Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File:                     e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier:          iykjM9edTRKsteXK9zEgmdniT6JsO3CSLpkHSS2ocFM=
Subject key identifier:   28:1F:88:3E:10:F2:A5:64:B4:0A:AD:D6:0A:F7:56:D8:FD:AD:DD:C3
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer:       /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial:       0198534463EEFC736320A79A98076682630B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number:          03FF
Signing time:             Mon 28 Jul 2025 23:00:47 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:47 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:47 +0000
Files and hashes:         1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=)
                          2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: dSCqUIA7mrES9C4wz1c1FJq+Rk1B04H4z4hKLuDu1Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:63:ee:fc:73:63:20:a7:9a:98:07:66:82:63:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
        Validity
            Not Before: Jul 28 23:00:47 2025 GMT
            Not After : Jul 29 23:00:47 2025 GMT
        Subject: CN=281f883e10f2a564b40aadd60af756d8fdadddc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:09:85:87:96:3e:52:78:71:db:77:31:ae:
                    19:f4:5f:7a:3a:56:76:7c:e8:36:95:ee:8f:d5:61:
                    f8:9b:7a:aa:ae:d9:8c:d3:c7:d0:7b:12:0b:4c:3a:
                    b5:73:8e:53:12:6e:3a:cd:7a:a1:3f:30:93:15:35:
                    3f:5e:7b:03:30:4e:b5:b7:c6:19:78:e7:02:ca:18:
                    36:42:e2:d4:bf:54:c0:f8:d4:55:d8:fc:23:b3:b4:
                    84:f4:02:c9:8e:f5:c7:15:dc:34:25:bc:e7:5d:af:
                    c2:00:76:1f:4f:0c:ac:26:bd:35:25:35:a5:c4:81:
                    ed:d8:1c:88:15:85:dc:db:c4:ea:1f:88:dd:8a:ab:
                    dc:4e:c9:2c:c6:59:12:e1:26:05:92:37:06:27:dd:
                    99:27:9c:b2:c1:e3:25:2e:2f:ae:f5:a1:d5:7b:99:
                    68:7a:98:6f:34:b4:fe:c4:df:11:9e:d6:b0:cf:bc:
                    6e:84:ef:65:b0:36:80:e3:15:33:74:10:85:77:9b:
                    23:35:14:a9:4b:87:64:12:7d:78:ea:a5:06:40:ff:
                    03:7a:8a:0d:ac:9b:f7:7d:70:6f:5b:04:c3:be:33:
                    d4:23:f6:65:05:ee:dd:43:0f:2a:e4:8a:c0:01:6b:
                    06:40:bc:70:64:d9:f1:7f:9b:35:33:4d:fd:00:62:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1F:88:3E:10:F2:A5:64:B4:0A:AD:D6:0A:F7:56:D8:FD:AD:DD:C3
            X509v3 Authority Key Identifier:
                keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:cd:e7:97:27:7f:43:07:b6:55:5f:1f:45:9b:6d:19:a5:
         02:02:ef:b9:08:b1:37:cf:9b:af:43:ae:29:b6:0c:b9:9c:2a:
         8d:4a:0b:bc:21:86:f6:2e:f6:d1:63:29:2a:9b:de:e1:d6:72:
         0a:a6:ce:de:e0:3d:61:12:6d:c2:61:51:8d:04:fb:d1:e0:4b:
         09:e3:65:b3:c6:54:2f:9d:cf:5c:3b:b4:6f:2d:3e:46:1f:5a:
         77:85:5c:2c:8c:19:48:bc:fb:a1:50:0d:4a:ad:41:9e:a4:87:
         45:9c:74:a6:3b:7b:e0:55:dc:1f:f0:27:6b:c7:11:5d:2e:e5:
         4f:f3:b0:a3:79:7f:07:3b:0d:71:a2:23:95:86:82:57:16:e7:
         14:80:33:73:64:a0:a9:68:ef:e5:d2:60:2b:3a:cb:0a:4b:8d:
         d0:4b:da:13:54:f0:5e:e2:6a:b3:2c:3c:64:3a:42:7b:26:23:
         a0:85:77:09:ef:99:3d:0b:e8:32:65:c8:39:a5:73:ab:ea:2a:
         a2:26:02:4c:60:78:df:cf:17:4a:1c:c0:71:3a:cc:31:8b:78:
         5e:11:36:63:fa:9e:25:34:f1:4b:b8:ce:74:01:10:ea:57:9e:
         c0:b9:66:3d:82:ce:4c:c9:eb:25:a8:de:c6:95:43:0a:b6:7d:
         bd:b0:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:43 2025 by rpki-client