Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          PAN3GlXxy8/w2bE/wfZr9hVlOaauDzVEutzXa3u47SE=
Subject key identifier:   E5:AE:6A:16:3D:06:D2:98:2C:2F:40:BF:3B:6C:DA:08:B7:4B:3B:4F
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       019845F63377A877C5C849345737C6565727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          1614
Signing time:             Sat 26 Jul 2025 09:00:19 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:19 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:19 +0000
Files and hashes:         1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=)
                          2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=)
                          3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=)
                          4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: oLkr47fSyI5TqMHpb4WZRw1KsY9YxtOZFYYtQfQm1Z4=)
                          5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:33:77:a8:77:c5:c8:49:34:57:37:c6:56:57:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Jul 26 09:00:19 2025 GMT
            Not After : Jul 27 09:00:19 2025 GMT
        Subject: CN=e5ae6a163d06d2982c2f40bf3b6cda08b74b3b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e7:46:5c:31:5c:ca:a6:5c:f0:93:d4:e2:c7:
                    03:42:ed:6d:8d:c4:4e:9e:64:64:e2:63:39:45:06:
                    50:df:ae:35:7b:4e:e3:d8:2c:75:62:4d:bf:7a:8c:
                    9a:5c:13:74:a9:f5:74:a5:b0:18:61:9e:ed:4e:d3:
                    ad:23:3d:5d:3f:76:72:a8:e4:14:83:61:a7:e0:d8:
                    fb:1a:c8:44:8e:4b:0a:62:74:cb:14:cf:70:bb:a8:
                    b3:54:cd:22:21:ac:34:d4:7c:30:39:bb:bf:95:0a:
                    ac:f6:30:ab:55:b7:d8:bf:ff:51:c9:59:08:2b:1e:
                    a3:dc:8d:ba:8c:d4:5a:b8:32:59:49:62:52:e8:ce:
                    e4:14:b1:5b:41:09:d1:83:62:2e:a6:67:2a:82:85:
                    5c:a5:3f:ca:bb:2a:a7:17:9b:77:5e:be:64:37:f1:
                    0b:03:63:5a:e2:45:19:f6:0c:ff:12:b6:ff:7c:92:
                    5a:ac:24:e9:98:89:8c:a5:96:bd:00:a6:ad:bf:e1:
                    98:80:50:d8:e6:1a:d3:81:16:04:c4:cd:9a:5c:ad:
                    44:bb:4f:d8:95:62:e4:0b:6c:5a:b1:ba:e7:f5:24:
                    31:0a:b4:f6:d5:fa:59:3a:c2:bd:f2:e3:5d:44:70:
                    3e:e8:b3:fc:d5:8e:a8:90:ec:0d:66:d7:ff:4f:52:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:6A:16:3D:06:D2:98:2C:2F:40:BF:3B:6C:DA:08:B7:4B:3B:4F
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:55:bb:b6:01:58:3e:84:12:95:2c:18:0e:2a:91:eb:5d:4d:
         c9:64:06:6e:16:45:e2:84:b2:a3:f8:29:c5:17:10:47:bb:8b:
         0a:21:76:db:ab:c0:39:ce:8e:e0:66:93:4e:f1:a8:98:5a:11:
         0e:82:96:50:2a:88:60:b6:d8:36:d8:57:10:f7:62:f4:5a:c5:
         ce:47:04:5a:74:64:e2:11:d9:4e:cc:e6:5f:44:04:0f:6b:e2:
         51:9d:bb:d0:7b:45:ef:4e:7d:4f:4c:bd:48:87:69:dd:1a:ae:
         d0:7a:15:2a:35:dc:e9:22:5c:bb:22:84:7c:e7:2b:9d:6a:27:
         70:8a:c1:0c:69:9f:bd:32:68:e9:ac:80:43:09:7b:9a:bf:63:
         e9:6f:5a:cd:1c:43:38:e6:9e:28:38:72:1b:4d:52:6d:e5:a0:
         99:6e:ed:07:03:f3:36:01:4b:ab:56:b3:40:6e:29:e8:df:d3:
         e8:e9:86:ba:64:93:03:fa:e7:14:66:fb:d5:3f:b3:4f:82:8e:
         1f:0c:57:7d:74:52:da:17:ea:8b:9f:6f:be:aa:92:bf:db:85:
         28:92:fa:6b:02:db:8c:f7:71:5e:ed:8e:18:68:6d:72:3b:7d:
         81:a8:73:fb:4b:d3:4f:51:61:3d:33:41:cc:39:6e:8b:43:75:
         9e:91:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:13:23 2025 by rpki-client