPRZR8=
Subject key identifier:   9D:EC:71:62:D2:B8:B0:9C:C1:17:53:24:0B:83:C2:82:E5:B6:04:15
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer:       /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial:       0198D5BBDE3933DB8773FEE40F914E9C6F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number:          14BB
Signing time:             Sat 23 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:55 +0000
Files and hashes:         1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
                          2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: RxxVfVk6vxHgFu2eb30Z9qWc00OSjZF26C6XajCbDLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:de:39:33:db:87:73:fe:e4:0f:91:4e:9c:6f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
        Validity
            Not Before: Aug 23 07:01:55 2025 GMT
            Not After : Aug 24 07:01:55 2025 GMT
        Subject: CN=9dec7162d2b8b09cc11753240b83c282e5b60415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:86:3b:98:d1:c2:26:16:73:42:6b:ce:61:
                    14:56:03:d8:d5:b0:4d:69:59:bb:50:17:88:c4:5c:
                    1c:ba:44:46:1d:49:1b:49:59:37:ed:72:47:0a:2b:
                    df:f8:6e:6d:0e:95:5e:14:07:e7:c8:a5:87:04:9e:
                    e0:dd:cc:2b:e3:da:13:1b:8f:52:18:05:d9:a8:f3:
                    8b:88:c4:7f:fb:6c:09:8f:88:cf:6f:bc:f8:51:47:
                    ef:bf:36:fb:e9:f0:1a:20:e5:61:81:a4:47:9b:59:
                    c4:52:5f:19:1e:7b:f1:0e:0a:ac:a7:a1:06:db:33:
                    11:06:e9:3a:0f:4c:b8:d4:ca:ab:af:d5:df:20:8e:
                    87:ef:17:fb:a7:76:bf:49:06:5c:81:6e:3c:0a:98:
                    9e:a3:d2:39:35:e0:21:97:55:bc:1e:08:22:b4:20:
                    7e:2f:37:f1:c6:4f:f4:2c:48:9b:31:e9:4d:d3:ba:
                    09:6b:f4:06:b1:6c:8e:a2:56:7a:b6:8d:a2:2f:57:
                    47:64:48:4c:7a:01:2b:a2:3c:0a:80:da:7e:34:db:
                    ec:df:93:49:7c:28:24:4b:ca:a2:a8:c1:04:26:22:
                    52:fb:c2:57:74:bd:58:3e:20:2c:ee:9e:e5:5d:7e:
                    e7:c1:7a:bd:ba:bd:24:41:03:7a:3d:aa:15:29:3a:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:71:62:D2:B8:B0:9C:C1:17:53:24:0B:83:C2:82:E5:B6:04:15
            X509v3 Authority Key Identifier:
                keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:db:72:cb:e0:89:6f:df:22:ea:15:6c:da:83:67:e4:97:
         ca:9d:ad:48:94:9e:b1:b0:5e:f5:e1:63:c0:b0:e4:d5:f1:6d:
         50:a1:77:11:83:de:d2:9e:77:bd:18:f0:b0:90:9d:03:7d:23:
         f1:79:a5:87:d2:e2:74:68:55:33:8b:f3:7d:eb:da:c9:bd:25:
         34:eb:33:e1:f8:47:a3:b1:2c:bd:e8:e4:e9:1c:19:0c:b2:3e:
         72:a5:15:3f:23:d1:3e:78:bb:a8:aa:11:60:36:3c:db:0a:cd:
         2e:0f:b0:04:b5:d0:58:9e:b2:f0:85:9a:d4:f6:0e:7e:ba:28:
         f5:8c:50:ad:f9:45:4a:9a:d7:e3:3b:20:6a:2e:19:f3:68:23:
         d1:03:74:34:f0:12:1a:d2:9d:ac:fd:ca:99:20:e5:a3:b8:73:
         00:fc:1c:b2:1b:b7:2c:d4:97:67:05:96:a9:98:c9:62:c0:73:
         66:b8:2b:02:7f:34:ae:8a:8e:86:65:c6:b1:e5:1f:27:96:fc:
         a4:29:74:b8:d9:34:5b:08:47:fb:7c:9c:8e:3b:53:60:4f:fe:
         7b:35:41:52:49:3c:b7:ba:3f:de:98:b2:a3:0d:22:54:7d:2d:
         19:66:42:76:03:11:65:a7:ed:88:a9:ee:c0:19:09:2e:e1:73:
         51:f9:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:13 2025 by rpki-client