Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File:                     386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier:          Fu5boC89bZ6vK8xDmYv9pCqCWzr1zizB9S4p86lUBco=
Subject key identifier:   23:4E:5E:E7:C9:01:A7:5A:C3:8F:86:14:59:C6:5F:D7:86:B1:9F:37
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer:       /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial:       01984B541A1E98F395A49B9EC52D3BEE3A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number:          053B
Signing time:             Sun 27 Jul 2025 10:00:59 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:59 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:59 +0000
Files and hashes:         1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: 16QHx4w3mk5oc288MosJVKmUMXjOwoscD3v9Ppi8Kr8=)
                          2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:1a:1e:98:f3:95:a4:9b:9e:c5:2d:3b:ee:3a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
        Validity
            Not Before: Jul 27 10:00:59 2025 GMT
            Not After : Jul 28 10:00:59 2025 GMT
        Subject: CN=234e5ee7c901a75ac38f861459c65fd786b19f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:52:d0:27:a7:a5:39:68:59:6f:72:a3:c1:
                    17:28:53:91:1b:19:c8:25:3e:d9:89:a0:df:c8:32:
                    43:9d:50:45:cc:cf:b0:c8:7e:1a:bc:df:e4:50:2e:
                    55:d5:26:18:e7:7c:e2:46:fb:bd:58:62:de:fa:3d:
                    9c:eb:32:5b:00:a1:be:19:27:6b:51:5d:0d:85:6c:
                    16:b4:00:77:d1:91:53:2b:93:53:17:f0:a6:79:59:
                    46:7f:70:3d:53:b3:6f:2a:23:c1:1e:4b:0d:a0:f7:
                    7b:72:85:4e:31:a9:f9:65:09:e5:eb:0d:cc:d6:26:
                    08:38:05:3e:8d:77:e6:40:10:ff:35:dc:86:36:ec:
                    ac:13:62:60:c5:73:1a:9d:58:67:36:1e:56:35:a7:
                    c0:df:1c:0e:78:fd:c8:dc:0b:6a:ad:f1:fe:0f:d8:
                    3d:3e:81:57:16:67:05:41:18:39:c3:48:51:61:df:
                    62:ff:1e:6a:85:82:4a:fd:05:0b:2f:46:7d:c5:26:
                    53:4f:7a:a5:2c:6b:68:dd:c9:be:dd:ba:87:6e:1e:
                    43:8c:4b:58:07:a4:93:44:d0:f8:c9:ae:71:0f:ed:
                    14:63:6a:4c:39:6f:5a:a0:a6:70:21:9f:aa:b6:cf:
                    79:0a:25:78:ec:ee:42:21:26:bc:4f:c5:01:68:11:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:5E:E7:C9:01:A7:5A:C3:8F:86:14:59:C6:5F:D7:86:B1:9F:37
            X509v3 Authority Key Identifier:
                keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:51:92:88:97:2e:fc:0c:29:81:29:f6:19:e4:26:d3:bb:
         00:fb:e4:19:d8:b2:bb:e4:ab:63:12:3d:2e:1b:97:db:61:e1:
         ca:b5:06:99:6d:ae:b4:f2:24:50:75:c9:8a:87:ef:6c:8b:8c:
         d6:a7:3f:52:47:1b:ae:db:53:a3:2d:87:f7:ae:58:ae:72:90:
         80:89:30:df:7a:ee:b6:ad:7f:43:27:c5:74:42:7a:2f:4f:ec:
         d2:de:34:3d:5a:58:07:d5:3f:3a:35:e7:28:96:a2:14:be:9e:
         5f:9f:3a:6e:1d:ba:0a:b9:77:e5:45:ec:41:af:6c:e0:03:70:
         76:e8:38:2f:ec:49:8b:90:7c:d6:fa:83:12:11:27:29:ac:b3:
         29:86:e4:24:f0:fa:b2:76:f1:a8:73:da:24:61:ac:dd:87:07:
         73:ea:49:b9:d4:50:82:cb:d1:2b:59:e8:bb:c3:a1:3c:16:7f:
         13:54:fa:36:a8:b9:8b:6c:ba:1b:6e:e9:66:14:7d:7a:36:b1:
         e2:85:7e:7e:08:5f:bf:c8:72:8f:4f:71:9f:28:76:6d:ea:7b:
         c8:18:1c:43:b3:a1:1c:4b:3e:99:3f:ff:3c:ae:85:70:2b:a9:
         31:df:9f:dd:c4:02:de:6a:02:cb:34:c4:6a:7f:23:c3:bd:ce:
         2c:e6:0a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:46 2025 by rpki-client