Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File:                     5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier:          iAg54i7JV0ofEWNxeXt35kv2jVp6g4hklL6DslH7nOo=
Subject key identifier:   7B:10:94:A2:D9:DD:38:AB:39:FD:65:E5:92:E2:07:3E:37:FC:7F:11
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer:       /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial:       01984AAE986ED5D540992861425904668B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number:          031F
Signing time:             Sun 27 Jul 2025 07:00:12 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:12 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:12 +0000
Files and hashes:         1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: FinG3RkNzBaOM+hcq/Dx91C67Ft/y51zkF1vWkOcyOw=)
                          2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:98:6e:d5:d5:40:99:28:61:42:59:04:66:8b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
        Validity
            Not Before: Jul 27 07:00:12 2025 GMT
            Not After : Jul 28 07:00:12 2025 GMT
        Subject: CN=7b1094a2d9dd38ab39fd65e592e2073e37fc7f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:b5:49:f4:cc:3b:47:84:22:62:6d:f9:1a:
                    6c:e1:09:6e:73:35:af:e6:85:70:16:28:76:f5:bf:
                    09:f3:8f:bf:76:a7:c7:ff:d7:cc:50:5b:9b:9f:5a:
                    61:74:0f:d6:e7:b3:54:17:e9:04:b4:36:6f:00:97:
                    57:65:d6:73:c9:1b:31:e2:94:a1:3a:e1:d7:b9:53:
                    7f:fc:2b:ca:12:69:8d:bc:51:5b:9b:25:f1:9f:8f:
                    01:5d:78:9d:94:22:30:d7:e6:fb:5b:96:36:5a:57:
                    b8:c8:71:e4:65:ed:3b:2c:84:21:25:bf:ac:58:d3:
                    d0:9e:ad:8c:a9:24:b5:5b:99:93:90:6e:85:1b:a6:
                    40:08:91:06:ac:96:27:78:08:2a:08:8e:80:65:c8:
                    62:df:bb:a3:7a:0f:f9:4a:e9:f6:fc:83:5a:f7:18:
                    3f:ca:5c:25:2f:a6:19:cf:05:0f:cb:41:91:35:2a:
                    f5:e1:d0:9f:30:00:d5:53:e5:b3:9a:0f:76:a5:05:
                    6b:95:f2:51:19:dd:b4:20:23:ad:a0:bb:aa:ab:b2:
                    ee:de:35:ef:d8:95:7d:89:bd:89:71:0d:a7:28:33:
                    23:39:c2:0e:fd:06:6e:d2:6b:1d:66:9a:09:5b:3a:
                    53:aa:08:91:79:ee:e7:c2:38:08:39:84:fc:a0:48:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:10:94:A2:D9:DD:38:AB:39:FD:65:E5:92:E2:07:3E:37:FC:7F:11
            X509v3 Authority Key Identifier:
                keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:b0:68:f0:06:3d:11:3e:41:bf:81:d7:0c:6b:a8:30:71:
         90:60:6a:2b:2d:f5:db:db:a0:24:be:e4:bb:95:ee:56:bd:ef:
         7a:33:8d:86:fe:8a:59:95:f3:55:40:56:ba:aa:47:c1:47:5f:
         40:32:f4:20:6a:d7:37:8a:8e:e1:15:e2:81:b0:bc:0a:f5:02:
         b6:58:e5:dc:04:b0:f8:f8:94:65:a6:fa:f1:4a:a0:0c:41:a5:
         a7:21:d3:f2:12:42:50:e0:8d:17:9a:ba:01:e7:c0:4c:d3:76:
         e3:11:ba:ac:74:c8:9f:ea:ba:ae:b5:a0:e1:ff:e5:3a:71:bc:
         b8:5f:8a:6a:1f:f6:de:cc:e2:d5:12:89:48:00:e6:ea:18:aa:
         c7:26:e2:52:84:fc:4d:a0:0b:aa:97:db:73:a4:2b:64:1a:fb:
         f2:ff:2c:5e:32:18:54:7b:59:c6:54:26:42:d3:e6:43:c4:b7:
         8b:b4:bd:98:bc:f6:29:5d:10:97:d2:1e:68:c0:d1:09:fb:81:
         7d:08:93:97:20:0b:9a:e3:c5:5a:38:68:f2:75:16:13:2a:e5:
         2f:00:dd:02:5f:a7:70:5c:1d:fe:b2:b4:d4:9c:36:9a:c9:62:
         17:5a:0f:82:c1:43:82:a5:9f:f5:fd:bf:05:72:8f:61:c4:24:
         97:da:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:27 2025 by rpki-client