Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          3aT3XnlYZBIqYvEy0MCUeQcK2aM7IY7c57ScrUhHIQg=
Subject key identifier:   D4:99:11:B9:7E:40:19:A9:38:06:91:CC:4D:0C:16:43:0F:AD:0C:BF
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       0198D54DD1B7FDE23AEBE4D4B2F6402A981F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          05F5
Signing time:             Sat 23 Aug 2025 05:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:43 +0000
Files and hashes:         1: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
                          2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: DbJ42TA7Rl58m+eG78BlLJMsmW+mC/tpj2iE4vNqIMw=)
                          3: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (hash: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d1:b7:fd:e2:3a:eb:e4:d4:b2:f6:40:2a:98:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Aug 23 05:01:43 2025 GMT
            Not After : Aug 24 05:01:43 2025 GMT
        Subject: CN=d49911b97e4019a9380691cc4d0c16430fad0cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:94:9b:0a:04:29:52:b7:87:11:3e:66:a4:
                    50:fa:04:26:b5:7f:24:37:59:d5:74:06:06:3f:6d:
                    45:e6:c3:55:0c:5e:cb:ef:6e:f1:d7:62:88:a8:45:
                    8f:e9:82:dd:6a:d9:32:31:63:5f:71:5b:f0:cd:d9:
                    f7:ad:01:49:fe:37:77:b0:8b:ad:9d:93:ac:e1:05:
                    7a:19:06:dc:3e:f2:98:4b:f9:42:53:ff:8e:04:fb:
                    2b:c7:2c:33:f5:27:8b:81:55:45:81:5e:2f:df:ae:
                    99:14:83:50:df:fc:d3:66:6a:49:ea:8f:de:e6:1b:
                    33:19:2c:01:65:a0:be:81:08:27:2c:71:8b:6c:c0:
                    0d:08:14:c8:51:f5:cb:c2:03:67:6f:c4:67:ac:ee:
                    f9:84:ed:0e:25:24:a4:ff:ff:34:31:04:aa:c5:c2:
                    95:74:e3:66:91:e9:6b:d9:87:c7:0e:3d:c0:e4:3f:
                    62:8b:0e:28:81:31:8f:d1:23:86:b0:87:42:90:9d:
                    8f:e4:b9:34:1f:8c:90:9b:11:96:46:c1:af:cd:22:
                    7a:df:70:98:99:db:d1:2d:7d:34:66:1b:db:80:0a:
                    0d:fc:87:ff:34:84:ab:c0:22:a7:e1:7a:41:77:54:
                    35:0d:8e:e9:5a:cd:cc:ea:bc:36:5e:d4:9d:de:35:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:11:B9:7E:40:19:A9:38:06:91:CC:4D:0C:16:43:0F:AD:0C:BF
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:43:fc:f3:8a:59:62:ac:87:db:9b:b8:4e:b9:9d:9c:70:e8:
         04:ba:d0:f0:c8:a4:22:c1:ca:79:17:c0:19:e9:e0:bc:02:55:
         b0:e8:c8:6f:f6:f9:a5:90:72:9f:a6:b4:ea:5c:4c:0f:66:9d:
         96:21:95:61:91:74:60:98:80:ea:ec:5c:5c:cc:12:13:56:3b:
         34:d9:75:16:94:fe:fa:bd:a3:20:30:78:66:5d:94:c4:5f:48:
         08:6f:e9:8b:f5:18:a0:49:ad:fb:29:e3:a2:c8:3d:f6:64:6e:
         93:93:07:09:d7:ef:d5:bb:df:8b:78:04:ff:ce:b3:ee:92:d5:
         16:93:62:7e:5b:5b:50:5e:1e:c3:96:76:bd:30:52:23:4d:2f:
         f2:6f:1c:f2:c2:ec:8f:df:62:bd:a2:c2:70:eb:44:22:68:40:
         aa:15:0c:8c:86:92:4c:16:ad:43:fa:6c:c5:14:16:a5:4b:37:
         3d:64:52:ad:5c:68:bc:72:15:89:4d:9e:30:8f:c8:78:0c:d7:
         98:3c:b0:38:96:5d:d8:59:ec:17:4b:5f:70:fa:0e:89:31:52:
         d2:03:17:dd:33:5b:cc:66:fb:4a:de:9a:69:f6:97:2d:f7:5b:
         3c:ae:bc:c7:36:ee:b4:74:1f:57:10:b1:fe:0e:a7:93:a6:af:
         c1:d0:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:42 2025 by rpki-client