Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File:                     N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier:          aFOsDQIFTl8X/lqm0W8poH8hEoXCmaYTmZoo+CLo7Ik=
Subject key identifier:   A3:48:34:3B:E3:03:ED:52:49:81:24:E6:B3:FD:B1:BF:A7:E8:18:A0
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer:       /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial:       019849663C6DEE16139B4CE2FA9C2F43D2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number:          160E
Signing time:             Sun 27 Jul 2025 01:01:33 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:33 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:33 +0000
Files and hashes:         1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: XBZsUTYFC6t7IfVHET1JLI6DL3jIqxLM1mNIvU5/SIk=)
                          2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=)
                          3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=)
                          4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=)
                          5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=)
                          6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=)
                          7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:3c:6d:ee:16:13:9b:4c:e2:fa:9c:2f:43:d2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
        Validity
            Not Before: Jul 27 01:01:33 2025 GMT
            Not After : Jul 28 01:01:33 2025 GMT
        Subject: CN=a348343be303ed52498124e6b3fdb1bfa7e818a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:a1:cc:a5:43:a6:92:a7:c0:27:69:17:75:
                    38:81:b6:16:4b:2c:37:0b:be:d9:7b:5b:83:7f:a3:
                    22:51:fe:3a:0f:a6:33:27:57:5a:c0:d4:22:4c:50:
                    eb:ac:7b:9c:a8:2c:98:62:90:25:fd:93:aa:80:9a:
                    53:c6:ea:83:3f:a0:c5:2c:f0:3f:04:90:90:80:45:
                    ae:c9:44:a9:3b:99:34:14:54:00:ca:b4:c9:bb:23:
                    4c:e8:82:8d:ac:45:00:25:a1:f6:c2:bf:d2:a6:31:
                    1d:59:ba:f4:6c:9d:3b:9c:2f:f6:3b:87:1d:dd:63:
                    10:cc:0e:43:fc:9e:fd:82:80:1a:17:25:7f:20:b0:
                    ce:f8:3b:de:77:f3:11:a8:e3:d7:cb:d7:4c:ff:a7:
                    6b:7e:55:23:54:9d:87:26:5b:3e:e0:6b:e2:e6:48:
                    a6:e3:ad:5f:c7:30:4a:e0:66:aa:46:68:3f:c5:df:
                    60:15:2a:75:aa:bc:38:7f:f0:52:1a:01:2e:40:85:
                    a6:60:9a:61:0f:66:63:ef:04:e9:43:4c:e7:44:f5:
                    92:a2:e7:48:ec:b6:5b:23:12:c0:cb:57:aa:f2:e8:
                    81:86:68:ed:3b:dd:89:22:e6:3b:97:3f:18:cb:3f:
                    c5:23:ca:fd:63:5d:db:71:af:ae:54:70:19:96:54:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:34:3B:E3:03:ED:52:49:81:24:E6:B3:FD:B1:BF:A7:E8:18:A0
            X509v3 Authority Key Identifier:
                keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:cb:e6:17:86:e5:e3:3b:3c:a1:fb:0f:ab:1a:e6:61:6c:
         43:6f:ee:28:06:b9:3b:2f:81:7d:85:d9:ac:95:12:c8:dc:fd:
         ef:f8:21:6a:74:92:7e:a8:a3:99:91:1b:b7:83:b3:c7:b5:0c:
         21:03:b0:7a:35:bf:c8:80:f6:e6:3e:a9:e7:3b:2a:8b:4b:a5:
         02:86:f7:29:43:46:60:ea:3a:64:74:8b:c0:38:87:63:93:cc:
         14:d2:82:0f:e0:5b:e9:23:8f:d8:dc:24:54:f3:89:39:ac:f9:
         5c:af:d4:91:77:42:40:dc:79:cb:e1:4d:09:63:1e:f3:2c:e1:
         4f:25:3b:59:fb:34:33:52:9c:d8:23:6f:43:7d:99:9b:be:ae:
         2f:c1:23:c6:6b:5f:93:d0:44:9f:ba:55:69:49:79:74:81:76:
         04:d4:59:b1:46:1a:e8:dc:cc:de:e2:35:37:ee:8e:07:16:7b:
         55:74:20:62:c1:43:c2:ef:9d:7a:ad:89:5e:4d:19:4e:5c:a3:
         ea:09:a2:7d:58:33:b8:87:0e:62:98:7e:e8:e4:36:70:46:cd:
         24:b1:82:88:b2:89:f4:d6:54:e7:0e:34:90:f3:66:73:32:51:
         3f:30:4a:6e:07:d5:e6:6e:09:b5:01:62:97:78:fb:a2:cb:37:
         52:95:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:35 2025 by rpki-client