Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File:                     V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier:          OpQgMYtABFSNs2WFW6yG4lZJxbRiwGrjTAROAyRQB1w=
Subject key identifier:   67:3A:50:9F:36:36:12:68:C0:66:9D:B5:E3:03:50:61:F3:62:08:77
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer:       /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial:       0198C9ED6B0AFCFFDD79415614D6F5DF19B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number:          148C
Signing time:             Thu 21 Aug 2025 00:00:36 +0000
Manifest this update:     Thu 21 Aug 2025 00:00:36 +0000
Manifest next update:     Fri 22 Aug 2025 00:00:36 +0000
Files and hashes:         1: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (hash: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=)
                          2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: HsxdbPzKEL/GsL+YGM0Agw+zA6bj7d6IezPG6dm4+kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:ed:6b:0a:fc:ff:dd:79:41:56:14:d6:f5:df:19:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
        Validity
            Not Before: Aug 21 00:00:36 2025 GMT
            Not After : Aug 22 00:00:36 2025 GMT
        Subject: CN=673a509f36361268c0669db5e3035061f3620877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:c6:e1:c9:7b:d7:46:aa:29:fb:5c:91:77:
                    1d:c8:a6:cb:6e:3c:2f:9d:58:28:50:38:78:93:ca:
                    2e:c6:80:79:20:c8:64:44:95:25:ae:33:30:46:2b:
                    7d:11:44:6c:64:94:83:d7:bb:9b:e7:4f:59:a5:80:
                    72:0d:cc:71:9f:dd:f2:bb:11:dd:b9:d8:f3:2c:95:
                    1b:1b:d6:41:f6:8f:b8:38:8e:34:9f:17:05:4b:0a:
                    c4:e3:66:18:d0:10:32:86:1e:b3:b5:16:3b:a0:c7:
                    14:3c:42:57:af:a8:ac:56:48:a0:17:d1:e6:af:f2:
                    ba:46:09:17:3c:9e:18:06:a4:0e:1d:2c:9a:cc:5d:
                    6e:1f:8a:93:38:c5:37:f6:e1:bf:d7:e5:74:f1:4b:
                    13:d7:cd:0e:72:37:0b:3e:0d:7c:4d:ad:21:02:95:
                    c0:3c:9f:2b:0e:7e:4d:c9:0a:19:6c:46:30:78:5b:
                    03:91:aa:cb:fe:8e:f1:13:92:c7:76:7e:e3:8c:8d:
                    e7:b8:3a:3e:67:87:6e:13:31:32:e0:03:fd:ef:f0:
                    35:fb:d4:a1:97:79:5a:fa:e8:1b:b8:76:a8:81:f7:
                    c1:0b:80:c9:3c:b8:c2:d4:d8:c8:56:83:ae:ff:95:
                    4a:58:55:d2:d0:ce:88:a9:8a:07:77:28:60:15:82:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3A:50:9F:36:36:12:68:C0:66:9D:B5:E3:03:50:61:F3:62:08:77
            X509v3 Authority Key Identifier:
                keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:b2:4b:11:bc:00:fc:40:a7:8e:dc:39:e8:4e:97:80:5f:
         bb:96:71:5b:6e:f6:b7:56:c7:e3:fa:c1:1c:31:95:fb:0d:50:
         75:f9:05:22:00:3c:ed:54:d7:18:85:2d:05:6d:41:f3:21:12:
         04:20:4e:3c:0b:ac:ab:c5:09:84:11:a7:e7:b2:9e:39:69:37:
         db:37:4e:cf:48:4f:52:e2:be:a0:80:80:73:4a:28:45:dd:a3:
         e6:51:11:cd:c7:54:6b:9d:44:9a:ab:c9:42:22:84:03:a2:28:
         1c:03:8c:7c:fd:33:41:4d:8f:30:fd:e2:df:21:45:5a:d0:29:
         09:52:71:d0:f9:a5:15:91:83:77:8a:57:48:d8:54:0c:10:dc:
         b6:44:6b:57:24:25:d4:bd:7b:bf:b0:49:be:82:b3:b1:1d:b6:
         d9:65:fc:45:cf:bd:7c:b3:81:12:f7:aa:8a:7f:ce:a9:6d:5c:
         c5:84:66:3f:a0:df:2a:ec:ac:62:6d:94:55:53:a7:06:62:de:
         ad:b6:c7:3d:c0:1c:69:af:f6:46:9d:bd:4b:62:b4:5b:a6:14:
         53:d6:5e:ac:fa:87:56:f9:3f:a2:59:62:8a:5f:55:35:fd:1b:
         0a:6b:4b:d7:cf:ec:0f:fa:ab:01:1b:a0:a2:12:fd:05:50:1c:
         72:ad:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 09:38:54 2025 by rpki-client