Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          XBo852uLSZnkuT1TUVdK40zRgSMhaF88Amv4o371ALg=
Subject key identifier:   5F:1F:78:5C:75:39:08:DD:61:13:0A:B9:2B:2B:25:8F:AE:F0:CC:B5
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       0198499BEB1ABC736E57F6CC8A374D2D568B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          1493
Signing time:             Sun 27 Jul 2025 02:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:11 +0000
Files and hashes:         1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=)
                          2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: AonGl0vcieETuYOGHBpoo87Xw400+MddfxX613oTbVg=)
                          3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=)
                          4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:eb:1a:bc:73:6e:57:f6:cc:8a:37:4d:2d:56:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Jul 27 02:00:11 2025 GMT
            Not After : Jul 28 02:00:11 2025 GMT
        Subject: CN=5f1f785c753908dd61130ab92b2b258faef0ccb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:bf:f2:d4:e4:85:18:d6:b9:90:be:e8:f0:
                    d8:f6:db:2b:be:ca:d8:ba:e3:31:6f:b5:38:2f:db:
                    b4:59:69:16:53:0e:71:34:8c:a3:04:aa:50:7b:49:
                    1d:a8:9a:32:fe:2d:93:c7:7c:0e:b2:a1:53:93:27:
                    95:fa:67:01:13:00:d7:28:87:67:8b:86:09:cc:96:
                    1d:29:b8:f4:a8:b8:19:80:38:72:aa:ac:01:29:d9:
                    b3:5b:b0:93:5b:ef:9f:41:42:dc:c1:ff:99:b0:9c:
                    41:dc:f6:f8:4c:be:d0:3e:a7:6e:2f:0f:43:1e:e0:
                    62:ad:b9:06:43:71:a1:97:19:a5:ab:7e:32:7f:8c:
                    94:15:6d:d2:0d:d7:64:2d:cc:03:0c:4a:5b:77:f5:
                    8e:53:fb:1f:f8:b4:78:43:59:51:49:f4:79:d7:5b:
                    09:50:fc:d2:99:61:30:15:37:ef:43:37:cd:c4:8e:
                    ff:aa:3b:b7:82:52:08:cb:ed:82:bc:59:1f:0e:90:
                    41:a4:0e:b6:83:c1:72:a1:13:5d:a7:7e:36:8b:bc:
                    47:a7:de:97:84:48:66:73:b7:2d:67:ff:c1:86:56:
                    f4:82:74:be:be:8c:1d:74:c9:2e:d1:d7:9d:9c:00:
                    e3:e1:b6:e1:e9:07:11:5a:4b:59:c6:4d:b8:ef:9b:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1F:78:5C:75:39:08:DD:61:13:0A:B9:2B:2B:25:8F:AE:F0:CC:B5
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:fd:43:93:97:89:ee:2f:8a:81:0e:6f:ee:24:bb:72:4c:
         8c:c2:ae:8c:b3:01:73:2a:f1:23:2b:3f:6c:51:ac:97:4c:ed:
         aa:89:4c:0c:06:b2:1c:77:c0:99:57:f8:67:d7:d9:19:87:e5:
         34:c8:28:e3:0a:45:51:87:a6:c5:3c:72:64:d8:4b:a3:a9:a7:
         48:9f:ef:60:1a:1d:68:ea:b7:36:c6:55:12:19:b0:b1:03:c4:
         aa:ed:e0:2f:95:7a:05:d0:5f:a3:67:7b:c0:29:78:74:c1:62:
         31:24:1f:2b:79:43:b6:c9:26:8a:c5:25:0e:40:8b:95:3d:f1:
         68:a5:15:0c:92:70:3f:09:df:6e:4a:51:8e:b0:8a:cc:ef:b4:
         61:9f:bd:0d:95:b8:25:50:70:cb:c6:c5:9f:08:1c:a3:ae:5b:
         98:53:e7:8e:95:c6:46:f2:3d:60:bc:12:28:fd:14:6a:20:9d:
         fa:6a:98:2e:26:85:6c:6a:96:33:ae:39:c8:02:d3:b0:c0:43:
         8a:a1:28:1c:f5:1a:82:c6:8f:06:ef:87:03:0f:c6:f2:87:15:
         be:2d:63:f9:bb:27:33:d3:59:18:80:fb:1e:82:58:3f:e3:53:
         bf:ee:77:2d:24:e8:d1:5d:e2:91:40:cd:44:e3:1d:e6:83:e1:
         94:20:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:09 2025 by rpki-client