Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File:                     APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier:          D5p3CMqB/ru7TQpZyQonRs8CW5SzDSpV2CQKa8LqfGo=
Subject key identifier:   EF:F6:FC:B1:8A:8B:A8:0F:EC:C5:5E:73:E2:13:9C:8A:12:81:4B:A8
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer:       /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial:       0198481B9B045A65E44C6AFDF36D1ECE6089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number:          152D
Signing time:             Sat 26 Jul 2025 19:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:25 +0000
Files and hashes:         1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
                          2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: GvU/WXbY8Trj4XwYiluXBAzQIUChDikD0dYVvXwWhVw=)
                          3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
                          4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
                          5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:9b:04:5a:65:e4:4c:6a:fd:f3:6d:1e:ce:60:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
        Validity
            Not Before: Jul 26 19:00:25 2025 GMT
            Not After : Jul 27 19:00:25 2025 GMT
        Subject: CN=eff6fcb18a8ba80fecc55e73e2139c8a12814ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:cc:89:70:c4:1a:6a:e7:98:07:63:d8:63:
                    a4:1e:df:aa:4a:39:09:33:bb:b0:1d:26:34:e5:29:
                    2c:39:b6:a7:f9:00:4a:a6:50:c5:82:fc:a9:f9:af:
                    fa:12:aa:29:29:db:e6:90:d7:fb:5b:11:19:9c:26:
                    86:87:48:b4:d5:07:bd:9f:ab:10:43:4b:14:f2:b7:
                    8d:86:4c:a6:1d:e7:22:ca:4d:94:79:db:97:d1:e3:
                    b9:91:3f:28:c7:fc:f5:cc:7b:4e:8d:9b:c9:64:62:
                    72:79:c8:f3:b2:42:c2:50:8a:d1:08:0b:e5:65:47:
                    37:02:c9:4d:5d:ce:7d:6d:9e:64:63:5c:e7:cf:45:
                    de:cb:0f:e7:67:2a:1e:08:bd:b1:5e:5d:5f:39:58:
                    e7:2e:78:3e:9f:0f:c7:75:af:8e:19:e0:2d:11:b4:
                    de:c0:92:31:83:94:47:4c:ad:5f:3d:62:e4:5f:c1:
                    70:ca:47:14:eb:76:cf:71:ea:e6:03:bf:8d:92:31:
                    f8:4a:b5:0b:83:fb:82:8a:57:09:0e:d6:11:d3:84:
                    b5:2d:ab:b6:8f:f7:51:15:35:97:2c:68:16:2a:dd:
                    ce:80:b6:df:44:a8:22:b9:3b:45:7c:dd:31:2e:e0:
                    9e:b9:c9:1f:c9:9c:85:f3:30:14:70:6c:f7:74:c7:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F6:FC:B1:8A:8B:A8:0F:EC:C5:5E:73:E2:13:9C:8A:12:81:4B:A8
            X509v3 Authority Key Identifier:
                keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:dc:58:db:bd:63:dc:d4:b9:b3:40:e0:1f:84:ce:14:71:
         94:80:a8:33:ae:c7:4d:96:6a:82:65:45:6f:55:f9:35:e9:44:
         dc:61:b8:5a:b4:2a:ce:6e:7d:eb:97:91:42:26:13:64:d0:93:
         c2:83:e3:95:aa:57:04:a9:dd:76:9f:c2:02:98:a6:8c:b8:94:
         4d:8b:a3:ef:c3:a8:bd:04:c7:36:cc:82:c6:1b:0c:cf:aa:d3:
         08:9b:7f:12:0d:06:dc:b6:5d:b4:c9:82:73:f6:e3:86:54:49:
         d8:06:c5:12:50:ba:b3:82:54:28:b0:c5:be:14:c8:ce:d6:81:
         f5:74:4e:32:12:66:41:2c:73:e1:30:6a:06:65:73:d7:6d:ae:
         35:2d:86:78:f1:b9:f7:3e:5d:e2:1a:fc:6f:d8:76:1e:3b:25:
         6f:4a:62:e5:6e:a2:2c:47:4a:2a:9f:5f:ce:8a:6f:c1:df:5d:
         6e:0a:0d:4f:b6:69:1c:c2:5e:b8:d7:4f:af:20:ca:07:e5:38:
         ba:b2:e8:2f:58:cb:5d:f7:d6:c1:bb:e3:48:24:92:92:f7:1f:
         15:e7:04:42:72:5e:ab:1b:38:86:17:ed:62:ad:54:67:c8:a4:
         bf:dc:6b:3a:ef:41:f1:cf:61:23:d7:09:54:9c:5f:9a:62:a3:
         27:0c:c9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:16:58 2025 by rpki-client