Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File:                     B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier:          NAioHxPNzBZcQgDwV6WXFL4LOfmOW7JuWvO1Fdg0UDE=
Subject key identifier:   DB:48:75:C1:06:DD:55:BB:4E:78:D4:38:E8:D1:55:17:A7:01:A6:9D
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       01991E0B19CB86FF72C0D5C276556E7BA324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number:          12DF
Signing time:             Sat 06 Sep 2025 08:01:07 +0000
Manifest this update:     Sat 06 Sep 2025 08:01:07 +0000
Manifest next update:     Sun 07 Sep 2025 08:01:07 +0000
Files and hashes:         1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: YmxT07WZC5q8tHyU6nqMCTW9foNRLeZ12yejQbRwXUI=)
                          2: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (hash: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=)
                          3: US2iZbOrWCL2cayiZwxakKtP05c.roa (hash: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=)
                          4: aobLXTmPd_6Ukp1ManNdqX-3DQA.roa (hash: pfQSQLiXOyjEu0hp6NuVLx8Gd5m02zdqAnm2pyHFZ88=)
                          5: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (hash: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=)
                          6: oqk7vyXZrC-D5_5cpZHpWjEfCJw.roa (hash: Iyl0VEv5gWpgZiq6xlIMrOhBw5qUY0Z75JnVHakz9ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:0b:19:cb:86:ff:72:c0:d5:c2:76:55:6e:7b:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Sep  6 08:01:07 2025 GMT
            Not After : Sep  7 08:01:07 2025 GMT
        Subject: CN=db4875c106dd55bb4e78d438e8d15517a701a69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:0c:d0:51:5a:74:38:22:66:ae:35:29:59:
                    00:59:4e:2b:0c:0c:a1:b3:17:2a:3b:15:09:be:11:
                    44:b2:a7:81:67:d3:97:e3:6d:eb:5c:3f:47:4d:b5:
                    0f:66:39:c5:85:63:99:e2:d5:a5:4a:6e:3b:a0:31:
                    97:06:43:37:db:a0:3e:e5:2b:5f:b3:29:f5:f3:43:
                    be:ef:2b:e1:ae:c7:d9:9f:a2:6d:2c:16:e5:e0:38:
                    f2:57:96:b0:2b:55:de:59:a7:95:67:ea:f4:69:ec:
                    fe:1c:90:0c:5e:29:97:b2:80:9d:d8:90:cb:4a:9e:
                    6c:6e:bb:a7:8b:8d:e8:a8:52:f1:b1:c1:68:fb:b3:
                    5f:ea:91:7a:f8:c2:ec:3c:94:1d:5d:0a:4c:02:71:
                    80:7c:93:16:41:21:cf:9c:a4:49:d4:b8:8e:47:e7:
                    a3:b2:aa:c9:25:88:f1:35:00:5d:17:f4:6e:bb:13:
                    5f:5f:59:ae:f5:0a:1a:0f:83:b4:ce:64:c7:87:4e:
                    7d:20:ad:44:00:7f:85:c2:95:06:7e:c4:e2:60:c5:
                    6b:f7:5d:e8:a9:d8:2b:79:a2:df:39:6c:84:8e:db:
                    7d:ca:74:4f:70:d3:77:a4:8d:7f:f0:de:ea:08:9a:
                    ff:da:41:fb:9d:92:2d:1b:db:00:be:6d:b1:3d:6e:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:75:C1:06:DD:55:BB:4E:78:D4:38:E8:D1:55:17:A7:01:A6:9D
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:ee:6b:9b:60:dd:81:70:94:35:c5:85:31:d8:95:cf:bd:
         86:c5:45:96:14:be:27:c2:f6:34:e2:7c:98:7f:b5:d2:f8:84:
         ce:2d:4b:52:2e:37:57:9f:57:11:ec:3e:2d:03:d7:69:45:a6:
         e2:5c:83:78:58:7c:a2:a6:53:67:54:d3:22:eb:fc:8b:15:ce:
         55:f9:85:e3:88:aa:26:0f:a4:3e:d0:65:6d:03:cd:1a:1d:b9:
         16:ba:4a:d1:be:f5:23:a0:f5:90:67:10:b4:64:d7:22:08:50:
         9a:ab:4b:04:81:bd:6f:88:9d:ec:24:62:f1:d4:d5:fd:aa:67:
         2b:aa:c1:bd:0f:7c:7e:b3:7c:2a:ad:a4:d6:05:94:54:fd:93:
         89:78:bc:9e:08:6f:fe:fe:6c:d9:5d:12:0c:d0:90:64:24:6f:
         91:d8:b8:30:ae:3e:a6:e9:7f:79:df:1d:57:97:28:2a:a3:61:
         1f:d4:d9:03:a4:68:5e:54:17:8f:b2:e0:b9:e8:be:bd:e3:24:
         40:3a:30:c3:c8:c1:ef:26:92:59:e5:8e:3d:8b:12:16:ab:c2:
         f2:3b:2a:a5:83:96:65:11:86:4c:84:a7:5c:ab:b3:05:a6:4a:
         3e:56:20:74:d6:45:e0:9c:a5:78:6b:87:4a:44:a0:77:86:04:
         fd:f3:4c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:34 2025 by rpki-client