Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          zdVGz3MF39FyAbvGObuVt+dcd31POX5GhFjAd7N+6RI=
Subject key identifier:   5F:27:FC:2A:E4:DB:AB:DA:72:BC:EE:14:A8:D3:2D:A6:1E:1E:E1:6A
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       01984250C0FF752CE6C098AC689689C49888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0EEC
Signing time:             Fri 25 Jul 2025 16:00:45 +0000
Manifest this update:     Fri 25 Jul 2025 16:00:45 +0000
Manifest next update:     Sat 26 Jul 2025 16:00:45 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: BHS8hwXiIqGxMKGYjh6qYHYd8OOgKDliHebDr20Petk=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:50:c0:ff:75:2c:e6:c0:98:ac:68:96:89:c4:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Jul 25 16:00:45 2025 GMT
            Not After : Jul 26 16:00:45 2025 GMT
        Subject: CN=5f27fc2ae4dbabda72bcee14a8d32da61e1ee16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:ac:6d:50:49:1a:45:23:e0:97:ed:3a:bd:
                    cd:a0:b6:ed:3f:29:9f:e3:33:d3:e8:ad:c8:ec:6e:
                    80:23:38:87:ae:c3:63:0c:ca:27:fa:52:62:b1:5b:
                    90:ff:b6:d7:34:0c:8e:95:af:81:3c:d7:4d:e1:05:
                    13:71:42:92:f8:97:f8:e3:33:b6:54:08:82:d9:cb:
                    c9:2e:43:da:07:e7:b5:56:e3:23:cc:66:67:a2:e4:
                    69:6e:a1:f0:6a:45:af:87:5f:99:02:da:83:15:d5:
                    93:a7:a6:d2:4d:c2:f3:d7:07:97:d0:a5:44:85:61:
                    ac:4c:f2:5a:19:da:7c:d2:ae:56:72:de:96:1c:e8:
                    f9:89:7d:7e:64:3e:d0:02:17:82:35:1f:2f:cf:4b:
                    94:33:bf:01:22:ab:b8:a6:0c:ad:a9:72:79:d1:39:
                    ad:31:73:f0:b5:ff:12:a4:5c:46:25:cc:0b:5e:9d:
                    94:fe:7b:88:21:32:c4:59:6d:4c:0f:81:de:e4:4d:
                    de:c1:5b:36:54:7e:35:fb:c5:1e:ec:63:02:81:51:
                    87:ce:c4:fc:d3:03:1a:48:48:b8:63:03:1d:e3:18:
                    d1:d3:1a:3d:b5:40:4b:31:a6:0e:ce:bb:20:9e:d4:
                    1f:bc:c0:d8:28:3b:90:e7:7f:a5:85:53:75:c9:aa:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:FC:2A:E4:DB:AB:DA:72:BC:EE:14:A8:D3:2D:A6:1E:1E:E1:6A
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:35:75:d9:fb:76:9a:25:af:7f:13:98:4c:0f:10:ec:52:49:
         bb:01:89:4c:0e:70:8f:d8:9c:ba:3a:39:53:50:1e:9b:20:f8:
         bf:bf:cb:c7:9a:52:2c:5f:ef:87:da:59:d3:7f:3d:09:56:db:
         d6:89:f3:61:1a:85:9c:04:ca:2c:41:57:4b:51:c5:90:78:08:
         f8:b8:54:6c:6b:d4:f8:8b:bd:5e:d2:8d:41:80:99:0e:a8:9e:
         78:12:14:7f:f8:1c:18:34:68:15:fe:6b:98:fe:5b:0a:99:e4:
         4a:1f:a2:7d:b1:2f:17:bc:13:0a:9e:cf:14:f8:3f:7f:a3:c1:
         c0:6a:f0:3f:36:3d:9a:dc:cf:a6:c6:a2:c3:08:b8:02:0f:7f:
         d3:08:2b:f3:16:64:4e:98:f8:26:92:45:e0:8e:00:4d:0a:6b:
         8c:f0:12:0a:5d:48:d3:cb:e5:0c:ba:02:f2:a6:a2:48:28:b5:
         0a:e7:9b:a2:a0:c3:89:91:e4:ec:07:2b:79:a8:db:fe:06:b1:
         83:15:b6:15:5a:da:98:9a:ee:81:6c:21:63:a4:82:35:ad:88:
         6c:88:6a:02:a5:4b:38:37:6f:7d:f2:00:44:03:02:ee:ad:b5:
         c2:48:96:ed:21:71:4f:60:22:27:39:35:9c:19:7a:59:ea:79:
         f3:d4:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:08:25 2025 by rpki-client