Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File:                     T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier:          6En9Vrxly4qUnvjFO3+ZoR9t53z1zDb7uNc8/oxeTko=
Subject key identifier:   FC:5A:1B:D9:0B:F9:F8:88:24:31:B8:E6:F7:78:12:1C:B0:D2:64:9D
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer:       /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial:       0198477767EC9FA4FD53EE77469149FC4D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 16:01:04 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:04 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:04 +0000
Files and hashes:         1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: 2NcBfYr3abEWVkOOG/rrgv0iuP2uyf1G+ab+gPrby7c=)
                          2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:67:ec:9f:a4:fd:53:ee:77:46:91:49:fc:4d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
        Validity
            Not Before: Jul 26 16:01:04 2025 GMT
            Not After : Jul 27 16:01:04 2025 GMT
        Subject: CN=fc5a1bd90bf9f8882431b8e6f778121cb0d2649d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:92:ad:37:b9:bb:65:91:ee:e7:30:33:c3:
                    91:84:d1:16:d0:ea:a3:89:68:6e:ff:5d:a4:41:9a:
                    1e:ef:8d:0b:46:b2:ca:3d:b1:a4:cc:a9:d1:82:8a:
                    e2:5c:50:ca:93:9b:7a:95:87:ff:c2:e2:a7:f0:b0:
                    76:cf:87:bc:a6:ca:22:19:4c:84:6a:e7:45:81:f3:
                    56:e6:18:f3:89:a8:26:cb:04:e2:4c:ce:48:85:30:
                    08:51:8e:6f:5f:2d:4c:9c:20:24:f0:4c:ae:a2:21:
                    13:c2:c0:e3:80:8e:6e:e3:7a:46:0c:8d:59:ac:1d:
                    8d:c1:25:14:e1:a9:7c:2d:56:e0:61:b5:3d:fd:c0:
                    61:53:82:c8:0f:92:22:d7:0c:28:23:23:06:93:9f:
                    bb:d6:7e:18:7d:92:d5:52:a4:14:47:79:e0:81:dc:
                    a5:1a:2d:a8:23:f3:2f:2a:57:67:02:f6:0a:79:2a:
                    59:ad:24:98:7f:23:cf:ed:60:14:57:fc:0a:c1:ba:
                    f6:3c:be:c5:13:67:9f:ba:95:1f:1c:79:3c:31:76:
                    34:65:d9:63:a9:c6:6b:02:48:b9:20:81:1f:02:74:
                    76:62:10:a5:84:1b:f5:1c:0b:a8:f4:c0:c4:e6:bc:
                    db:df:cb:fd:b5:38:6e:ff:af:21:29:59:66:de:e1:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:1B:D9:0B:F9:F8:88:24:31:B8:E6:F7:78:12:1C:B0:D2:64:9D
            X509v3 Authority Key Identifier:
                keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:e5:32:92:f1:ca:a2:d4:3d:2c:71:11:b4:1a:e1:29:f6:
         7c:49:f5:79:bd:81:a9:5d:d3:86:e8:58:43:05:ba:c3:9e:69:
         48:42:1d:7d:e4:f8:19:dc:e1:6b:81:db:53:07:df:93:cb:38:
         53:1b:18:1a:6a:0e:ba:f5:72:ae:de:c9:61:df:07:9a:42:fa:
         ad:38:ab:97:0e:fa:cf:2b:c4:a0:4b:fe:a3:4c:49:2e:12:17:
         68:20:ed:0c:90:b4:f6:1b:58:0c:16:92:18:e8:e4:42:b1:40:
         8b:2a:59:59:6b:32:ee:22:26:f0:da:a1:27:a1:c9:eb:32:19:
         88:ca:6f:bc:d1:11:a3:b8:77:25:87:dd:0f:a5:f5:df:ed:09:
         28:7c:9c:9a:a6:df:db:83:fb:8e:96:cd:b8:21:e8:19:95:25:
         73:92:11:c8:17:91:74:71:8d:ba:dc:8c:27:bf:d2:cf:b3:fa:
         f2:7a:a7:bf:bb:af:e1:3c:bd:50:0c:c9:c2:3e:4c:0d:e1:23:
         bc:fa:21:0b:dd:54:8f:c9:89:65:db:f9:68:44:f2:f8:55:a5:
         d9:89:55:91:c0:7e:df:44:92:a5:ca:f0:26:8a:35:f8:25:e7:
         18:1c:3a:df:3c:0b:66:d9:bf:2d:65:78:81:28:6b:85:be:c6:
         87:25:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:56:47 2025 by rpki-client