Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          GdpKb6exh1ITFODEMkXaN+JiFoeTWfXtyoP6crgFhFc=
Subject key identifier:   D8:05:0E:B7:0F:F1:5A:41:0C:E1:80:56:A8:06:4F:EC:27:A8:84:74
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       0198D4748663546E25D38A843DB641355F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          1123
Signing time:             Sat 23 Aug 2025 01:04:22 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:22 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:22 +0000
Files and hashes:         1: 4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa (hash: lLEUdxQQ/ffC7NhoECBTe0Cnix1csYMCuJzl8ssByXo=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: C9vT991fEArXo9t4ivFEtnB1Jmr0Tzd2XQNwLLdlgVM=)
                          3: 7Bsb-M9H7d4Hc8VS4AnIjyLsXlE.roa (hash: g+wem5y6cG+2ZtV6aLNz5ga+egeri0j1bBqB9ifdstE=)
                          4: PhUkNZ598A5ia5-UrJ9vFGUcNjk.roa (hash: KeqPA4mGFwTxFNdg5BKKsJzJk98xcvG22Bir2BXm6sw=)
                          5: hAUqHHOa5zKCAiaylV12xSKmjRM.roa (hash: 8CceZwUGeB+adYsoYQk00qGlq4ULcVFDHiLxSegah5g=)
                          6: k6g8GHkytSOVhgkLjUclPzoVHy4.roa (hash: +6vq3uBdq/4E/WX/WUrN8nWRXc0eqZ/mejCwa+UQTvk=)
                          7: tgxx8eKKt9THon5yuqezJ7Gyv60.roa (hash: uNDSHqnE8JqGtw2yUrw4/9adIpOhVHGi34SjFmkEDYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:86:63:54:6e:25:d3:8a:84:3d:b6:41:35:5f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Aug 23 01:04:22 2025 GMT
            Not After : Aug 24 01:04:22 2025 GMT
        Subject: CN=d8050eb70ff15a410ce18056a8064fec27a88474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:8a:b8:4b:3d:00:b3:fd:00:dc:16:87:4f:
                    94:52:6e:3a:5c:30:f6:c0:39:59:07:81:b8:77:ba:
                    c4:47:2f:4c:7e:8c:ff:09:82:2d:26:f1:91:58:27:
                    55:54:88:57:1e:36:d0:aa:53:fc:6e:c7:c9:7f:36:
                    30:a7:7d:74:04:7b:34:dd:2f:81:2a:36:6a:03:3d:
                    57:6d:97:68:af:15:3a:77:08:28:19:d7:67:4b:b9:
                    b9:e8:23:8d:44:d4:90:4d:8e:57:bb:e9:de:3b:07:
                    eb:13:ae:d1:ef:7c:1e:bf:28:3c:38:09:fa:d6:c9:
                    7d:a6:e9:b6:62:d6:51:ef:d0:c5:ea:ba:46:ec:63:
                    29:b0:e1:d1:bb:3f:0b:74:fb:42:45:88:75:76:9b:
                    47:b7:1f:f4:38:c8:3b:bb:1e:87:cb:9d:eb:49:5f:
                    a0:59:11:2a:79:c9:68:9e:61:59:a7:aa:cb:dc:db:
                    c8:d9:12:7d:e5:e5:b2:be:95:35:15:d6:70:b0:24:
                    ee:a7:a9:39:f4:9a:c5:75:39:3c:e8:e6:7b:86:06:
                    09:b1:6c:9d:8b:2b:0f:eb:69:8d:89:f3:b5:fc:05:
                    e1:b1:f0:e9:8e:27:a6:d3:7a:8b:7d:0f:45:e6:70:
                    9b:e7:e3:65:2c:69:b5:df:e8:b4:3c:3e:9b:43:52:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:0E:B7:0F:F1:5A:41:0C:E1:80:56:A8:06:4F:EC:27:A8:84:74
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8e:c8:50:5d:99:3a:a1:ee:6f:2e:38:d2:9f:6e:1b:19:c4:
         65:d6:54:cd:dd:ae:de:14:d2:7a:46:86:f4:c3:62:94:87:80:
         e8:f4:d1:66:6e:38:28:98:ae:ed:96:e5:a2:40:d2:8b:64:2b:
         af:ad:59:fd:d4:cc:69:3d:51:0a:d6:1c:82:d5:11:9c:3b:ae:
         c8:da:ba:69:70:4f:75:dd:e4:16:b2:59:3b:e9:2b:fd:9e:ca:
         b0:f3:00:ae:ed:5e:16:ef:7f:11:2b:98:d0:19:75:c3:20:8d:
         db:01:dd:f2:40:e1:f0:7f:38:e1:a1:f9:d5:83:fa:4a:df:93:
         86:50:cf:29:8b:44:90:1b:5f:6a:2a:6c:69:20:bc:0b:41:20:
         a1:60:e8:e4:0b:2f:8a:20:9c:d6:2b:24:06:0d:23:d8:a4:32:
         44:2f:da:54:5b:5a:ac:20:8b:a4:8e:fc:84:b5:4d:44:e8:f2:
         9a:07:86:cb:7f:a2:20:3c:71:5a:8b:9a:49:b0:52:8e:19:d9:
         6e:a7:05:06:d0:7c:a1:df:69:4c:e5:8e:72:8c:67:2d:2f:f3:
         fc:e2:d4:a3:a0:a6:93:49:75:0c:f7:0a:e2:37:10:d8:ee:7b:
         e3:d0:c6:ef:1a:67:b1:c1:8d:67:8b:d0:ff:ba:e7:1a:d8:20:
         f6:c9:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:29 2025 by rpki-client