Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          PqyqOhJzz7AYYxTyNk+3qNRliHKFm3CTHV/Hy6yPGe0=
Subject key identifier:   54:AA:A1:82:2F:3D:1B:BC:CD:B6:90:64:A1:8C:E2:EA:6B:75:AD:D7
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       01982C6EF6697CCCE514345EB1AFAAE3C971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          15F5
Signing time:             Mon 21 Jul 2025 10:02:06 +0000
Manifest this update:     Mon 21 Jul 2025 10:02:06 +0000
Manifest next update:     Tue 22 Jul 2025 10:02:06 +0000
Files and hashes:         1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
                          2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: CyQTPIuL0yc+al5lKIOkBRAzDU2WiGnA0Ydt9P+rk2k=)
                          4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
                          5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2c:6e:f6:69:7c:cc:e5:14:34:5e:b1:af:aa:e3:c9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Jul 21 10:02:06 2025 GMT
            Not After : Jul 22 10:02:06 2025 GMT
        Subject: CN=54aaa1822f3d1bbccdb69064a18ce2ea6b75add7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:f0:36:2b:ec:a6:c3:7a:6c:a0:d5:42:f1:
                    dc:61:96:e6:a2:be:ff:a8:d5:59:59:35:22:93:db:
                    da:10:fd:ab:c2:8d:e6:4f:ea:4c:5c:85:20:0d:ff:
                    44:a6:a5:e0:0c:6c:76:7d:5f:4a:1a:44:c8:db:80:
                    fd:37:42:1a:ff:63:f9:5c:d4:0a:1c:99:c7:83:14:
                    45:1c:23:d1:1b:e3:0d:36:79:a5:78:55:69:38:20:
                    dc:ac:ee:4a:2e:d3:b6:d0:c6:ff:db:a0:10:61:c9:
                    65:72:29:21:c8:39:a6:16:d2:09:d2:7d:62:8b:9a:
                    1d:99:84:2c:58:c4:bf:ec:ef:c2:51:5b:dc:0c:70:
                    1a:05:20:be:42:bf:8e:01:64:82:9d:4e:0b:5c:e1:
                    9f:68:e7:c3:27:b0:9c:a4:c5:a3:51:5f:44:0a:d7:
                    7a:e0:03:19:7f:cf:fd:08:13:cf:b1:e1:6c:9d:ff:
                    bb:f9:fa:bc:bd:b8:51:5f:e6:ea:57:d7:6f:dd:21:
                    d5:d5:b7:bc:d7:f3:45:0d:ef:84:a5:d2:f8:ab:c6:
                    1b:55:99:25:f9:23:62:eb:be:0e:df:93:6e:b9:d8:
                    53:ae:7a:1b:7b:10:12:4e:89:48:99:63:04:d3:76:
                    2d:b3:7e:61:a9:43:30:b8:ce:d6:97:bb:c2:19:c2:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AA:A1:82:2F:3D:1B:BC:CD:B6:90:64:A1:8C:E2:EA:6B:75:AD:D7
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:17:51:3d:09:90:5c:82:a7:b4:d3:b9:7b:72:ab:f0:25:
         36:88:e9:73:20:c2:87:c9:0a:51:aa:ea:bc:4d:f4:03:c4:ed:
         c3:3d:40:b1:22:9a:65:7b:e1:65:13:71:3b:60:6f:79:0a:ed:
         81:b8:fe:25:37:47:e6:14:8f:dc:b3:43:7c:6a:cd:67:89:08:
         bd:12:9a:d5:5f:e5:28:73:7f:7f:78:73:7f:7a:1e:d5:05:aa:
         96:87:f0:96:0a:0b:d8:d4:e2:bd:aa:fa:de:4a:6c:c7:3a:cf:
         8e:2e:3b:f2:0f:3f:7f:ec:c5:0c:d8:43:df:aa:1f:d3:88:0b:
         5a:97:6c:1d:8c:3a:3c:b3:d2:8d:5b:88:ff:fe:4f:1e:15:08:
         88:a2:9c:2a:d5:5d:a4:05:e6:ca:bb:18:ef:84:fc:45:c5:1c:
         96:ca:e2:03:ae:2a:13:91:d4:77:c1:13:7b:5c:c7:23:71:63:
         79:f2:c6:97:bd:51:5b:b2:c7:c9:4e:d9:ec:73:ba:7a:6f:cc:
         35:a9:fe:4b:6f:a3:b3:00:81:bc:7f:15:8e:a7:99:f0:95:b1:
         9a:a3:c7:fb:44:4e:74:64:30:22:19:04:7b:81:81:7d:c4:a8:
         5d:62:30:87:b4:b8:60:65:b2:2e:d6:14:17:d1:2f:06:38:47:
         a0:54:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:24:32 2025 by rpki-client