Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File:                     5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier:          Bv8VDHcM8XJ99tIFiixKGTfZ27ByzLhNrUApqqlfZ2o=
Subject key identifier:   EF:40:D3:19:E3:E9:0B:8A:19:1A:68:53:71:21:9B:C3:82:8E:A2:2A
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       01985D917C6C03C0F550E791F2715025D451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number:          0473
Signing time:             Wed 30 Jul 2025 23:01:12 +0000
Manifest this update:     Wed 30 Jul 2025 23:01:12 +0000
Manifest next update:     Thu 31 Jul 2025 23:01:12 +0000
Files and hashes:         1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: FqcuTfXZ04r8fTthmtJzF2FQwnA2altPmAttqbTQ3UI=)
                          2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 23:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5d:91:7c:6c:03:c0:f5:50:e7:91:f2:71:50:25:d4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Jul 30 23:01:12 2025 GMT
            Not After : Jul 31 23:01:12 2025 GMT
        Subject: CN=ef40d319e3e90b8a191a685371219bc3828ea22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:29:c9:3a:e0:7d:93:ad:47:2e:9d:8c:e0:
                    14:29:a3:60:d5:61:ad:0a:93:db:41:c7:2b:ca:1a:
                    d4:7c:35:3a:59:42:cc:da:6d:e2:92:bc:41:ac:64:
                    5f:9f:5c:f3:a3:78:2a:1a:d2:53:ad:21:30:39:d2:
                    c1:f7:f8:e7:93:07:c2:e9:73:7b:e0:04:f6:a1:de:
                    c8:7c:db:99:24:a0:a6:56:0f:d5:23:10:e3:70:dc:
                    e8:c8:88:99:da:07:a4:2d:90:e0:ad:cf:75:b8:20:
                    09:99:5c:ff:2d:e5:63:cf:98:fc:a5:01:fb:88:bd:
                    52:c7:1c:9a:70:82:b6:55:f3:be:48:cb:f4:f3:9b:
                    76:11:ae:a2:3c:40:47:90:4b:b1:c2:e4:59:46:7f:
                    79:98:91:33:6a:87:70:4a:f1:a8:e7:e6:ff:9b:9e:
                    f5:10:68:b5:f7:93:7d:99:0b:ef:bc:4a:eb:21:9a:
                    2b:5a:c4:5c:ab:2c:d5:6d:d5:53:4b:57:8d:cd:cd:
                    40:41:74:90:8d:25:e0:ba:42:d3:e7:01:74:1d:ff:
                    22:97:2e:95:28:12:fa:54:39:d5:ab:22:ac:ae:6d:
                    78:31:b4:68:48:8b:31:32:0d:b1:04:cc:e6:d7:0b:
                    6e:bd:3b:f6:03:8a:16:3d:0b:e9:44:db:c1:02:9c:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:D3:19:E3:E9:0B:8A:19:1A:68:53:71:21:9B:C3:82:8E:A2:2A
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:23:3f:28:bf:49:2b:97:e6:5b:5f:42:0e:8b:bc:8d:f3:c8:
         16:2b:b0:a0:0f:b2:3c:98:ff:4e:f5:62:28:dd:7b:b1:50:f7:
         9d:3a:7a:86:46:21:d4:ac:39:80:52:46:c2:cc:4a:fd:c4:25:
         45:16:63:d9:01:16:06:a2:1b:38:5a:06:c9:b0:38:43:4a:38:
         c6:a1:52:63:89:f8:2c:01:05:89:40:70:e5:dd:86:f6:f6:c9:
         2a:13:f2:e5:33:cf:48:c3:ad:9a:59:ee:a4:fc:ae:56:b8:bb:
         7b:90:bb:e5:0d:e4:46:05:56:78:51:5f:72:02:a9:3f:a4:33:
         e2:f8:a9:f8:04:57:d6:75:92:23:c3:0e:01:d5:71:15:4f:49:
         ab:b8:cc:49:1d:1e:24:ca:f4:d1:b8:9f:02:b4:df:3a:71:07:
         31:e7:01:ad:8b:b0:0a:ba:97:04:d4:45:4b:5b:0b:2e:12:bd:
         b6:bb:5f:99:c5:f2:ae:b4:a0:1d:63:4a:63:8f:97:90:a6:15:
         73:7e:eb:05:87:92:43:ee:3b:62:87:6a:c4:72:89:06:7d:d1:
         2a:65:ec:de:5d:9b:71:17:68:f9:d4:51:4d:37:d3:9f:f8:07:
         3a:79:1e:d0:38:df:4c:97:be:ef:a3:75:b9:ce:39:81:57:d9:
         69:a4:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:06:58 2025 by rpki-client