Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          3pg+qOb330jqxR/s7yczkv+O3pVnKVGpWNOrUbKlR38=
Subject key identifier:   E5:4B:D1:0E:90:9F:26:E4:D4:E6:FF:2B:C9:74:95:96:D2:9E:F7:B5
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       0198D5BC1D43477FA6B894070DD853E05AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 07:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:11 +0000
Files and hashes:         1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=)
                          2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=)
                          3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=)
                          4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: o89cEWw0f1BCJx882k4QKLXeO7yk71ycPHEkVX1GRP0=)
                          5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=)
                          6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=)
                          7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:1d:43:47:7f:a6:b8:94:07:0d:d8:53:e0:5a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Aug 23 07:02:11 2025 GMT
            Not After : Aug 24 07:02:11 2025 GMT
        Subject: CN=e54bd10e909f26e4d4e6ff2bc9749596d29ef7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:91:51:89:87:99:62:fb:5c:a6:6e:8f:6e:
                    f3:3b:82:7b:d4:ab:85:c0:0e:78:1d:ca:41:82:32:
                    7e:ed:f3:88:1a:87:a9:a5:44:26:97:86:f5:3f:87:
                    7a:8c:6c:94:d6:72:6f:49:21:0d:a2:84:26:3f:a2:
                    10:d9:12:62:31:c0:63:f3:cc:a6:34:f2:32:ce:09:
                    5a:01:da:6f:bb:b3:42:3c:fb:58:4f:4e:dd:0f:7f:
                    eb:ca:b2:12:2e:77:58:9a:d9:42:24:db:16:0f:fc:
                    f2:fb:c0:b7:e2:99:92:b1:df:18:fc:9b:74:8d:de:
                    80:bf:4a:d1:e6:69:2f:fe:68:48:fe:7d:05:33:f3:
                    d1:a8:1e:4b:7d:6f:20:26:93:fa:89:7c:e0:94:e6:
                    bd:e0:a8:8e:57:7b:74:53:2f:96:ff:a6:44:cf:c5:
                    89:b9:3c:e3:f1:78:03:8d:b9:ff:5c:0a:ea:59:de:
                    cd:42:07:62:5a:b8:ec:2a:03:9d:34:88:15:68:75:
                    38:99:8a:4e:b5:1b:4d:33:c1:75:d7:d5:a1:d4:32:
                    8d:23:1a:ce:99:25:a9:96:54:4c:29:32:b0:ee:a0:
                    1e:ea:cb:cd:61:7b:ed:dd:ea:d0:79:c3:2b:af:65:
                    e3:a5:37:7a:47:73:96:aa:02:de:2d:7b:eb:11:87:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4B:D1:0E:90:9F:26:E4:D4:E6:FF:2B:C9:74:95:96:D2:9E:F7:B5
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:7b:fa:6f:8d:58:18:75:27:72:17:b8:dc:4e:5a:a4:d2:
         87:3a:de:68:62:8d:8d:be:8d:00:83:3f:00:de:91:92:8b:52:
         1e:9b:dc:fc:33:17:bb:2b:a4:e7:63:67:dd:bc:e2:f0:6b:2c:
         8e:b8:b8:01:b8:44:ad:bc:44:be:fa:52:f6:58:2f:cc:d8:8f:
         cd:40:3d:f0:fb:16:23:00:26:d8:d5:54:bc:be:d2:00:2b:ce:
         91:e2:b1:05:b6:1a:1f:27:d9:28:81:9d:48:69:ad:bd:5a:a4:
         83:ff:4b:bf:68:f1:e8:6e:74:99:57:10:70:be:4c:2a:e1:f2:
         e3:e4:84:8e:07:e7:9f:87:c4:63:f0:d8:25:43:1e:0d:d4:d0:
         b6:0b:50:1b:b1:c5:ec:97:b0:66:24:85:62:bb:47:a6:5e:5e:
         7d:51:c8:aa:66:10:45:b9:99:75:cc:07:38:b7:d2:d7:31:03:
         ad:fb:43:7c:d9:18:95:19:72:c6:70:b7:4b:6c:05:9b:b0:d7:
         c7:9d:1a:68:3f:96:72:08:ab:c9:09:eb:11:b0:ed:7f:bf:8d:
         97:56:dc:5c:bf:e6:b6:ea:aa:d0:19:2d:b7:3b:cf:40:cb:b2:
         a2:b2:b2:86:6a:65:08:19:52:e9:f1:a0:98:7a:a2:c3:79:53:
         88:8f:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:38 2025 by rpki-client