Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
File:                     5Mhto_SDJGUY02gDS8hhE5BqVaM.mft (raw, json)
Hash identifier:          3trbB5MsrGXtDyT1jUnifEFB6d9PoxBW7m8YlSQ20qs=
Subject key identifier:   7F:5F:BF:B6:BC:89:9E:45:65:B4:90:06:EF:55:11:85:96:C5:A1:32
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Certificate issuer:       /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial:       01991D2F6340BCDDB6729BD7DC81C3DCDCEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
Manifest number:          168A
Signing time:             Sat 06 Sep 2025 04:01:08 +0000
Manifest this update:     Sat 06 Sep 2025 04:01:08 +0000
Manifest next update:     Sun 07 Sep 2025 04:01:08 +0000
Files and hashes:         1: 1-jFYDqV5WrpeNsOHp1PKwlz6vK4.roa (hash: EQ/MDCmgP9HHmI8iGVKEHtzDiwjBn6MBBAbffCHgFus=)
                          2: 17zq4O9ZOaslRNUTl0uAqqE-5Tc.roa (hash: RTTwh+9/JIL63yGwIwupKoi9TOp9B7nI78MQqZ3Mkrw=)
                          3: 5Mhto_SDJGUY02gDS8hhE5BqVaM.crl (hash: IkmAx++UGym6ZURjCofNDPNDJHZsySFlc+i35jKx9N0=)
                          4: 9p-IzvmGjhkwx_53U1cp4ca1edc.roa (hash: JvpWSXkuArwSHg+MuvCHLJG25RIozJ6/xQa40mNhYHs=)
                          5: F3QlTHWWE9WSlkZMiQKc9st1Ou0.roa (hash: jTF2cakx1EB5lTOXhh5DpRR8jEQ1THUMX2LOgGpYREA=)
                          6: GSndTXoc8xWBynRYSOSImTWizWI.roa (hash: m9YHTlxhLFxSnEdQXQV56My1RhJzuPVGWH107hhpQxQ=)
                          7: HIkRjfiBhPQsBq4nmHslEaUbXqU.roa (hash: +cuBUldhMURKr2hQ6hWWWuuFWPU1bf85bijBHZak/qc=)
                          8: X1X7ZkF1pBeBlChTftAa-gl-dqU.roa (hash: Gtx9uFZigYKIeTJhv0iE8fOk8wT5aB+bybyaVuFnzWU=)
                          9: qG5K341kb3h2E7rZoTDgHUpgRn0.roa (hash: sSAY774ANoBJ8I/YSkHzgUMD3dk/efHXAZH71Rv6miI=)
                          10: vTdkc2WjRZI77wKyTBFTapZQVng.roa (hash: eGfs9oYTpFW6sbSe0FWlo+6uWtvtpVaDkVPiueIt1K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1d:2f:63:40:bc:dd:b6:72:9b:d7:dc:81:c3:dc:dc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
        Validity
            Not Before: Sep  6 04:01:08 2025 GMT
            Not After : Sep  7 04:01:08 2025 GMT
        Subject: CN=7f5fbfb6bc899e4565b49006ef55118596c5a132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:df:7b:c5:00:15:6c:db:2b:30:31:20:4a:
                    58:22:9b:fd:c4:a9:e1:2c:52:1b:23:b3:19:8c:3c:
                    70:9c:55:09:8e:b9:9b:a3:23:55:bd:a5:0a:17:28:
                    d9:4c:90:98:0b:01:cd:99:d7:c7:fe:e5:c8:a3:b9:
                    e9:c0:da:07:ce:38:01:bc:63:e6:b8:41:64:14:05:
                    d0:16:12:20:9e:90:65:d3:6a:63:ff:c4:42:7b:25:
                    f9:86:41:b8:d5:2e:e8:33:8e:6f:12:24:7f:7a:cd:
                    f4:6f:7c:06:b0:cb:a0:92:f9:29:df:fe:f0:45:17:
                    c0:84:12:ff:9f:7c:3f:1f:64:17:49:a3:f8:fe:f0:
                    c7:c6:d9:95:45:f3:01:2e:ec:ca:3c:69:a3:71:8d:
                    9d:c1:f8:51:1b:01:c7:82:90:f4:c0:68:6a:fb:6f:
                    91:ed:d1:50:25:18:c6:ee:11:e4:e2:9d:63:c3:65:
                    24:2f:38:a7:d0:16:a3:53:dc:1c:9a:46:07:cd:40:
                    0d:2a:85:cd:b7:f4:06:b2:5f:71:40:83:ca:01:b5:
                    d7:b3:98:65:15:13:17:b5:77:51:af:8e:ac:46:79:
                    13:77:d6:d9:d8:17:29:ce:9b:3a:de:13:8d:01:fb:
                    f6:5a:e8:bb:55:32:ca:c4:39:27:bc:d1:4c:3c:a7:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5F:BF:B6:BC:89:9E:45:65:B4:90:06:EF:55:11:85:96:C5:A1:32
            X509v3 Authority Key Identifier:
                keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7d:e0:ee:d9:b1:22:9a:0c:ac:4d:62:ad:e4:a5:04:ab:f7:
         a2:7d:b2:e7:0a:3c:9e:f2:d5:bd:54:7e:78:0c:7e:d9:37:62:
         74:5a:a3:5b:64:ea:33:07:3d:30:67:18:af:7c:f7:e1:cb:b0:
         55:3a:42:4e:45:bc:56:95:7c:cf:c8:ff:1b:c7:d3:fd:11:25:
         4c:ae:1c:3a:c0:c4:b2:64:79:f8:2f:e1:d2:3f:8a:d5:f6:2a:
         70:50:27:ad:07:1a:7e:41:2e:e2:ce:6c:c1:6e:e8:36:81:e6:
         9d:83:5f:23:a4:a8:f1:af:35:79:2d:0f:8b:42:df:21:ad:91:
         d3:09:10:b7:1b:22:5d:d9:9d:63:94:68:de:93:0d:d6:e1:30:
         bc:48:c3:49:6a:c7:11:d6:90:2c:9c:28:6a:0c:a5:62:7b:2c:
         ac:ff:e4:93:5a:6b:7b:72:80:a0:1b:8a:4b:1b:68:8c:b6:fe:
         b1:1e:11:a1:07:66:f6:37:7f:7f:63:ad:54:26:aa:5b:cb:8d:
         fb:60:0a:0a:1c:34:20:ea:20:8a:19:9a:1c:8e:c8:59:f2:73:
         c3:56:ad:6e:95:62:46:5b:17:10:66:53:4d:ac:ad:94:1c:f3:
         dc:32:b5:53:76:09:38:21:12:f5:8d:8c:b9:7f:5d:68:60:af:
         9e:c4:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:27 2025 by rpki-client