Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          t+7hbjS6kLO3KNSwCVBeynOqoGV4AR5ffz7wPO29MAg=
Subject key identifier:   D5:A8:48:7E:B5:7D:7E:27:5D:FF:08:1B:9A:BD:D8:B6:CF:3F:E1:31
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       0198443E9AFA636E79CC634D4AC9518565A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          1591
Signing time:             Sat 26 Jul 2025 01:00:10 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:10 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:10 +0000
Files and hashes:         1: 4KuSjXjGdyF1nScN1LwMlleHlmA.roa (hash: HlUuzXxOiMUBV49vY7GcCdve69QZxWM3RwORJ/36zYI=)
                          2: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: 5+CpNMOZKt/pr5xeBKPVPCUzO1Z6+8BGUsZoF1Vz2Os=)
                          3: 7lacSGraqTGoKqaT-zAuzKx29Fk.roa (hash: FcCPAhyHMElJytjQ2WhAIPJGkfaFqPbC3K17eZo24Pw=)
                          4: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (hash: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:9a:fa:63:6e:79:cc:63:4d:4a:c9:51:85:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Jul 26 01:00:10 2025 GMT
            Not After : Jul 27 01:00:10 2025 GMT
        Subject: CN=d5a8487eb57d7e275dff081b9abdd8b6cf3fe131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:b2:83:8d:b5:3f:c0:e5:00:f4:2e:b6:2b:
                    d2:a9:bb:8b:07:db:23:86:9c:a6:64:42:90:db:e5:
                    af:6e:fb:db:ee:8e:a3:0f:98:f1:f4:a7:e8:11:5b:
                    a9:bd:9b:73:06:71:14:3a:54:59:2b:9c:e2:73:09:
                    f3:33:c0:6d:9a:a7:73:2a:a8:8a:ae:2a:97:12:87:
                    6f:a1:9f:6d:44:45:6b:59:e9:95:c5:c7:19:65:04:
                    2b:5c:4d:1b:8e:56:12:f3:61:54:41:cf:1f:87:2e:
                    5c:4b:13:2e:f0:55:cf:b2:57:c7:9a:1b:85:4d:fd:
                    26:03:6c:8f:04:57:e4:e5:a6:36:00:64:c8:de:63:
                    71:08:4b:9d:ff:5c:46:07:e2:8d:ae:e9:18:62:be:
                    0e:b7:3a:78:01:13:ea:b7:4d:db:51:4e:c0:25:4d:
                    26:16:7f:06:e4:a1:37:e9:79:6e:55:6a:f6:fc:9b:
                    c4:ba:8f:5c:be:54:90:75:5a:6d:d3:ed:d2:07:fb:
                    57:39:92:c1:2c:a7:7f:4a:c3:0b:cd:e6:6e:e1:82:
                    c2:1b:ba:a1:e6:6a:f4:d5:6c:2e:b8:99:70:89:52:
                    d9:da:f5:22:91:1a:fa:3d:d7:d6:14:e8:73:ba:59:
                    55:44:0f:9b:8c:2e:d1:92:52:54:c5:1f:c6:e5:e1:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A8:48:7E:B5:7D:7E:27:5D:FF:08:1B:9A:BD:D8:B6:CF:3F:E1:31
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:07:72:22:6b:61:ff:bc:2a:85:96:58:b1:d2:bc:09:b4:0d:
         41:fa:85:4a:eb:04:75:67:1c:0b:04:d6:ba:19:df:2e:93:b0:
         e7:23:54:eb:bd:9f:c7:77:30:04:77:e8:4c:05:ae:ec:71:63:
         b9:0d:b3:8e:a0:1c:1e:77:e6:47:f6:ac:83:28:31:6f:3b:fe:
         9b:c8:8a:3a:ac:5c:56:ba:fd:28:1d:00:cb:80:d2:07:ec:ba:
         4a:96:54:6b:33:f2:e4:b2:d9:ad:5f:33:1e:a9:37:58:aa:a4:
         eb:b0:8b:ed:07:e3:c3:56:d5:50:23:12:49:dc:b8:61:b3:87:
         4e:2f:b6:76:9f:6d:98:ae:41:ed:58:d5:ee:5d:94:70:b5:46:
         fd:30:79:f5:49:6b:5a:a8:36:88:bf:e3:0a:e9:f1:2d:9c:a2:
         72:93:b1:34:44:c2:25:51:72:33:14:30:58:7f:e6:6f:4c:0a:
         30:94:76:e0:fa:09:17:72:19:4c:79:c0:e5:12:2f:5b:e5:6f:
         7b:1d:46:f3:98:05:42:40:0b:06:81:f2:fc:4f:85:ea:a0:51:
         b2:a7:68:e1:e4:f3:e5:9a:1b:bb:8b:88:52:f9:29:29:f7:73:
         2b:f2:f5:14:12:1c:76:7f:2d:5d:dd:10:d5:c3:1d:ed:5b:d5:
         2b:87:d1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhEPpr6Y255zGNNSslRhWWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5
ZWMwYjUwHhcNMjUwNzI2MDEwMDEwWhcNMjUwNzI3MDEwMDEwWjAzMTEwLwYDVQQD
EyhkNWE4NDg3ZWI1N2Q3ZTI3NWRmZjA4MWI5YWJkZDhiNmNmM2ZlMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymKyg421P8DlAPQutivSqbuLB9sj
hpymZEKQ2+Wvbvvb7o6jD5jx9KfoEVupvZtzBnEUOlRZK5zicwnzM8BtmqdzKqiK
riqXEodvoZ9tREVrWemVxccZZQQrXE0bjlYS82FUQc8fhy5cSxMu8FXPslfHmhuF
Tf0mA2yPBFfk5aY2AGTI3mNxCEud/1xGB+KNrukYYr4Otzp4ARPqt03bUU7AJU0m
Fn8G5KE36XluVWr2/JvEuo9cvlSQdVpt0+3SB/tXOZLBLKd/SsMLzeZu4YLCG7qh
5mr01WwuuJlwiVLZ2vUikRr6PdfWFOhzullVRA+bjC7RklJUxR/G5eEGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWoSH61fX4nXf8IG5q92LbPP+ExMB8GA1UdIwQY
MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt
MTlkZjViNGQxMDE0LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0
LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwdyImth
/7wqhZZYsdK8CbQNQfqFSusEdWccCwTWuhnfLpOw5yNU672fx3cwBHfoTAWu7HFj
uQ2zjqAcHnfmR/asgygxbzv+m8iKOqxcVrr9KB0Ay4DSB+y6SpZUazPy5LLZrV8z
Hqk3WKqk67CL7Qfjw1bVUCMSSdy4YbOHTi+2dp9tmK5B7VjV7l2UcLVG/TB59Ulr
Wqg2iL/jCunxLZyicpOxNETCJVFyMxQwWH/mb0wKMJR24PoJF3IZTHnA5RIvW+Vv
ex1G85gFQkALBoHy/E+F6qBRsqdo4eTz5Zobu4uIUvkpKfdzK/L1FBIcdn8tXd0Q
1cMd7VvVK4fR4Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:12:24 2025 by rpki-client