Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File:                     5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier:          cpMY+E8IqJcoK42dyyvhh/vNQdwp4TgwaYOH0WDvRjg=
Subject key identifier:   CE:83:CD:7F:22:3F:A1:75:8C:5A:AA:69:C3:4C:76:D1:68:90:4B:83
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer:       /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial:       01984A09D604B1FDD3BD898B927F990A46EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number:          160C
Signing time:             Sun 27 Jul 2025 04:00:15 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:15 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:15 +0000
Files and hashes:         1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: qC2hfN5UP4JooOXYI1U5MCdM9UFMJUhkewsyGZOR+l4=)
                          2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
                          3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
                          4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
                          5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
                          6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
                          7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
                          8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:d6:04:b1:fd:d3:bd:89:8b:92:7f:99:0a:46:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
        Validity
            Not Before: Jul 27 04:00:15 2025 GMT
            Not After : Jul 28 04:00:15 2025 GMT
        Subject: CN=ce83cd7f223fa1758c5aaa69c34c76d168904b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:b1:a9:e3:6f:2b:6c:e2:46:00:0c:68:6d:
                    36:7a:d1:fb:67:0b:52:55:c1:4a:98:e3:0e:2a:0d:
                    8e:d0:b1:07:d9:95:d0:6b:b3:86:59:83:89:a6:d8:
                    2f:4f:ab:4a:60:59:3d:35:cd:31:7d:2f:a9:cd:86:
                    20:b8:88:f2:da:d3:4f:b3:d4:7c:28:d2:15:4c:cd:
                    cb:04:c6:00:d8:6d:d4:21:a3:70:6f:df:cd:f6:65:
                    74:c8:eb:6e:3c:56:35:4d:3f:7a:9f:70:ef:a0:24:
                    99:41:75:a8:c5:27:fb:db:6c:48:9c:5d:88:54:b1:
                    70:b7:1d:b3:c0:5a:b4:91:be:00:4f:b1:d6:ff:4d:
                    76:d8:bc:b2:ca:81:30:85:24:a4:e3:5e:41:d1:12:
                    44:24:ed:a9:40:f1:c6:d4:5e:17:b0:92:12:8d:72:
                    7d:87:c1:54:1f:38:8f:57:fc:41:0d:87:d0:60:d5:
                    0a:d9:60:fe:97:14:75:0e:fb:37:bf:ed:44:a7:ba:
                    da:a7:c3:71:af:90:5c:53:de:12:5f:e8:f9:ba:47:
                    c4:31:ca:ad:73:c9:00:8e:90:a5:6a:49:a0:01:60:
                    6c:67:14:a8:2f:db:c6:e8:93:91:49:97:46:04:ec:
                    dd:d3:2c:da:35:97:65:11:92:b3:e2:e0:cf:23:b0:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:CD:7F:22:3F:A1:75:8C:5A:AA:69:C3:4C:76:D1:68:90:4B:83
            X509v3 Authority Key Identifier:
                keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:3d:d0:1d:83:72:99:78:d7:6b:a1:f4:d3:0a:bf:59:a6:
         00:67:65:80:c0:9d:20:10:70:74:98:cd:db:c8:1c:55:ad:eb:
         2c:8d:99:8e:c5:4b:4a:93:7d:f3:e5:00:31:01:6a:83:37:d7:
         de:9b:16:12:0b:8d:6a:4c:b4:65:9d:17:20:07:71:48:ca:d3:
         20:89:88:95:cb:b6:98:4b:a6:64:8e:fd:6e:16:95:fc:38:8a:
         46:1d:1c:b7:79:37:02:15:15:3c:06:6e:be:f5:ea:ff:d5:71:
         00:27:3b:c2:c8:95:f1:db:fe:33:87:6a:fa:3f:4e:fd:d0:0d:
         c6:36:c4:23:99:cb:94:be:c0:e0:78:ac:3a:a4:b0:7f:4c:a1:
         42:25:48:c7:9d:e6:68:21:6b:05:29:f3:26:04:83:28:e2:55:
         5a:3d:15:b6:3e:45:0b:f0:ad:cb:5b:db:72:79:a5:6c:90:3c:
         d6:46:1b:de:4c:c3:fd:16:8f:07:24:43:1c:46:98:ba:1d:52:
         cd:b7:99:d2:37:85:ef:9d:20:b3:ae:d3:71:2a:c3:53:61:d5:
         de:56:fe:d9:74:28:23:59:89:98:f9:b0:42:48:b6:ee:cf:90:
         02:50:d3:d6:4a:f0:1a:a4:f3:6e:4c:61:ff:d0:31:5a:8d:fd:
         df:f6:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:17 2025 by rpki-client