Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          bpzgyUOtDbiqvxvm+E9iIEes4SRFFxxcqjAEBwHTiGk=
Subject key identifier:   E7:8D:7F:BE:AD:59:35:A5:33:D3:D9:D0:C8:68:FE:A6:2B:82:66:F7
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01992BC64FED67B7D2ABB789069E61688845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1235
Signing time:             Tue 09 Sep 2025 00:00:40 +0000
Manifest this update:     Tue 09 Sep 2025 00:00:40 +0000
Manifest next update:     Wed 10 Sep 2025 00:00:40 +0000
Files and hashes:         1: 4GuL2X1E_SLrYnVSCwy_ST-59To.roa (hash: B3Rr2GuOh+LH8USBqPds0Fj4yZirNfUVWUO2icWF5X4=)
                          2: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: ow/UWHz8xX+rYIBjAqavyQe9kn/dvDhIQ1l/aPSGZ2g=)
                          3: Ww3QFrBBPhpwAl7mRt-Itp0xrdE.roa (hash: sog2kRkfH6oiAs3g2Z8X0J+7kikKM+3VZnFZGtK1Mj0=)
                          4: ZrwqrohL9iM53Sm0L32LtVEZ960.roa (hash: 7oEynZg573qxaJLTtHy8ld55GTPVxhY3d4qewpnFsjs=)
                          5: _b0z6FtQr_-kzugLqg8I9Bk1i60.roa (hash: wcGQMCEvkyuwbezuT9c/jFgmFbPZsuwa534V81cijII=)
                          6: s6hj31TUX8s-wcJUAy7yqXkixiY.roa (hash: Mp4dNxXIlsBREcr9I+ebDJif7lStdzMecgBPONGzVs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:c6:4f:ed:67:b7:d2:ab:b7:89:06:9e:61:68:88:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Sep  9 00:00:40 2025 GMT
            Not After : Sep 10 00:00:40 2025 GMT
        Subject: CN=e78d7fbead5935a533d3d9d0c868fea62b8266f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:88:ba:6d:ef:66:e8:39:c6:b6:32:75:d9:
                    c5:6c:5c:47:a4:99:05:6f:14:15:89:a7:53:bc:79:
                    bc:67:dd:39:9a:ac:d0:b7:e0:56:77:f0:c4:df:d1:
                    34:eb:fe:86:ac:25:34:7b:d1:6f:8e:a4:eb:73:72:
                    33:52:e2:b3:e0:a6:28:2e:2a:b7:df:4e:8b:47:ae:
                    37:ba:b1:7b:c6:50:fe:18:33:0d:6a:38:aa:69:6a:
                    36:d6:47:4c:56:48:c8:6b:17:79:c0:94:a8:f9:2f:
                    71:d1:4d:69:27:bd:43:ca:6d:8e:91:15:1c:aa:37:
                    91:d3:14:c9:32:02:d3:4f:1b:28:f9:c4:dd:ca:03:
                    1a:88:49:97:d9:ed:1a:e7:50:b9:74:93:b5:b7:b0:
                    34:38:82:32:d6:09:6e:98:97:49:08:03:c6:48:ac:
                    af:dd:01:cb:83:63:34:dc:da:b1:ff:0e:7c:7b:ff:
                    ac:0b:1d:ee:4a:cc:1d:8a:92:71:3b:ff:d5:09:c7:
                    8e:93:f3:ac:97:16:7b:2a:99:35:a0:44:bd:a8:86:
                    bd:40:eb:7d:74:4f:42:80:a7:93:a8:6b:d4:dd:ad:
                    33:68:d2:5d:aa:37:6e:11:46:85:20:d7:bd:ba:3b:
                    6e:75:05:a9:28:6b:be:12:f2:5e:88:d6:a7:44:d6:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:7F:BE:AD:59:35:A5:33:D3:D9:D0:C8:68:FE:A6:2B:82:66:F7
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9a:6a:1c:42:1f:ba:15:d6:f3:7e:51:ac:d4:82:af:5d:7e:
         9c:ae:a9:7a:0d:fe:78:2d:f0:51:15:a8:74:aa:11:fd:8c:ee:
         05:90:3c:7a:d4:72:ed:8c:a8:55:d7:66:dd:7c:5c:8b:b2:ce:
         d7:82:db:8a:31:10:90:cc:85:fd:cf:64:76:4c:9e:6b:5e:07:
         a9:31:bc:43:23:5b:40:ac:53:c5:ca:28:83:fc:f6:91:55:26:
         7b:0e:39:a5:f2:ff:b1:a6:6b:c9:de:d6:ec:74:26:d4:96:f8:
         47:ec:b1:3d:49:03:0e:8e:84:a8:11:64:38:fb:0e:48:94:15:
         a1:bb:de:3a:44:17:7c:e3:ec:d5:98:24:24:f0:97:9d:33:70:
         63:59:e4:3d:1d:8f:41:ea:d5:0b:4a:44:70:8c:62:d2:89:47:
         8f:55:ea:53:96:a2:c1:0f:19:ae:28:f7:64:3f:e0:bd:18:23:
         ea:9c:f3:0d:c7:2e:13:52:94:eb:6f:b8:0b:63:17:9f:1a:21:
         31:f9:7e:f1:fc:92:02:d4:e7:41:27:b4:5c:35:63:0f:fb:bd:
         b9:bc:25:21:14:3f:10:8f:98:22:67:7c:86:0c:c0:24:a3:bb:
         06:98:9a:0c:3a:b8:4a:6e:83:99:27:ab:e8:0b:ba:fa:9f:d6:
         95:c0:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:22:10 2025 by rpki-client