Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          zSoSDlrezWF3XDUHxJXsOsQuE4ROfky0dqxIrI+8lck=
Subject key identifier:   27:9B:E0:3C:CE:82:0C:61:88:33:9E:4B:40:26:8F:53:D5:15:91:D8
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       019845897F4F3E6B71A40863510D3EFDB855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 07:01:35 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:35 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:35 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: 35Ihfi5NyJ9fUSTzSBttbf4xtEgPotKYs83wXzS/dZI=)
                          2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:7f:4f:3e:6b:71:a4:08:63:51:0d:3e:fd:b8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Jul 26 07:01:35 2025 GMT
            Not After : Jul 27 07:01:35 2025 GMT
        Subject: CN=279be03cce820c6188339e4b40268f53d51591d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:6d:72:ec:60:cd:ce:fc:d9:c8:b8:d3:f5:
                    76:8b:bb:46:eb:a0:f2:2b:dc:d5:06:72:22:bc:9e:
                    f4:12:e8:54:a5:da:44:00:f5:c7:46:40:1d:64:09:
                    09:2a:ab:0c:70:6d:a0:67:6f:01:36:08:da:1b:44:
                    9a:0b:97:e4:ad:ca:93:68:c8:77:49:4b:db:82:1b:
                    1d:a2:05:b0:d4:9e:91:28:a0:a8:16:a4:61:ba:21:
                    f4:e1:d6:1d:70:60:8d:f2:bc:6b:a2:b5:d0:83:5d:
                    dc:04:44:a0:ab:8a:28:c0:d8:5e:39:7e:09:dd:e8:
                    71:32:94:7e:f1:50:9b:06:fb:10:fe:37:01:25:c0:
                    83:db:7d:b2:fe:46:35:aa:46:5e:a1:64:07:07:cb:
                    c5:a4:eb:41:ba:3f:b9:7e:df:b0:79:dd:a7:a0:4d:
                    b4:8a:2b:2d:69:71:b8:02:26:ab:69:60:4f:b3:2e:
                    75:ad:14:39:cc:1e:8a:10:9f:e1:1b:25:ed:72:0f:
                    a1:d6:0b:db:26:31:de:fb:f4:a9:43:0f:ae:a0:98:
                    8f:fd:79:0a:ab:e5:d5:d6:f1:c6:72:53:80:21:72:
                    a8:0a:cd:90:64:d9:87:c7:2d:b5:21:80:b3:e3:92:
                    fb:6e:19:63:90:12:bc:0b:dd:e8:68:eb:fd:6f:bc:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9B:E0:3C:CE:82:0C:61:88:33:9E:4B:40:26:8F:53:D5:15:91:D8
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:a5:d3:84:ff:98:3b:3a:bb:ec:e2:04:27:86:98:b3:bd:
         c1:b4:29:01:36:a1:05:f7:7b:40:36:9e:94:bd:c3:24:5b:5a:
         a8:24:9e:27:c7:5d:a9:4c:d3:e2:5b:18:f6:c4:ab:66:53:1a:
         99:cd:8d:11:18:7c:ca:75:23:e1:29:da:ed:ea:d4:3e:5c:3b:
         b3:5f:4f:ac:67:89:5a:61:1a:24:6c:e4:74:84:ad:ad:10:b9:
         b7:db:fe:04:36:94:24:65:44:03:f6:dc:12:b1:71:03:0f:57:
         a3:75:98:61:04:c5:55:df:c6:17:5c:f9:01:23:90:82:b6:22:
         bc:34:53:f2:d9:b8:2d:4c:1f:3c:be:c2:29:fb:eb:ce:26:14:
         aa:7e:01:50:7c:70:34:77:c4:88:25:9a:c8:8f:c3:26:d2:83:
         34:83:21:ec:e1:5d:94:73:ec:41:74:60:fd:8b:3a:ff:e7:a2:
         b4:46:4d:c3:f0:d0:73:37:2e:27:72:bf:ba:85:f4:43:2d:68:
         69:ca:c4:eb:d7:d0:e3:21:8b:9d:72:bf:67:ed:0a:dd:fe:e8:
         d2:05:4d:15:c0:2c:23:01:b5:4b:7f:03:ce:42:6b:98:f6:05:
         9c:d6:33:c4:1e:15:0c:78:2e:e9:3b:9f:4f:73:d9:6a:b5:03:
         52:3f:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:55:25 2025 by rpki-client