Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File:                     5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier:          nB6QXVEjz9SIANwLlN1bxAJsZwbmDKaRFQ2+VeUgGUA=
Subject key identifier:   43:55:FA:2D:49:7F:37:A7:09:27:FF:26:94:64:3A:5F:92:AD:51:2A
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer:       /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial:       01984966A65E311F89897531DED8C30696F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 01:02:00 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:00 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:00 +0000
Files and hashes:         1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
                          2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: VPsT+01pjboxarOeGrFW2DmEkGgLlRiCo/O0UsC5xr0=)
                          3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:a6:5e:31:1f:89:89:75:31:de:d8:c3:06:96:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
        Validity
            Not Before: Jul 27 01:02:00 2025 GMT
            Not After : Jul 28 01:02:00 2025 GMT
        Subject: CN=4355fa2d497f37a70927ff2694643a5f92ad512a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:b2:d1:5f:e7:1d:c6:bf:5c:91:11:02:a2:
                    93:3d:56:b8:b4:4e:2d:c3:71:db:8e:c7:df:14:d9:
                    66:ab:63:c9:c2:db:78:53:cf:0a:da:4e:ea:57:46:
                    3e:6c:23:8c:5e:e7:50:e0:b3:16:64:46:cd:22:27:
                    fe:71:cd:b6:b2:db:d0:61:d0:3d:e3:1f:15:8a:b4:
                    b6:e2:35:a0:f7:27:22:aa:34:ba:f0:98:50:cf:36:
                    61:f0:e4:02:ab:c0:41:ea:04:30:45:dd:31:c0:2c:
                    eb:a6:b8:41:be:25:df:c0:ae:12:35:86:c6:9e:da:
                    d9:2c:17:da:7b:e5:fd:b4:d0:5b:06:c5:5b:69:e4:
                    8a:8f:03:5d:50:9a:38:07:b4:d0:61:61:a7:3a:0e:
                    9a:a1:e6:42:9c:71:24:74:71:c8:84:da:ce:e2:d9:
                    5e:95:a3:7a:e5:34:c8:ef:0d:b3:db:be:12:44:88:
                    ad:2a:d3:42:5e:57:ca:14:74:56:7d:e4:2e:fe:1d:
                    45:16:c6:d4:5d:64:f4:c2:11:53:e0:1b:7d:cd:0f:
                    fd:03:6b:00:3a:0b:1f:dc:3d:b6:f8:6a:62:77:92:
                    cb:8b:12:c8:97:43:0e:a0:73:b7:c4:c3:1c:7a:89:
                    c4:c5:c1:09:44:6d:ba:50:ca:eb:a8:fd:47:9c:58:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:55:FA:2D:49:7F:37:A7:09:27:FF:26:94:64:3A:5F:92:AD:51:2A
            X509v3 Authority Key Identifier:
                keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:52:1e:81:1c:df:c6:9f:8f:ae:e0:21:3f:21:b7:f0:a5:
         3f:36:a4:64:0d:25:ef:f8:e0:f6:86:7a:0e:6c:7d:f0:5e:5b:
         55:d0:18:be:d7:43:b8:3c:0a:3d:80:56:78:83:a9:29:74:47:
         07:a6:b1:c8:88:6b:00:fd:6e:64:2e:06:0a:06:a9:96:b7:87:
         2b:0f:6e:9b:d2:c8:49:3b:91:0c:68:98:94:fd:ab:d4:50:67:
         8a:df:64:ee:c9:99:e3:79:4a:72:1f:30:44:bf:90:f4:dc:17:
         6a:11:21:24:8a:82:8c:df:80:c0:46:7f:b8:cf:41:c9:d1:c1:
         3d:70:bd:01:7f:0f:27:b7:f5:c8:6e:a4:b8:5b:04:21:dc:a5:
         c8:ec:29:02:56:2a:b5:b6:b1:1e:4b:13:02:fc:dc:d2:ea:c7:
         a7:0b:df:8a:70:95:08:5d:4b:dc:1e:e8:65:7c:84:ba:a6:f9:
         ba:84:4e:64:69:ad:ce:a6:13:33:88:ad:25:ea:f1:26:82:de:
         3e:42:6a:50:e8:39:6f:1a:67:bc:72:3b:2b:f2:09:3c:d8:25:
         92:ee:00:8b:5c:a6:20:76:52:37:79:ff:42:c0:2f:c5:84:47:
         13:2d:54:aa:e6:05:a5:d1:e4:f9:e8:59:bd:eb:24:ff:24:75:
         3d:5e:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:59 2025 by rpki-client