Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File:                     _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier:          d6XHCJ4CX6ceNqxHOy07+nXy8gTfLfJ2Ii9A6657mgw=
Subject key identifier:   7E:C6:8E:E8:B3:85:D9:A7:0B:7C:21:5B:0E:4A:35:7B:AE:D7:26:CE
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer:       /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial:       019848C0561F0A56CA772384E15C69EA63A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number:          0D53
Signing time:             Sat 26 Jul 2025 22:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:21 +0000
Files and hashes:         1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
                          2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: 3vCvbdwNJAumgJObRHodxfJBoyWPM6eMNBaU4FUsr8I=)
                          3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:56:1f:0a:56:ca:77:23:84:e1:5c:69:ea:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
        Validity
            Not Before: Jul 26 22:00:21 2025 GMT
            Not After : Jul 27 22:00:21 2025 GMT
        Subject: CN=7ec68ee8b385d9a70b7c215b0e4a357baed726ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:a8:a5:ae:4f:06:5c:86:56:8a:9e:69:2b:
                    fc:a1:59:4a:ae:b0:e1:7e:16:c1:4d:29:bf:9a:fb:
                    fa:28:85:a3:50:c8:0f:d3:a8:41:e0:9c:68:bb:83:
                    17:1b:eb:83:14:9d:14:fe:00:20:e9:d8:73:5f:17:
                    c5:18:22:99:07:2a:d7:f2:68:cc:ee:eb:c9:73:9f:
                    df:67:0d:33:4d:1b:4a:c0:0c:25:be:16:a7:cd:18:
                    4c:e3:bb:a9:d9:2d:3e:a8:f3:2b:c3:3a:6c:62:af:
                    11:1d:97:7c:92:d0:aa:6c:97:a7:85:9d:91:6f:97:
                    ed:d3:d9:83:8b:6d:ca:2a:09:95:ee:1c:e4:d2:1f:
                    ee:79:cb:f2:99:76:4d:d3:33:89:dc:75:f9:f2:7f:
                    de:f5:41:34:16:57:15:60:37:cb:74:52:70:01:e8:
                    73:1d:3d:60:8e:09:64:13:cb:e9:a0:23:7b:c1:7d:
                    5a:f5:0c:a0:cd:dc:e8:56:16:12:86:07:69:4f:f7:
                    75:2b:bd:40:52:2f:5b:96:76:5f:27:9e:c6:88:6c:
                    67:c9:25:16:8b:f5:33:fc:33:0a:e5:f9:f1:06:5b:
                    fc:9d:13:e2:33:93:d6:23:72:79:5c:18:09:eb:d8:
                    5f:aa:ed:aa:8d:d2:31:1f:8a:a7:bd:17:89:fd:fb:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C6:8E:E8:B3:85:D9:A7:0B:7C:21:5B:0E:4A:35:7B:AE:D7:26:CE
            X509v3 Authority Key Identifier:
                keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:14:44:2a:b4:8a:a1:5f:d5:03:21:6c:35:60:1c:09:d0:
         30:39:b8:28:61:5d:df:04:6f:c1:5f:c0:39:e5:0f:c4:7f:60:
         9b:fb:fc:f8:3b:ac:45:34:1a:a3:4e:96:0b:0c:cf:87:4e:18:
         04:77:e0:ec:7d:fb:87:f5:4f:b6:39:b3:f7:f3:53:ee:23:d6:
         0d:fc:61:37:f9:fe:f9:2e:13:d2:ff:bd:b5:2d:63:03:0c:6b:
         8f:b0:ab:63:aa:09:2c:b3:9c:74:9e:27:8b:71:7c:26:d2:04:
         16:8d:87:f0:3d:b9:4c:48:e2:f6:c2:e9:1a:1c:c8:0c:0b:c5:
         f7:95:97:30:a9:a5:73:cb:21:2f:70:00:79:98:fe:08:13:ac:
         85:77:99:67:68:b0:41:42:0d:0a:8d:74:12:32:e4:65:c9:68:
         83:d5:a3:9c:c9:7a:f7:cf:35:e8:58:da:9b:b1:35:58:59:c7:
         1a:5d:b4:c9:5e:95:25:fb:a2:6c:1b:2f:8a:c3:8d:94:e6:11:
         93:19:cd:cc:23:d3:a2:7b:45:f6:cb:71:98:c0:3a:38:c1:c4:
         6e:4e:f1:c1:44:41:cb:4c:7f:ef:f0:29:60:14:20:89:71:f4:
         db:8c:f6:66:aa:8a:7f:d9:81:d6:76:00:73:28:c9:96:a2:c9:
         6a:9d:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:47:45 2025 by rpki-client