Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
File:                     Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json)
Hash identifier:          LiFV5F+8tupcTUQYjurDje5OooIQHcU36Depw7B38ZI=
Subject key identifier:   5A:94:0D:AD:64:F2:FD:65:94:5C:7D:C3:51:BC:13:54:7F:81:50:F8
Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F
Certificate issuer:       /CN=022e76e8994b66613748e021b5f4007f01b54d4f
Certificate serial:       019844E3813A3E95E1F5D4D658315E86FCAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
Manifest number:          06C5
Signing time:             Sat 26 Jul 2025 04:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:17 +0000
Files and hashes:         1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: HY5qepdMfNnBUXxPQimMlbTDXwCdqanyg35CzzRjlOI=)
                          2: F2c_uapmp4EWBvth9YsoExmggYE.roa (hash: F+OHkAH0cbjuGBPEpniF6/AR3wbSHhM+96aLypnHnng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e3:81:3a:3e:95:e1:f5:d4:d6:58:31:5e:86:fc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f
        Validity
            Not Before: Jul 26 04:00:17 2025 GMT
            Not After : Jul 27 04:00:17 2025 GMT
        Subject: CN=5a940dad64f2fd65945c7dc351bc13547f8150f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:6f:f5:f5:1d:b9:e5:2c:17:ba:5c:b8:fe:
                    54:4b:3a:a9:4e:80:dd:e9:49:75:fb:6f:85:c0:14:
                    46:d7:59:63:74:57:c6:d9:32:33:e2:85:7c:78:ed:
                    1c:16:a5:39:de:f8:fc:12:ed:fe:a4:e1:5c:9b:5f:
                    33:3d:e1:82:2a:ba:dd:e6:4f:4c:7f:6a:a9:ae:90:
                    dc:43:69:dd:0f:db:36:4c:75:d0:a6:ca:34:17:92:
                    2c:82:6d:34:9d:06:13:bb:75:8e:6f:6c:a4:5d:02:
                    56:c2:0d:6d:c4:e8:ea:68:0c:9f:21:66:cd:13:e7:
                    ad:6a:ee:51:c4:8b:f1:d1:53:44:c3:b5:3b:4d:a9:
                    fa:0a:ec:84:d4:66:e7:df:13:ef:c1:b6:5c:f9:24:
                    e7:a0:f3:ef:49:f5:b0:68:4e:26:8d:dd:01:5d:b9:
                    4b:11:83:41:43:6c:7e:76:be:58:e8:b7:f9:9a:62:
                    9e:2d:e2:9b:1d:e8:3c:02:af:20:12:1c:ed:e7:98:
                    29:7b:b7:11:9e:b2:3a:9e:5c:29:ba:4b:aa:4e:99:
                    d6:ca:b3:44:84:bc:ba:11:bc:9e:42:37:4f:41:a2:
                    69:23:76:3f:07:ae:43:29:ed:90:63:c8:8c:0a:6c:
                    0a:2f:01:6b:29:a0:a8:f3:e0:5e:b4:33:00:f5:ec:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:0D:AD:64:F2:FD:65:94:5C:7D:C3:51:BC:13:54:7F:81:50:F8
            X509v3 Authority Key Identifier:
                keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:3d:52:e7:a9:e3:fd:c3:c5:5b:d9:3f:bb:0e:9a:ba:f2:
         05:06:c4:d4:39:2a:29:7b:6a:2a:c9:47:5b:75:14:82:2a:23:
         d8:9e:7e:a8:b4:0f:b0:44:6f:80:5b:78:34:df:a4:c5:6f:23:
         64:4f:80:ce:38:2a:2b:63:50:a5:2f:59:28:ea:5c:0d:e8:87:
         44:1c:d9:d1:30:49:e0:d6:f4:f2:f6:34:44:c3:f1:96:d5:15:
         67:b5:c4:e2:3a:a9:58:8e:8f:9a:26:f1:b5:0f:5c:17:f2:af:
         bd:30:2b:a7:ce:e9:f6:31:e1:5b:a9:cc:4f:89:c1:0d:4f:c8:
         ba:e9:a4:df:78:69:b2:48:cb:26:72:bb:35:1d:1a:b2:27:90:
         ef:02:91:b7:0c:16:f2:36:24:63:31:89:55:85:b3:fd:32:25:
         d4:3f:b5:39:0c:5f:8e:fd:65:ec:64:d7:78:92:00:b8:4b:b2:
         05:f8:f3:df:fe:aa:e9:3e:93:10:ae:42:ef:d2:6b:19:9c:ee:
         30:73:34:e9:88:f6:64:b2:90:39:44:f9:ba:4d:52:22:1c:80:
         0c:23:6f:29:59:6a:21:00:c1:a5:78:af:bf:7d:42:53:70:22:
         87:05:f6:13:d2:55:6c:57:d4:fc:e6:7f:2e:21:76:7e:5d:2c:
         da:e5:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:53:41 2025 by rpki-client