Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File:                     D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier:          1BUxO0cy95BsxWWhileabrJzBeQqUoyfWUGfM3kASxQ=
Subject key identifier:   5F:FD:E1:E6:3F:6F:83:61:E2:55:D6:8E:E6:7F:A4:BE:4D:21:D8:85
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer:       /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial:       019847ADD8D4A5624FE6EF3D282930CD4BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number:          05EA
Signing time:             Sat 26 Jul 2025 17:00:32 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:32 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:32 +0000
Files and hashes:         1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: OAJxk3Rl2cbcspPv5yw6+VbULMJ8e2TrJaKWLpMNEjM=)
                          2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:d8:d4:a5:62:4f:e6:ef:3d:28:29:30:cd:4b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
        Validity
            Not Before: Jul 26 17:00:32 2025 GMT
            Not After : Jul 27 17:00:32 2025 GMT
        Subject: CN=5ffde1e63f6f8361e255d68ee67fa4be4d21d885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a6:0d:9b:67:fd:38:8c:54:30:13:bd:3f:f2:
                    d0:ce:fd:78:ed:91:ec:44:7e:44:ab:ad:33:69:1b:
                    4a:2c:c4:ea:b7:e8:ef:27:5f:bc:f2:36:16:1b:5e:
                    87:16:e5:c9:ee:4c:63:12:14:89:2d:d4:55:ca:a1:
                    3c:c6:85:31:3f:6a:7e:ae:bf:22:2e:9e:ae:83:2f:
                    f0:36:c1:39:82:01:66:e3:ee:c5:bd:18:01:d1:d8:
                    f0:71:85:ad:7b:10:83:25:f4:ee:a0:89:48:11:d7:
                    07:fd:16:ab:bc:e3:ab:70:0a:d9:e6:8a:03:33:ab:
                    61:c2:69:c5:ec:2e:8b:43:2c:45:85:a1:1d:29:1e:
                    3e:42:c0:ce:65:d9:c2:e2:61:22:f4:6b:98:e3:7d:
                    a1:79:a5:6c:a6:3b:56:e5:dc:5f:72:28:c4:92:07:
                    d1:f2:75:cf:55:f3:87:6f:de:bf:af:6b:50:1b:5f:
                    f8:ba:e3:5f:b0:09:ed:3a:f2:af:02:20:55:b4:c7:
                    5a:ca:41:a8:cd:ec:c5:5c:1d:91:48:ad:2f:d9:73:
                    5a:1e:66:5e:8b:9e:c4:37:5b:1c:ae:88:36:20:d6:
                    4a:39:08:53:3d:d2:f2:92:c2:6b:f8:52:0b:66:3c:
                    a7:3a:2e:5a:37:6d:e8:8d:c7:0b:05:34:40:79:44:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FD:E1:E6:3F:6F:83:61:E2:55:D6:8E:E6:7F:A4:BE:4D:21:D8:85
            X509v3 Authority Key Identifier:
                keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:52:d6:c4:14:58:b7:a8:fb:1d:30:99:02:4f:f0:f2:4d:
         bf:51:b4:58:e6:83:33:57:a5:fa:f3:06:48:42:ec:cb:fa:c8:
         7e:46:c1:44:bb:97:8b:5b:f7:e7:3f:59:0a:02:0a:80:37:b6:
         66:c2:72:ff:95:63:6a:a8:af:75:e5:89:81:7a:14:24:30:89:
         2c:98:17:c8:bc:ef:29:0a:18:d0:e5:ab:b6:ee:8b:6c:39:b5:
         1d:81:5c:f0:fd:65:31:60:6c:58:a0:8a:7d:c0:ba:cf:55:45:
         d9:ae:a5:57:8b:6d:b0:94:4b:ef:81:19:18:a1:73:47:63:96:
         ed:0a:3b:18:0c:aa:55:af:62:f1:21:de:e3:8b:b6:d0:0f:56:
         11:1e:56:95:5d:4c:6d:30:cc:73:3f:78:c0:86:06:90:f6:98:
         7c:fd:bf:57:da:98:f2:f3:aa:47:33:77:eb:cb:55:4d:20:c9:
         85:7c:0d:3d:27:67:c0:3f:cc:c7:84:44:a0:5b:e5:c9:0b:41:
         6f:62:01:33:b4:00:bd:59:00:1f:58:8e:2c:0c:90:a5:47:99:
         a0:cb:d2:de:d4:69:14:b0:a4:55:3d:06:8b:cc:55:50:c5:15:
         c9:69:a6:cf:46:79:90:e8:76:fb:6a:13:0b:52:6e:7e:50:d3:
         4b:74:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:37:56 2025 by rpki-client