Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
File:                     1e5A9FidahGyT3u8wpq5-a5olxk.mft (raw, json)
Hash identifier:          ErnnRvOrbFk00VZuUPFvgQpxrt5cE7rxbg4fgMIDxOY=
Subject key identifier:   1F:F0:E4:C5:2F:C8:20:DB:19:D1:F6:DC:5D:51:00:4F:96:28:03:E8
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Certificate issuer:       /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial:       019847775819568F803A9923B9C49183427E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
Manifest number:          0A2C
Signing time:             Sat 26 Jul 2025 16:01:00 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:00 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:00 +0000
Files and hashes:         1: 1e5A9FidahGyT3u8wpq5-a5olxk.crl (hash: h4+DpqgkMmUThWUsZLeasukbJeWhAMfVCRS0LgG7MfU=)
                          2: XjL_VzQpHSFAWpxr8LGCRwpbqdA.roa (hash: Brx7GKcJBpG7UwHG4ArWnTWvC9k75AexdudLOh9h/Pw=)
                          3: _iMkYM2SlDhb8BiWpSMXooueyD8.roa (hash: S5QL6kGITU62oZ1okwVbSjZ25wXtKrDyDz3OlnPy3eo=)
                          4: r8lD_AoxI_vqECkRvj5MGM36UnA.roa (hash: 3Vhj0OvbLDXudkl6wnwYXZg0rj1sNr06FqG4dJbW2C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:58:19:56:8f:80:3a:99:23:b9:c4:91:83:42:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
        Validity
            Not Before: Jul 26 16:01:00 2025 GMT
            Not After : Jul 27 16:01:00 2025 GMT
        Subject: CN=1ff0e4c52fc820db19d1f6dc5d51004f962803e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:41:17:8e:43:31:69:85:6e:97:78:90:2a:
                    f4:05:c9:5c:18:0d:2c:b5:bb:6f:66:0d:11:71:9b:
                    f7:59:8a:bf:32:5a:13:9e:f6:a0:06:d0:7d:24:12:
                    25:76:a9:c9:20:44:bf:0e:51:c2:5e:b0:34:38:2d:
                    50:c7:af:31:ac:2a:05:63:44:3e:d1:d7:0a:95:76:
                    35:e4:ce:de:1a:53:ce:0c:12:cb:32:35:59:13:30:
                    fc:43:24:e4:e4:79:28:11:a0:5c:a3:e4:08:06:61:
                    b7:00:5f:1e:59:c4:2d:f5:d3:60:86:f1:7c:5d:ee:
                    c7:b7:4b:33:33:97:a3:e8:f7:fe:05:42:9c:e1:0e:
                    63:88:2f:b5:90:e0:4e:bb:d3:22:31:16:c0:f2:b6:
                    7f:70:cd:e4:35:20:e4:7c:83:81:74:73:15:17:81:
                    4d:b7:ca:7e:5e:26:e6:de:56:e3:8b:76:67:46:cd:
                    71:6c:45:b3:ce:1c:6b:55:3b:60:73:88:0a:db:57:
                    23:2d:90:c2:a9:5f:23:9a:a9:a4:13:2c:7b:4d:7b:
                    79:94:2d:ec:d4:cb:08:f5:b4:4a:78:1e:45:dc:f5:
                    6f:d8:4e:f3:1f:43:e8:c2:0c:ee:f6:bc:1e:01:b7:
                    4a:e7:de:36:46:4b:56:2d:5b:4a:2b:44:ef:36:24:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F0:E4:C5:2F:C8:20:DB:19:D1:F6:DC:5D:51:00:4F:96:28:03:E8
            X509v3 Authority Key Identifier:
                keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:06:ae:0a:f6:e8:47:44:5f:58:21:ea:d5:5d:c3:f3:5d:c6:
         5e:4b:5d:52:b0:28:6b:f7:22:6a:e3:27:bf:d5:67:aa:28:c0:
         33:0a:59:3f:fe:17:9b:20:b0:f2:47:05:7e:22:3a:75:ba:e1:
         ca:2e:93:81:81:c7:31:5d:71:71:96:44:91:52:02:ee:8d:e5:
         77:4a:5b:09:ef:66:a0:92:1c:02:b5:72:60:ce:03:c5:72:63:
         1d:3b:af:66:c5:4a:80:ab:b5:56:0d:e8:f5:44:62:e1:ec:43:
         43:e7:ab:77:c9:19:f3:e7:f4:41:17:66:7a:2a:81:66:40:ec:
         20:6b:b3:26:fb:e3:59:79:b3:78:d2:74:35:25:87:6a:73:b5:
         26:a5:78:6a:75:5c:1d:ec:fb:2d:c6:73:1b:7f:9c:9c:bc:fa:
         02:47:3e:57:d2:b3:9e:af:cd:e5:aa:45:4c:e7:46:07:ac:ea:
         70:0d:d9:66:9d:35:c1:d3:64:aa:e8:77:85:59:70:8e:3b:89:
         aa:8c:d5:6b:1c:34:93:cd:4d:06:97:a9:38:00:03:c6:57:94:
         ed:88:6c:3c:ab:e2:b7:f7:da:70:d7:fb:42:4f:1a:d7:bb:46:
         22:cf:59:40:ce:5a:08:3c:d9:70:b3:bf:c5:bf:1f:89:ff:b5:
         43:93:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:10 2025 by rpki-client