Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          AFRYSwmfxaqO6CLn5QUL2zloimZ9xTC147r+u8YoYsE=
Subject key identifier:   87:BE:5F:DD:B6:4C:CF:C0:7F:C4:50:BC:4D:41:C3:73:55:93:0B:FF
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       0198D473E8DB1E6165E775E91E0761441902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          0F48
Signing time:             Sat 23 Aug 2025 01:03:42 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:42 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:42 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: ts5r2t+3kCYuXmx5reqgsJ1OqKpZ9D6BA/RvjXr8cxg=)
                          2: MN9DXXfhSKbEIdYAeS63OJtTNTM.roa (hash: IbJiyeetvwoy/pj327xJTH6HMYNK/ZCgaJ8rwR+7loE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:e8:db:1e:61:65:e7:75:e9:1e:07:61:44:19:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Aug 23 01:03:42 2025 GMT
            Not After : Aug 24 01:03:42 2025 GMT
        Subject: CN=87be5fddb64ccfc07fc450bc4d41c37355930bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:53:72:95:aa:63:c8:ba:be:a3:b6:d4:4f:92:
                    01:ae:fd:bc:10:b4:62:4b:0a:bd:fa:9a:f5:26:6b:
                    4b:9a:57:ad:4b:b5:14:fa:d7:dd:86:33:00:4f:f9:
                    10:e3:ed:78:98:f6:f6:b8:d1:33:43:db:5e:de:bd:
                    67:bf:9b:71:54:4c:e8:f1:3a:fe:34:3b:94:11:7d:
                    81:84:2f:33:3e:2b:b3:fd:1f:77:4c:70:ad:b5:a0:
                    36:22:6d:ed:e4:e5:12:59:2e:fb:d9:96:99:1a:30:
                    f8:cc:a6:b8:b6:23:dc:1b:27:37:19:42:5b:11:01:
                    f1:45:43:11:2a:ad:3b:51:41:04:1f:f2:48:01:08:
                    1f:77:29:e6:b6:cd:d4:38:e6:90:39:96:4d:9a:bc:
                    d9:1e:44:a3:24:48:ff:08:d4:dd:55:87:23:4c:fb:
                    53:d1:b2:bd:7b:3c:2e:31:e0:67:b3:ad:a0:37:06:
                    75:11:0a:6d:05:c2:90:95:98:bf:a6:8a:64:64:f0:
                    24:ea:52:21:0c:ee:95:21:1e:a9:b8:7b:81:c6:c2:
                    ac:4c:1b:db:0f:d9:96:a8:63:97:01:f5:30:d9:ac:
                    71:19:50:27:db:0a:63:0a:b8:01:d9:24:c3:0e:47:
                    99:de:78:95:fc:72:ac:6c:0e:bf:a8:06:2a:9d:a2:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BE:5F:DD:B6:4C:CF:C0:7F:C4:50:BC:4D:41:C3:73:55:93:0B:FF
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:79:7d:0a:84:cc:9e:bb:9c:f8:9d:11:8f:bb:cf:dd:ac:
         77:05:de:fb:5e:32:d1:4b:87:33:73:56:5f:1b:16:e9:ce:be:
         99:9c:5e:44:7d:a3:4d:04:95:f5:05:32:c8:a6:9b:e1:45:4d:
         c7:9b:ce:39:73:df:1e:ff:ad:dd:fa:6a:24:d4:c5:2c:d3:ef:
         32:6c:6e:12:0e:6b:f9:36:af:a5:2e:9c:7a:0c:68:27:77:4e:
         cf:65:6d:f4:9a:c6:c6:dc:14:f9:ce:b3:b5:f5:70:d0:a4:2c:
         89:ba:dc:ba:f6:9d:da:dc:63:42:0e:b0:bd:a4:29:1e:9c:63:
         0a:52:81:ba:a5:90:63:e6:06:04:52:be:a3:3a:1e:71:a2:72:
         01:c2:c1:f1:f1:c0:33:8f:24:f1:02:59:10:0b:49:15:a7:bf:
         85:12:0a:7f:26:50:eb:5b:2d:5e:d1:9e:ce:4c:f1:66:79:30:
         df:ea:e6:ab:fe:32:c5:a6:f1:04:33:02:51:b4:3a:31:31:7a:
         73:2d:fb:b5:47:a5:91:21:04:49:fe:03:0b:32:cc:a8:cb:fe:
         6a:bf:88:c4:46:b8:77:a2:4e:91:04:e3:aa:79:7c:8f:43:e7:
         69:be:9b:f2:f9:62:ec:f3:69:bd:ab:58:32:00:9a:07:1c:a8:
         92:5f:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:03 2025 by rpki-client