Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File:                     5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier:          +D8xJ3AncdgLFGRkGOo7bifGgINJgSgb7sgOpa+42Gk=
Subject key identifier:   39:25:E3:91:7D:52:13:D7:83:CC:A2:BA:39:99:84:44:E8:58:9A:5C
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer:       /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial:       01984A41234D1419474B95FD7479224F0C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 05:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:39 +0000
Files and hashes:         1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: OVv1p2KJ2EyNYIRdpX6f3VUWQs9n1iFYeYHOlER2enE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:23:4d:14:19:47:4b:95:fd:74:79:22:4f:0c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
        Validity
            Not Before: Jul 27 05:00:39 2025 GMT
            Not After : Jul 28 05:00:39 2025 GMT
        Subject: CN=3925e3917d5213d783cca2ba39998444e8589a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:fe:89:33:15:30:d5:d2:10:5d:48:49:b5:
                    50:88:9a:b9:66:5d:5e:20:74:e8:53:5c:a5:76:85:
                    e0:a2:24:35:da:82:04:c6:f8:87:19:e6:0b:24:e8:
                    6a:c1:c5:9e:4e:cc:1d:d6:e1:7a:38:9a:c2:3a:0e:
                    30:50:3e:7c:0d:4b:1a:e8:d1:53:23:81:46:25:b2:
                    3b:50:53:18:17:6f:af:42:eb:1b:57:c7:3c:07:f0:
                    7e:34:33:79:31:f7:ee:c2:77:96:2b:8b:70:cf:c7:
                    de:0e:be:ae:9c:72:d6:e0:7b:d4:ef:df:0c:6f:5f:
                    4c:29:c0:c4:2d:47:ca:9d:d9:d2:b7:af:6a:1b:3f:
                    08:5e:9e:9d:fe:c9:b9:e1:e5:8b:81:d0:a0:9a:5e:
                    6b:36:29:cb:93:62:4c:97:d4:e9:7f:f4:16:46:47:
                    b8:91:04:c6:95:0e:e2:81:4d:be:00:00:1e:20:26:
                    53:af:e5:25:48:55:58:e7:92:5e:25:cb:29:89:0e:
                    27:bb:b0:16:47:39:31:cf:4d:13:be:9a:aa:7c:b6:
                    fd:70:f0:3b:f3:32:06:8c:ce:71:8c:40:54:ac:5c:
                    46:f7:73:85:6d:29:a2:c9:31:d5:84:c9:28:cf:cc:
                    54:47:f6:a2:b0:a5:b0:a2:f7:cf:8e:29:b8:96:21:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:E3:91:7D:52:13:D7:83:CC:A2:BA:39:99:84:44:E8:58:9A:5C
            X509v3 Authority Key Identifier:
                keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:f7:c6:49:3a:89:17:9d:a5:ef:8f:77:08:b8:67:e2:04:
         bf:7b:99:4c:6e:9f:6f:51:22:ec:84:88:be:3b:be:43:49:34:
         81:50:8b:32:40:24:83:b3:27:1c:07:ed:c9:f2:d5:b4:3e:59:
         b5:bc:cb:5d:b1:d5:9f:1f:f4:bd:d8:2d:a3:bc:5d:63:1d:61:
         33:13:9e:8c:78:a2:1d:fe:ce:29:3e:21:fa:09:51:e5:8b:b6:
         12:2c:1d:09:79:d0:b6:57:3c:0e:f8:46:af:6c:41:db:aa:c6:
         02:cb:fe:aa:1a:70:f0:50:56:58:ec:c3:65:e1:e7:a1:19:b8:
         52:71:3a:ef:e5:e7:bc:a9:07:25:32:fc:47:90:e7:f2:e5:50:
         6f:6d:8d:ce:c0:52:2e:10:b2:c6:47:6b:f7:20:f0:d6:06:6c:
         fd:b6:1e:d7:1e:19:9d:d1:df:3f:0b:5a:d5:a9:d3:bd:fc:6b:
         b8:52:b9:5b:4d:44:b6:bf:68:56:66:dc:45:16:28:a6:f8:bf:
         97:51:8d:dc:4d:f7:a1:3d:ba:c2:ba:d5:40:b5:cb:db:dc:fe:
         f9:e6:74:5d:af:f3:71:1f:15:f2:18:4e:02:bb:27:2e:ac:0d:
         30:0a:5d:d8:81:c4:85:6f:01:32:79:42:fa:fa:a4:98:ad:c1:
         fe:a3:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:51 2025 by rpki-client