Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File:                     5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier:          lqIMazkrp6LvZY4dkT5xDORebgJ9Aq1Xq8Zgxj/R08Y=
Subject key identifier:   47:1D:39:FC:AC:E9:8C:41:4C:81:94:D8:39:12:2E:AC:B8:D9:F4:4A
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer:       /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial:       0198D54DFE197323256A5DD09B5ABAF8103C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number:          04FB
Signing time:             Sat 23 Aug 2025 05:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:54 +0000
Files and hashes:         1: 0lEY9zpi-7BkR5-cKklWMyBsLyM.roa (hash: FC6XHYclBVzH43tm1x5dwkNsn6Or/MOidVXMmwND+io=)
                          2: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: 399vOmU9f9v6JXikeD0xvDf7ojXN/KwIx4nL3QIFJlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:fe:19:73:23:25:6a:5d:d0:9b:5a:ba:f8:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
        Validity
            Not Before: Aug 23 05:01:54 2025 GMT
            Not After : Aug 24 05:01:54 2025 GMT
        Subject: CN=471d39fcace98c414c8194d839122eacb8d9f44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:53:d6:d6:eb:5d:73:3b:3a:f5:8a:a2:8e:
                    30:d8:8f:d1:5e:1e:4f:ac:7f:5e:1a:b0:a5:ea:99:
                    12:5e:cc:b1:db:d6:c5:16:22:6f:19:5e:d7:bd:63:
                    5f:3d:fd:81:a8:64:dc:1b:db:ee:c6:0b:1e:34:3f:
                    39:54:b0:88:5b:2c:12:3c:ca:a0:51:60:63:45:80:
                    47:02:d5:ff:8e:1d:d1:fd:8b:63:7d:11:cd:2d:64:
                    af:e8:aa:0f:84:2d:53:e3:d1:93:df:f9:76:c1:8b:
                    e6:ac:b0:47:c3:7c:c5:5c:69:c8:b6:26:9e:4c:76:
                    fa:be:54:42:bc:2a:18:40:e1:90:8c:a2:3a:61:e0:
                    8d:f1:4c:44:ea:be:14:52:ba:d9:15:aa:d7:f1:07:
                    6c:5b:35:f4:95:db:dd:09:9d:13:e6:c0:72:a9:fc:
                    43:7a:0e:51:4e:0b:f5:90:4b:9a:96:08:04:7e:e8:
                    23:aa:fe:3c:bb:11:7b:8f:ec:72:0f:e6:55:f7:90:
                    aa:b2:72:b2:f1:73:2c:d6:18:af:1c:df:5b:66:e9:
                    7f:a9:dd:c4:f9:2a:11:07:ea:bc:6a:9c:6f:8b:3f:
                    fa:07:ce:56:a0:88:3b:a7:ee:5f:bb:54:00:2d:f5:
                    69:ec:5f:58:65:36:8b:99:04:b9:31:d4:aa:5d:7f:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1D:39:FC:AC:E9:8C:41:4C:81:94:D8:39:12:2E:AC:B8:D9:F4:4A
            X509v3 Authority Key Identifier:
                keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:4d:d4:27:b7:00:58:9b:8b:76:06:42:83:76:b4:37:47:88:
         79:a0:2f:dd:7f:0d:5a:77:20:ea:78:1b:80:06:6a:28:c4:3d:
         4d:53:31:d9:20:bd:aa:d9:48:08:23:c3:58:d4:a8:d6:8f:19:
         58:04:c9:84:f1:6a:2c:80:24:fd:96:be:93:e9:87:2d:40:ad:
         41:1d:98:4c:11:d7:43:c3:4a:dd:aa:86:4b:85:68:c0:32:48:
         d0:50:4f:17:b9:88:46:ae:15:40:f9:d1:c6:00:36:9d:66:72:
         95:2f:db:0e:31:b2:d6:e7:8e:0f:35:fb:3b:1d:7b:6d:27:ca:
         d0:03:7b:57:a0:f9:3f:89:0f:e3:5b:66:52:7f:b9:ae:3a:32:
         74:aa:ce:a9:3e:40:27:eb:be:d4:7c:3a:93:23:1c:2a:3a:ca:
         d2:83:1a:21:74:50:5a:ff:09:af:e0:c5:ba:00:69:68:ee:46:
         52:59:54:26:09:af:a4:23:26:d9:3c:23:90:a1:f7:84:55:24:
         8f:cd:3c:b5:bf:3d:62:5e:12:db:38:df:a5:75:38:23:dc:3b:
         3b:3d:aa:a3:06:82:5e:83:35:a5:ea:3e:2b:50:f3:c3:5b:af:
         26:98:13:14:15:0e:03:b8:b6:69:17:3d:23:5a:c8:3c:bd:23:
         7f:16:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:35 2025 by rpki-client