Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File:                     AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier:          uEuZtZ8ONHKoetRLlG/qkF95U3V7qqKTITvdQgSP6zE=
Subject key identifier:   E1:DC:26:D7:F6:DC:59:34:59:2B:96:37:4F:A1:8D:B6:85:2A:0E:AD
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer:       /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial:       019848C0B0F5CE413C81F763BB12B795C882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 22:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:44 +0000
Files and hashes:         1: 0KFOTw8mw8rqvR73lDvTvz4eLlM.roa (hash: czZq6CrDBuBW60D89viYE/HEQ3Elp6ceJu/itDlsmLQ=)
                          2: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (hash: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=)
                          3: 7fvFmCf70OoyCtjW6q-YAjjiptE.roa (hash: lD6p2V3Fh7qOAiBluHoM70XX68qSFbEeobI0lYUOj4E=)
                          4: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: ewvPu2mtHueWUfz+7bQlRiwo8P8oY3BLLyXVKid16Wo=)
                          5: XXc1R4QzqDrW8SviK6xRNkQ-hUM.roa (hash: YZxuonbhRtd70cdMZUvtG4tx6j8PhsH2pz0J9ByQ1UQ=)
                          6: mVS8rlA27Rm5BH1YZmHsYliJgHk.roa (hash: kSobMvLQWQPPJ+5wYRzt2RMBbz/GSTGKNOrc7qdwFJQ=)
                          7: svn5qGrzwkwprTn6parcyTvhbAo.roa (hash: /W0ZX7Qy3yFb8g6EosJAqdHBnY5DD0AAIXPV5XPQQ5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:b0:f5:ce:41:3c:81:f7:63:bb:12:b7:95:c8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
        Validity
            Not Before: Jul 26 22:00:44 2025 GMT
            Not After : Jul 27 22:00:44 2025 GMT
        Subject: CN=e1dc26d7f6dc5934592b96374fa18db6852a0ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:9d:45:b7:dd:e6:ec:1b:c3:01:6f:81:41:
                    e6:10:d6:ce:8e:98:f5:0e:02:83:e8:bf:c8:4f:af:
                    e5:7d:64:f1:3a:31:09:f9:df:08:e7:fc:f4:e3:a2:
                    13:c3:b0:55:24:8a:b1:b0:2e:c3:2f:65:9a:77:78:
                    14:bd:6f:e7:c3:19:6c:4c:0b:78:0d:f9:c4:9a:89:
                    e6:cd:ce:08:09:fd:c0:bd:3a:95:55:1d:2a:27:06:
                    fb:33:82:96:b9:7e:99:c2:e9:54:33:92:a3:3c:b8:
                    6c:8e:e6:27:79:c3:56:0b:26:49:a7:1e:08:66:34:
                    06:b4:05:7a:39:c1:ff:0f:fb:cc:31:22:5f:15:7b:
                    65:68:dd:0a:18:d6:82:f2:14:bc:2d:49:a2:6d:cb:
                    ee:35:e9:cf:a5:1b:11:d0:09:ad:3f:ae:7f:36:be:
                    8c:86:02:1d:07:b7:97:4c:c7:be:34:da:a1:2a:9b:
                    fc:e6:13:67:6f:31:ad:89:2b:62:fb:67:1d:9b:77:
                    70:f0:28:32:7f:49:e5:30:9f:15:7f:b2:b8:01:9b:
                    21:e5:a6:1b:a7:17:65:75:7d:3e:26:e1:83:60:aa:
                    c1:2c:31:cd:6b:5b:ba:1d:ea:74:e5:40:2e:55:1a:
                    c6:ee:f1:1a:7f:f9:18:80:d8:7e:12:9c:b1:9c:75:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:26:D7:F6:DC:59:34:59:2B:96:37:4F:A1:8D:B6:85:2A:0E:AD
            X509v3 Authority Key Identifier:
                keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:bc:73:e8:28:4e:68:39:3f:78:8b:2f:2f:64:1a:06:2e:
         75:f4:7d:17:15:b0:bd:52:1b:f4:77:ee:35:76:97:5e:58:f9:
         66:92:6f:8f:10:6d:e6:ad:f7:d4:10:fc:a8:15:cb:c8:a3:f0:
         ff:b8:25:51:5b:e7:5a:8b:68:e5:17:7e:37:97:f0:e4:7c:3c:
         d5:dc:71:45:ff:7b:b5:76:ae:d9:86:96:3b:dc:43:d2:50:c7:
         6b:30:4b:c9:55:fe:ee:a5:99:03:ee:d4:02:86:45:60:84:31:
         55:6a:6a:4a:1f:14:9a:62:ac:25:41:85:12:1a:4d:ae:de:b5:
         d4:7f:46:86:fd:9a:0e:cb:11:8d:cd:a5:d0:ae:5e:87:fb:ac:
         15:70:c7:40:ed:fd:e9:d3:0b:a6:11:01:d1:e5:ef:63:af:5b:
         d5:70:08:0f:0a:86:1a:76:bb:3d:7d:0e:20:6f:e1:7f:92:c8:
         8f:9c:a4:0c:cb:bb:30:a3:35:3b:8a:49:38:e6:71:db:b7:5c:
         12:15:06:82:b6:43:bb:10:ba:28:1a:69:67:98:ff:45:51:13:
         e7:d5:da:99:02:7f:4b:c0:43:7d:f2:21:2f:4a:df:b3:c9:2f:
         44:96:a0:4f:4f:23:37:5e:54:64:3b:40:ba:58:cd:41:f9:a9:
         b5:3e:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:09 2025 by rpki-client