Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
File:                     siZANRqyGg3HqqFfq1sRCXdxSjw.mft (raw, json)
Hash identifier:          g4LHrTIHSv3i4VPxwnXDweob6cq8vegPVV9xS8QB/fk=
Subject key identifier:   ED:DD:FB:5B:4F:D6:7E:86:E7:F9:F3:D5:CD:21:D6:FE:2B:03:7E:63
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       01984B5476E95C164B22A5883D2B4E8E1906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
Manifest number:          051A
Signing time:             Sun 27 Jul 2025 10:01:23 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:23 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:23 +0000
Files and hashes:         1: 1-j6fBxJdZjlJHBF2ibCNebRhqEM.roa (hash: uIMEk9ImImh0LKeroj/KniV/ALKfCS7zdFrx5Ghb2Ho=)
                          2: 4fc8oS9l6XipIztCEOKX5rStKEs.roa (hash: QJlqsQqRFXjTlCtGRezlM1Uj5b/+zIGZvP1ClcUSG6U=)
                          3: iC_8dMVxXZ00UyStzCwzLDNTo54.roa (hash: XW49T+GyZoj1zoB/seC/GjDOMUSaP8XJ+XDar1fKOFQ=)
                          4: siZANRqyGg3HqqFfq1sRCXdxSjw.crl (hash: FpdHvlCjUp6AAMM7NGSI3cOrrzbaZCcvzl7Fy62svwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:76:e9:5c:16:4b:22:a5:88:3d:2b:4e:8e:19:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Jul 27 10:01:23 2025 GMT
            Not After : Jul 28 10:01:23 2025 GMT
        Subject: CN=edddfb5b4fd67e86e7f9f3d5cd21d6fe2b037e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:e5:93:99:89:97:40:a5:ee:46:38:89:37:
                    d1:56:84:d9:d7:c1:b4:7a:bc:6f:bc:98:cd:20:3e:
                    d4:2b:b0:98:53:f2:ec:52:e7:62:d7:28:18:6c:f0:
                    fe:1a:94:48:52:a3:2c:54:b4:2b:98:1c:b9:f7:81:
                    80:0b:fc:88:45:4a:dd:9c:99:d8:35:1c:aa:60:ad:
                    f7:12:63:53:ff:21:f4:93:98:28:ac:b7:4b:d3:bb:
                    14:7b:89:e7:b5:95:e0:09:d9:61:ab:5a:7f:0f:51:
                    5c:6d:df:d3:3b:83:be:e0:9b:3e:4e:e7:09:e5:df:
                    84:b7:dc:fd:4b:96:78:1f:22:ab:5a:c3:f8:29:d7:
                    50:d0:07:31:44:6f:15:55:cb:3d:a4:a0:b7:e4:0a:
                    62:dd:2e:06:d6:33:bc:fc:f4:21:34:db:65:3f:80:
                    22:aa:fa:c5:8f:3c:75:20:94:3a:62:71:c6:3a:70:
                    bc:8d:05:13:54:ff:ab:ab:68:d2:28:ab:24:54:84:
                    5c:c4:cc:14:40:a5:bc:ec:30:38:01:ef:6d:03:ce:
                    4f:3a:cf:38:29:6c:d0:16:da:8a:dc:86:69:a7:6e:
                    4b:d5:50:79:d7:4e:e6:25:bc:a9:b0:ee:da:f9:21:
                    62:9b:ad:c3:ba:fd:98:97:e0:c9:b3:7d:ed:ed:99:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DD:FB:5B:4F:D6:7E:86:E7:F9:F3:D5:CD:21:D6:FE:2B:03:7E:63
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b9:35:6a:63:69:f1:be:dc:e3:ab:05:6e:58:d4:0e:50:5b:
         68:1e:54:58:02:b9:87:41:c7:99:63:bb:dd:53:13:0f:f4:34:
         dd:6c:b8:ca:de:d3:4f:bf:d9:8d:d8:c4:17:dd:b3:b0:2a:15:
         68:97:15:b2:1d:25:71:13:98:cf:31:7f:fd:36:95:ec:3f:91:
         bb:d8:05:0a:92:ac:86:5b:cb:f0:50:80:a6:08:93:28:48:d6:
         fe:d5:25:c9:0d:0b:fa:53:e5:9e:5d:e1:32:7a:f9:ca:8a:05:
         3d:23:ab:20:a7:89:a1:3e:b0:76:76:a4:87:14:74:03:55:b8:
         cb:c2:79:88:42:ae:44:fe:f3:e3:67:da:27:e6:83:8d:20:ad:
         de:1d:db:17:b7:71:e2:32:ee:6b:f8:97:d2:e5:c6:fb:1d:b5:
         2f:28:0b:26:39:12:20:96:97:1e:0b:15:7c:a8:21:08:3d:ac:
         92:fe:b2:05:19:d5:11:3a:dd:ed:e8:9d:8b:72:3f:7f:c9:fb:
         77:9d:a1:82:f7:b8:5b:b4:8d:45:57:d2:c3:87:fd:e5:0b:68:
         37:66:a1:fb:93:b3:7e:b2:f4:c6:ec:61:88:e0:0a:a9:4b:d9:
         1e:f4:f0:22:74:3c:ba:dc:cb:13:13:0e:f4:03:d7:06:81:41:
         0e:ff:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:56 2025 by rpki-client