Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File:                     5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier:          EFySBIAiw1ByCIS2ivwxqeMCNnBVjBpxz6F065uomsQ=
Subject key identifier:   24:25:80:A9:6F:EA:E6:E5:86:73:0D:03:F9:0D:7F:2C:65:1D:C4:90
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       01983A292922D75DF3B38BCE86946C7FAAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number:          0F50
Signing time:             Thu 24 Jul 2025 02:00:32 +0000
Manifest this update:     Thu 24 Jul 2025 02:00:32 +0000
Manifest next update:     Fri 25 Jul 2025 02:00:32 +0000
Files and hashes:         1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=)
                          2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=)
                          3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: WVjef44iu2RBV41uEZOVpOOWJMJfxypiDO2AqjyZeAc=)
                          4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=)
                          5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=)
                          6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=)
                          7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=)
                          8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=)
                          9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=)
                          10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:29:29:22:d7:5d:f3:b3:8b:ce:86:94:6c:7f:aa:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jul 24 02:00:32 2025 GMT
            Not After : Jul 25 02:00:32 2025 GMT
        Subject: CN=242580a96feae6e586730d03f90d7f2c651dc490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:93:67:83:c7:9a:c1:db:26:b7:0f:e3:4e:
                    26:5e:a8:22:01:af:c7:f9:9d:d1:05:69:4c:51:08:
                    44:16:ee:e2:26:df:79:cc:c1:57:60:20:3a:bb:da:
                    86:18:91:6a:97:81:fa:e2:0f:89:65:14:62:0a:6c:
                    19:38:a4:b7:3a:1e:7d:3a:90:56:f0:45:4f:46:1a:
                    31:3f:3f:06:8e:6a:72:91:7f:17:1b:5b:ad:fb:68:
                    25:4c:3e:ef:3d:22:7a:7a:82:9f:7f:dc:b5:c1:e6:
                    8e:9b:ee:8e:e5:ab:76:90:0c:4d:ed:80:90:f2:bc:
                    23:50:81:85:f7:49:0d:9d:f0:a2:d4:cd:75:43:dc:
                    22:9a:77:74:b4:3e:f2:2f:90:73:1c:1b:cc:64:4d:
                    86:2d:84:36:7f:8b:34:91:02:eb:81:60:c7:12:33:
                    31:ac:e0:1a:bd:2a:40:c7:b2:88:23:df:40:98:37:
                    d9:f8:8f:f4:06:e3:4b:31:8f:c6:c0:ac:93:e2:a6:
                    28:8c:ec:bc:87:d3:11:3f:0a:c9:31:7f:72:17:02:
                    bb:29:00:ff:71:5f:3c:5b:82:cb:8c:9a:40:72:32:
                    18:2e:74:67:46:53:4c:01:6c:d5:22:6e:08:b4:d8:
                    55:55:8f:07:a2:2e:2d:9f:ad:ab:f4:c9:32:0f:f1:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:25:80:A9:6F:EA:E6:E5:86:73:0D:03:F9:0D:7F:2C:65:1D:C4:90
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:db:08:33:5d:db:33:27:28:d5:e4:5a:64:85:c9:0d:d3:42:
         63:d3:a9:78:3c:c1:a8:cb:71:b5:b8:d0:cd:7f:60:54:d7:c3:
         78:13:65:40:db:19:8f:2c:7a:c6:53:f1:eb:fd:81:e9:0a:d0:
         e2:e9:af:67:0e:be:1e:51:9f:d9:21:0f:c7:25:ec:80:63:84:
         dc:fc:ca:30:e8:bc:3a:4e:4e:3c:0f:42:39:83:98:b9:25:15:
         92:b9:08:f9:18:05:e6:f0:c7:e9:d7:9f:f2:42:6c:df:1d:c0:
         0e:22:da:08:df:53:1b:d5:f7:73:5a:a7:ce:5f:b2:ec:30:3a:
         d3:1e:a0:54:87:6e:7b:34:fe:17:8f:37:ee:a1:32:be:94:00:
         47:fa:5f:dc:d1:4a:ce:d9:a9:5b:b1:86:cc:51:2a:16:73:32:
         1c:97:23:bd:2f:eb:73:21:c0:e1:34:b1:38:c2:f0:3c:e1:4f:
         5d:77:f9:0a:be:98:5e:d1:d0:12:9a:1c:95:62:7b:80:c8:07:
         dc:1d:c5:55:84:d1:17:0d:b4:5e:08:d1:04:dd:18:28:88:2d:
         42:f4:11:3b:e0:22:a5:87:4f:ec:8d:5d:95:8f:49:e0:4b:0a:
         2b:62:58:16:37:fd:cb:8d:f9:96:6f:8a:26:7c:b0:a3:89:03:
         8f:ca:14:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:10 2025 by rpki-client