Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          tcjboZl3ZoTsojXQWQjD1jNlz3LCdd9uXyCfOJsFpIk=
Subject key identifier:   54:BD:53:3A:E9:11:42:0C:BC:AB:65:67:36:6A:00:59:32:EF:31:25
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       01983E3D2B378A66D0FE69A2AB441659E1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          1602
Signing time:             Thu 24 Jul 2025 21:00:52 +0000
Manifest this update:     Thu 24 Jul 2025 21:00:52 +0000
Manifest next update:     Fri 25 Jul 2025 21:00:52 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: ky5rlNzai+Jw7EgT2PA3P+/mRe++qjDN33QbVoYBMWc=)
                          2: 6DW1a6m05hh-gzCp-p2Th_jROrQ.roa (hash: DVwz9dCE2VA6PR9eWz/ZL0YuKXs4l+SQG40TAFfVI+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:3d:2b:37:8a:66:d0:fe:69:a2:ab:44:16:59:e1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: Jul 24 21:00:52 2025 GMT
            Not After : Jul 25 21:00:52 2025 GMT
        Subject: CN=54bd533ae911420cbcab6567366a005932ef3125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:e8:1f:51:cc:78:1f:0f:cf:1b:b5:f7:ff:
                    63:84:26:bb:2d:8c:19:8c:44:7d:cb:3b:e2:68:91:
                    53:70:ce:70:c0:8e:5f:28:a1:98:ff:16:b2:0d:5e:
                    a4:bd:3a:a9:b0:a4:7b:86:0a:f6:0c:6a:5e:ab:09:
                    11:06:6b:46:81:2a:ed:68:66:4b:5a:37:42:be:da:
                    8c:d6:9f:63:06:e1:c5:ce:54:0a:17:6f:76:2b:5f:
                    3a:4e:ba:1b:56:ec:a5:13:6b:f1:c3:12:1f:96:99:
                    29:a0:d9:51:53:9f:f4:99:48:4a:c6:ec:45:aa:2c:
                    a6:51:17:ed:ca:e0:a3:26:80:8a:97:0a:e7:e1:1e:
                    2d:ab:40:a4:80:98:9b:6f:35:50:18:7b:37:fb:af:
                    a7:16:a6:5c:7b:99:ee:17:39:ab:67:47:41:a8:aa:
                    2b:54:96:b8:93:a8:f8:26:2e:52:37:4d:5d:98:96:
                    5f:4a:c3:33:37:2f:ed:66:75:d3:26:05:39:25:c3:
                    d7:5d:fe:ef:4a:6e:b4:86:1c:a9:f0:d3:47:fa:17:
                    9d:65:c0:64:cd:de:14:2b:dd:92:8d:5e:ff:08:af:
                    5c:90:89:3c:0e:3a:b3:57:fb:06:6f:c9:e4:bf:80:
                    4d:ed:8a:30:05:5f:bb:d5:e8:85:53:50:ea:d6:c7:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BD:53:3A:E9:11:42:0C:BC:AB:65:67:36:6A:00:59:32:EF:31:25
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:3a:8d:d6:e4:f6:0d:07:ff:2d:bd:a1:4d:e7:cf:77:d9:
         18:9e:39:10:b0:04:54:60:ee:69:05:3b:f4:7b:db:04:e8:2b:
         fe:18:cd:27:cf:b4:83:5d:97:00:ec:b3:1c:51:ad:66:db:a2:
         ee:80:39:5d:52:c3:18:f2:9a:9b:3a:c0:61:07:3d:cf:58:d3:
         30:a7:28:50:06:81:8e:3d:aa:d8:c4:1a:92:ae:90:67:6d:52:
         94:ce:f5:da:58:6a:b3:2e:b6:53:cd:cc:c6:12:ff:34:84:a0:
         a8:c0:40:17:c2:65:58:c2:05:13:e3:71:f2:d0:5b:2f:67:5e:
         23:65:1a:de:d8:53:28:9e:d4:2b:3e:ad:71:55:ea:ea:d9:57:
         a0:d2:6d:c6:4b:45:b2:a6:02:a9:63:5f:90:89:a2:cb:d6:80:
         89:81:a4:13:86:91:21:70:d0:8f:f2:d2:9a:9d:fe:07:ab:4f:
         0c:4c:f1:39:30:8f:60:0c:5d:56:ec:b0:b4:ab:fd:10:9f:7c:
         d8:16:b2:15:35:2c:90:e6:34:c4:dc:17:e9:6f:38:7b:fb:5d:
         a1:dd:21:12:5e:b7:1f:48:12:19:5e:9a:56:b3:1b:3f:1c:d1:
         cb:53:0f:07:95:16:a7:5d:4e:b5:4d:57:0f:03:66:4d:d0:d2:
         c3:bc:c7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PSs3imbQ/mmiq0QWWeH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZmFhMGQyZjVkZWMwMjAxZjU1ZTQwOTc5YzE5MDliNmRi
NzdjM2IwHhcNMjUwNzI0MjEwMDUyWhcNMjUwNzI1MjEwMDUyWjAzMTEwLwYDVQQD
Eyg1NGJkNTMzYWU5MTE0MjBjYmNhYjY1NjczNjZhMDA1OTMyZWYzMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeLoH1HMeB8Pzxu19/9jhCa7LYwZ
jER9yzviaJFTcM5wwI5fKKGY/xayDV6kvTqpsKR7hgr2DGpeqwkRBmtGgSrtaGZL
WjdCvtqM1p9jBuHFzlQKF292K186TrobVuylE2vxwxIflpkpoNlRU5/0mUhKxuxF
qiymURftyuCjJoCKlwrn4R4tq0CkgJibbzVQGHs3+6+nFqZce5nuFzmrZ0dBqKor
VJa4k6j4Ji5SN01dmJZfSsMzNy/tZnXTJgU5JcPXXf7vSm60hhyp8NNH+hedZcBk
zd4UK92SjV7/CK9ckIk8DjqzV/sGb8nkv4BN7YowBV+71eiFU1Dq1scTDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS9UzrpEUIMvKtlZzZqAFky7zElMB8GA1UdIwQY
MBaAFOb6oNL13sAgH1XkCXnBkJttt3w7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmIt
OGM4ZDEwZThlYWJjLzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wOTc3NDgtNWNjOC00NTBmLTlmYmItOGM4ZDEwZThlYWJj
LzEvNXZxZzB2WGV3Q0FmVmVRSmVjR1FtMjIzZkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANM86jdbk
9g0H/y29oU3nz3fZGJ45ELAEVGDuaQU79HvbBOgr/hjNJ8+0g12XAOyzHFGtZtui
7oA5XVLDGPKamzrAYQc9z1jTMKcoUAaBjj2q2MQakq6QZ21SlM712lhqsy62U83M
xhL/NISgqMBAF8JlWMIFE+Nx8tBbL2deI2Ua3thTKJ7UKz6tcVXq6tlXoNJtxktF
sqYCqWNfkImiy9aAiYGkE4aRIXDQj/LSmp3+B6tPDEzxOTCPYAxdVuywtKv9EJ98
2BayFTUskOY0xNwX6W84e/tdod0hEl63H0gSGV6aVrMbPxzRy1MPB5UWp11OtU1X
DwNmTdDSw7zHMA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:07:14 2025 by rpki-client