Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          v5WOdC3seUfLz9YHW5V7AN8J+2zf8dF612FqrZN8pRM=
Subject key identifier:   C0:41:F1:79:00:A0:58:1C:D6:3A:50:19:8F:D0:05:F9:0E:2C:B2:49
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       01984B53C825304C2070DFD4735A349AF85F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 10:00:38 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:38 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:38 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: 5F/5jCLkx2NxKWRXsXumaBy4qXcG94OqoWEj7E+hZAE=)
                          2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:c8:25:30:4c:20:70:df:d4:73:5a:34:9a:f8:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Jul 27 10:00:38 2025 GMT
            Not After : Jul 28 10:00:38 2025 GMT
        Subject: CN=c041f17900a0581cd63a50198fd005f90e2cb249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:b5:6f:ee:6b:a6:df:d1:17:eb:64:f2:e4:
                    38:2a:65:5e:e7:6c:ba:c0:bf:13:45:3d:10:ee:ad:
                    2b:e8:99:36:fc:2f:3b:d4:93:93:c7:79:73:01:f8:
                    c0:2c:99:00:c5:44:53:24:a5:0c:ab:56:d9:b5:39:
                    b6:4f:70:68:1b:e1:75:51:e3:a0:a3:df:59:cb:ad:
                    e2:77:1f:7d:0a:18:6a:7a:b1:79:35:b8:e4:d6:10:
                    fc:27:6b:a9:3a:c7:81:8a:b7:6e:df:5d:88:19:ba:
                    c9:10:80:57:f9:bf:d2:58:04:1c:f4:e8:54:06:2a:
                    f5:cc:c0:d4:12:d8:8f:72:35:7d:a3:9e:88:99:b3:
                    b4:18:31:e1:27:1b:3f:b8:5d:a1:94:05:8b:4d:69:
                    e5:d3:4e:ac:d7:ff:4f:b6:a5:79:d7:13:fe:da:46:
                    1d:15:58:56:ad:81:b7:34:35:79:f2:98:6d:85:8a:
                    45:41:52:00:eb:e4:3e:d2:f8:67:47:48:d8:44:3d:
                    0c:e3:b8:45:a6:fb:d3:78:f5:d8:25:2c:89:d0:35:
                    e3:40:47:18:0c:b7:c2:3d:0d:69:9a:ad:a3:97:22:
                    4e:38:ef:66:40:61:9b:b5:c8:f6:12:71:22:a4:18:
                    13:98:3f:64:36:3f:be:74:c6:cc:2e:83:13:16:90:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:41:F1:79:00:A0:58:1C:D6:3A:50:19:8F:D0:05:F9:0E:2C:B2:49
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:91:cf:73:63:71:d0:f1:79:eb:54:be:d1:56:4e:54:36:
         ce:00:43:44:b2:17:ab:6d:92:42:3b:fd:65:82:cc:04:fb:b3:
         db:f4:8b:8e:72:e3:07:57:1b:55:42:57:91:2f:86:89:89:3f:
         06:eb:f4:ab:3e:d7:8a:6c:9e:97:de:42:e4:ea:fe:db:70:b2:
         92:7e:67:d1:57:23:0a:22:50:92:d3:e9:7a:8e:44:cd:ed:c1:
         59:3c:cc:5b:73:a8:59:5a:e7:eb:5f:1e:26:db:6e:03:23:ef:
         a6:5d:38:65:01:c0:be:ed:6d:e8:83:ad:5c:61:b5:9e:02:bf:
         41:9c:53:65:c5:cc:66:d7:6a:2c:f2:0f:08:c0:96:60:04:13:
         86:ed:aa:0c:2e:c3:00:e0:b2:cf:c1:7a:e5:45:27:c0:72:53:
         f0:33:27:6f:b4:a4:f3:7c:70:4d:ae:18:97:cd:3b:1d:39:29:
         c1:16:0b:90:98:ff:20:c6:a2:85:11:35:66:96:e1:ea:02:5d:
         e5:1c:8e:87:ff:6a:9b:d6:09:7f:51:e6:65:62:40:9a:de:64:
         74:e8:83:a7:e6:64:e4:ab:46:65:4e:91:f4:b3:ec:6d:1f:c3:
         fd:e1:13:29:8f:aa:42:71:58:ee:81:15:89:33:b0:0b:40:99:
         88:13:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:46:19 2025 by rpki-client