Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          d+ztSLyVq3nd5oR1sOnP5o1zzmVXJsIaf2DAQbI57dY=
Subject key identifier:   49:14:2B:16:5E:62:C9:19:10:4C:AE:03:2E:CF:3E:17:26:D6:EA:59
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       01984AAF066B9C153DD95318AF78AB602748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0ED5
Signing time:             Sun 27 Jul 2025 07:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:41 +0000
Files and hashes:         1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
                          2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
                          3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
                          4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
                          5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
                          6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: GzWfYUut3Uq3P08i/mcrXF0Sn8CWJvqk0R+0y+L3BTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:06:6b:9c:15:3d:d9:53:18:af:78:ab:60:27:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Jul 27 07:00:41 2025 GMT
            Not After : Jul 28 07:00:41 2025 GMT
        Subject: CN=49142b165e62c919104cae032ecf3e1726d6ea59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:db:0b:a1:a7:b6:e7:b9:91:92:de:65:38:
                    ff:69:23:e9:26:6b:5b:c0:91:8d:05:04:86:ca:23:
                    89:34:d9:12:fe:a6:ec:70:29:92:6b:cb:96:c1:64:
                    b6:c0:30:0b:b5:0e:57:88:44:7e:d0:e5:1c:86:39:
                    a5:5c:ea:d2:5a:74:be:68:21:6d:2a:62:c4:1c:4e:
                    4a:f9:08:e9:04:42:bb:12:0d:50:79:fc:c3:55:96:
                    08:30:2f:a0:08:97:fe:a5:0c:4c:21:18:3d:41:e7:
                    8d:4e:1f:9a:0d:5c:28:82:f6:0c:a8:e2:8e:ca:cd:
                    45:42:3b:9d:fe:2a:0f:e8:fd:fd:81:35:2a:de:d0:
                    be:72:b8:85:5c:ec:c3:fc:be:2c:72:34:38:45:2b:
                    9f:2f:cb:06:db:43:4b:5b:9f:c1:c3:9f:d3:ef:b7:
                    08:6c:0e:f3:3d:b9:7e:41:06:ad:96:48:8b:4e:b0:
                    85:fd:f9:76:6d:c5:70:ed:1c:8c:50:d8:4e:f6:94:
                    ac:76:ec:d1:93:ec:6b:49:92:49:90:22:56:be:47:
                    48:a7:33:4b:e2:fa:b4:34:36:dc:09:24:14:e3:9d:
                    40:88:88:71:7c:99:e8:29:f6:9c:80:3b:c3:18:f1:
                    ea:d1:b1:dc:05:d2:39:3f:a8:a7:23:43:59:25:4a:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:2B:16:5E:62:C9:19:10:4C:AE:03:2E:CF:3E:17:26:D6:EA:59
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6a:3f:d4:02:1f:fa:14:ee:c4:7d:8a:40:9b:7b:cf:06:03:
         a2:66:88:e3:25:ae:df:be:c0:e6:72:20:e6:62:8f:6b:21:11:
         a7:03:da:53:b3:bd:9f:b2:bd:98:db:2b:9c:50:3d:0e:d0:2f:
         5e:65:cb:b4:70:f2:7b:16:8b:fc:41:f4:69:1a:fe:55:bc:7a:
         22:a2:2c:fb:86:bf:da:7a:71:40:4e:21:2e:5b:e3:da:7e:6b:
         56:f7:ed:f8:a9:84:f7:01:19:7e:92:c5:22:eb:2d:20:a2:b0:
         86:e4:d5:17:06:9e:a5:31:8e:8a:fe:3e:9c:f9:05:17:58:ed:
         fd:4f:4d:4c:90:43:04:7b:2b:bf:b6:bc:b9:f2:12:0a:00:e0:
         c5:a8:4d:f4:15:f4:ac:b7:a6:34:8e:59:a9:5c:e9:47:c6:d7:
         f7:b1:73:00:1f:28:9a:50:88:c1:77:4d:84:51:e7:bd:e2:98:
         79:65:fe:89:96:bd:19:9d:9e:01:ed:f2:36:52:26:30:fd:d4:
         00:30:b7:c3:95:c6:91:14:23:18:2e:fd:21:94:c3:53:93:13:
         a6:c7:fa:18:3f:9a:8c:f8:72:da:22:cc:de:6e:d7:b4:c0:c2:
         77:c9:4e:fb:6c:c8:ba:1b:77:fd:72:2b:88:9a:2f:2c:de:2f:
         3d:3a:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:38 2025 by rpki-client