Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
File:                     A5Wt2Guvay0G_0H1Um00f3HutBA.mft (raw, json)
Hash identifier:          NmBGm28rUXVIIr5Iyx53hNL6dSB/QPyTVy+XGjQhcLM=
Subject key identifier:   64:83:49:DC:A8:18:E4:D0:07:1C:5A:05:63:80:25:39:CF:4F:23:9D
Authority key identifier: 03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10
Certificate issuer:       /CN=0395add86baf6b2d06ff41f5526d347f71eeb410
Certificate serial:       019849D35CD0CC58F171B76C5DE110487872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
Manifest number:          1593
Signing time:             Sun 27 Jul 2025 03:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:45 +0000
Files and hashes:         1: 1VRLJKU_iS-J5hpp2gSlpHTKJrM.roa (hash: wMqFEiKVsvmfTXQPWnG9RRXDiwBKVCmwH1hZAvPWe5Y=)
                          2: A5Wt2Guvay0G_0H1Um00f3HutBA.crl (hash: IcecFJOyDrUBgRqKPbpmDhZw0zHZ2RIfXbBOVRfYEuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:5c:d0:cc:58:f1:71:b7:6c:5d:e1:10:48:78:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0395add86baf6b2d06ff41f5526d347f71eeb410
        Validity
            Not Before: Jul 27 03:00:45 2025 GMT
            Not After : Jul 28 03:00:45 2025 GMT
        Subject: CN=648349dca818e4d0071c5a0563802539cf4f239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:9e:99:b4:6d:cb:10:42:0d:7b:31:33:2d:
                    79:64:47:6b:fc:a6:f1:37:5c:03:b3:50:46:ea:58:
                    a9:69:e7:c0:aa:4b:eb:02:51:a3:08:46:4b:c9:5c:
                    fb:55:88:e9:6b:73:00:1b:1b:cc:88:1e:09:04:29:
                    43:42:06:44:c2:a9:6a:f9:c9:90:b9:fe:5a:20:b1:
                    cb:37:ca:d0:d9:66:43:85:27:4e:e4:26:45:05:ee:
                    d7:b6:a8:48:fa:24:15:1e:20:f2:9e:9d:e2:73:09:
                    ed:3c:ef:53:2e:60:2f:56:c4:d2:4f:50:a8:37:cb:
                    17:ee:1b:c9:5f:fa:3c:5c:32:b1:f6:64:b9:13:fc:
                    12:87:7e:cf:55:6e:34:70:3e:e3:14:b2:5a:76:42:
                    d6:4a:62:97:63:b2:9d:04:7d:15:05:a6:72:57:2d:
                    29:30:62:7f:13:fb:29:86:c1:cd:39:11:0d:bb:2c:
                    8e:ea:f0:73:1a:98:ad:1a:92:62:87:dc:f1:4a:66:
                    4a:5d:04:f7:28:ad:70:df:c4:f9:1f:9d:6a:1e:1d:
                    b9:7a:29:f4:6b:9c:30:86:1c:cf:da:17:c0:79:a1:
                    7d:b4:3e:a8:db:bc:d8:01:16:e2:7b:45:b6:5c:8c:
                    51:f0:3e:98:77:01:eb:4d:06:7d:f4:bd:49:36:1e:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:49:DC:A8:18:E4:D0:07:1C:5A:05:63:80:25:39:CF:4F:23:9D
            X509v3 Authority Key Identifier:
                keyid:03:95:AD:D8:6B:AF:6B:2D:06:FF:41:F5:52:6D:34:7F:71:EE:B4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5Wt2Guvay0G_0H1Um00f3HutBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fdb398-3fb5-4b6a-a003-cfc4a676d6e0/1/A5Wt2Guvay0G_0H1Um00f3HutBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:66:e1:8f:89:38:13:b1:ca:27:03:fe:09:fd:54:a4:2f:63:
         4a:51:63:8b:5b:d5:5a:dd:ba:3d:e1:3a:27:6f:69:5b:1c:64:
         4d:82:5c:f1:e9:bf:78:cf:cc:cf:f8:4e:9a:4f:b6:44:cc:77:
         b1:f0:4a:ae:79:fa:8d:7d:b4:1a:12:31:04:46:16:81:d7:61:
         aa:a1:83:df:f3:df:26:fc:a3:86:7b:ef:7b:97:81:81:a1:88:
         88:f8:53:fc:88:ca:e5:9a:71:9e:c2:cf:9c:30:39:2e:ab:d7:
         f3:7d:1b:f0:4e:0d:c8:ad:19:f7:48:d4:73:71:cb:70:20:8c:
         c3:47:5f:dc:97:99:47:f3:b2:a3:2c:2e:04:9f:00:8c:65:5b:
         a6:fc:b1:7a:a7:5a:5e:b9:94:0c:dc:b2:6c:7d:92:e5:23:9f:
         f1:b6:0c:84:dc:22:39:a1:c1:30:75:fa:63:31:51:27:62:db:
         c5:b3:66:f3:47:56:b1:69:e8:34:2d:b3:d9:9a:9f:c7:24:f8:
         eb:73:6d:85:80:df:82:65:3a:25:c1:3e:be:36:29:50:85:e6:
         22:1d:f8:72:6d:6d:15:eb:ed:65:92:ff:d4:14:6d:35:40:9b:
         87:2d:1e:5c:43:de:49:c1:fa:f4:c9:30:a9:b7:8d:26:b1:1e:
         3f:c6:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:12 2025 by rpki-client