Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File:                     N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier:          Ve8OZO4VGCeTcVbJHDO5NkuPoZRMutZJBsPUR/fgpQ8=
Subject key identifier:   14:CC:33:48:65:B8:BB:FA:19:6B:EE:2D:7E:CD:A2:B1:AD:E0:D1:0D
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer:       /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial:       019849D2E166853C4697E9531BC5D68926DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number:          1595
Signing time:             Sun 27 Jul 2025 03:00:13 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:13 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:13 +0000
Files and hashes:         1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
                          2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: DTWxWWOgMHDm5BVOHBf1dvthPeIvjEKBDGNeHeC5fZs=)
                          3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
                          4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:e1:66:85:3c:46:97:e9:53:1b:c5:d6:89:26:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
        Validity
            Not Before: Jul 27 03:00:13 2025 GMT
            Not After : Jul 28 03:00:13 2025 GMT
        Subject: CN=14cc334865b8bbfa196bee2d7ecda2b1ade0d10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:5e:d2:f7:66:5f:80:66:3d:0a:b4:7e:7d:
                    1b:4e:58:73:d0:bf:88:fb:3e:0f:f3:1a:24:14:e5:
                    72:2e:a8:94:c5:bb:17:02:f3:40:31:f2:37:17:2e:
                    dc:ec:e5:40:5f:7d:34:50:22:ed:1e:69:8f:32:b2:
                    de:4f:c5:d8:b7:86:ad:ea:4c:2f:10:a1:5d:74:df:
                    9c:67:77:6f:cf:b5:48:b4:b1:a3:c1:14:46:67:ad:
                    42:bc:9c:78:61:94:32:5e:ea:de:b0:df:ff:38:59:
                    95:39:3a:3b:6d:9b:88:79:de:05:6b:85:a8:f2:48:
                    82:3b:31:51:77:7c:e7:2a:a2:e7:af:6d:59:49:c8:
                    ed:18:8f:90:62:02:98:b4:19:6b:6f:36:07:1c:b9:
                    c0:f9:05:12:3f:68:6d:45:56:54:05:78:14:9c:53:
                    10:5e:6c:06:c6:bc:e8:6e:8d:1f:27:d1:d1:6e:ff:
                    34:5f:e0:41:68:d6:3a:01:37:3f:c0:b3:6f:17:c2:
                    6e:ed:d6:82:a1:b8:9b:26:57:82:0e:d8:a5:f9:e9:
                    f0:42:c3:cc:80:dc:8f:8e:39:8d:f0:5f:8a:b7:98:
                    4f:10:be:20:3b:9e:c3:41:10:a5:02:29:cc:2b:56:
                    d7:80:e0:7e:1d:bb:bb:6d:2b:9b:42:c9:bf:4d:01:
                    fa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:33:48:65:B8:BB:FA:19:6B:EE:2D:7E:CD:A2:B1:AD:E0:D1:0D
            X509v3 Authority Key Identifier:
                keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:94:dc:7c:fe:a3:27:25:14:b0:ab:7a:bb:1f:9d:00:e6:
         ac:60:b2:39:26:28:79:eb:7b:e2:62:ff:0e:81:03:b8:64:05:
         27:85:45:c1:8f:fb:4e:48:89:9a:00:2f:96:f1:6b:ec:02:24:
         13:dc:d5:2d:c4:0c:71:fc:a5:d6:80:87:ba:c3:08:75:b6:15:
         22:43:55:10:de:e4:9c:2e:1b:f7:9b:4a:df:a3:d3:0d:96:2b:
         66:7d:30:e1:68:41:fc:06:c2:55:20:c4:79:4f:87:c0:e2:cf:
         e0:13:8a:76:40:25:f0:9b:91:b9:69:08:74:e4:d8:9c:0c:1d:
         28:cc:0d:fd:6a:4f:a0:be:95:6d:52:72:a8:1f:51:30:68:5a:
         6b:ec:80:a1:a4:55:fe:29:d2:e1:2b:68:ac:c8:cf:02:24:d5:
         04:0d:30:2e:b2:fb:38:2a:f4:d8:c4:24:ce:ad:fa:ea:2f:09:
         c9:90:8b:55:8a:7c:3b:da:13:ef:8f:b9:cd:8f:1d:57:3e:49:
         03:bb:b2:70:de:12:52:18:85:c6:27:a3:64:0d:42:b0:11:6a:
         04:c9:69:d7:a8:48:d4:9a:51:ef:b1:e4:3a:84:80:ad:99:4b:
         06:9c:77:76:7d:8c:32:44:bc:24:f2:6f:fe:54:4d:14:ca:f6:
         83:89:74:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:44 2025 by rpki-client