Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File:                     a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier:          CNN5o2ywzcz9bMlg8H4EifI4ICTqPqztOQ+zcvOdSuA=
Subject key identifier:   FA:01:31:A7:86:FA:16:39:D2:08:1E:FD:5C:97:55:F0:2D:3D:6B:F9
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer:       /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial:       019847ADC79B905073E95CF8377694A151C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 17:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:27 +0000
Files and hashes:         1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: /uxd+aJMkU2+6FxgC1T5tOWj+I83Pzk2IWEaa5gnAiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:c7:9b:90:50:73:e9:5c:f8:37:76:94:a1:51:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
        Validity
            Not Before: Jul 26 17:00:27 2025 GMT
            Not After : Jul 27 17:00:27 2025 GMT
        Subject: CN=fa0131a786fa1639d2081efd5c9755f02d3d6bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:3b:21:9d:d7:a5:e3:a8:27:96:3e:eb:90:
                    20:e8:c3:01:8d:dc:b3:ae:c6:7f:ef:0b:6c:ea:e5:
                    b9:00:a9:f4:e8:f7:82:12:de:d9:68:18:31:4e:5e:
                    fd:49:63:8e:40:e4:e5:71:e3:ac:a9:7c:7e:00:0d:
                    d8:b4:16:5a:bc:fc:ad:20:96:69:f1:9b:8f:0b:9a:
                    73:6f:f9:ee:b7:91:e7:a4:ab:15:45:4c:35:a1:8b:
                    3e:02:68:9d:98:f2:1e:0b:c2:9a:5f:af:3f:0b:4e:
                    bc:a2:06:0b:20:60:a0:f1:d3:17:d3:87:90:55:df:
                    df:a8:0b:a3:2c:70:53:e3:f0:08:c3:cd:fd:50:20:
                    d5:15:9c:b7:d6:20:c5:b0:c6:5e:e8:12:7c:a3:8c:
                    f4:a9:e7:ba:36:ea:a3:1d:a8:da:63:49:67:4e:34:
                    f3:c8:4d:3d:13:1a:50:15:48:c2:18:97:d8:ef:64:
                    78:e8:de:fa:74:cb:a3:f4:13:a3:21:f8:a1:41:da:
                    ed:9a:7b:3d:3f:e3:ca:94:b3:d6:32:c6:89:c9:90:
                    57:a6:b5:73:ef:8b:e0:b0:16:11:d1:5e:43:89:4a:
                    4a:96:94:56:4b:89:2d:e0:e5:ba:b1:4a:54:8d:24:
                    09:1f:7f:47:2d:6d:83:aa:23:fe:2a:e9:52:20:db:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:31:A7:86:FA:16:39:D2:08:1E:FD:5C:97:55:F0:2D:3D:6B:F9
            X509v3 Authority Key Identifier:
                keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:53:07:e3:5f:f0:4d:06:8b:3b:53:1e:19:6c:ca:46:81:03:
         d9:33:98:0c:d7:dd:c6:fe:3c:d4:fd:b5:88:2f:d1:87:24:68:
         b5:09:36:50:21:9a:66:59:36:3e:9c:22:78:1a:2a:92:ef:25:
         55:10:09:50:ed:09:e7:fd:4f:35:b4:23:06:40:70:17:93:5f:
         61:da:20:2f:f5:6a:df:28:7f:ba:11:b9:12:34:e3:10:fa:6b:
         01:2f:d7:11:8e:f2:c0:13:98:cc:7e:c3:15:11:8f:49:e3:77:
         7e:ca:6e:71:5f:1e:c5:74:55:52:c8:09:15:94:c0:ef:7a:22:
         d8:2f:a7:d9:a9:00:f3:87:29:f9:b6:52:db:ea:39:32:5b:26:
         94:68:6c:9a:2c:a7:01:cb:8b:1a:20:5c:3e:08:be:11:32:4a:
         c4:23:fa:08:d5:9b:a0:94:0c:08:4b:9b:ae:85:e1:95:e4:52:
         cd:15:62:32:a9:45:d0:08:a2:11:7e:f6:6f:0f:ca:65:76:df:
         cd:b4:53:dd:e7:a7:0d:5f:6f:8a:cd:ae:61:d4:93:c5:81:a1:
         5e:49:2e:57:94:5f:c3:08:41:00:f3:47:8d:79:88:0f:a0:28:
         b8:15:ac:f0:25:ce:a8:4e:e9:3e:5b:c6:89:17:71:f9:cc:f6:
         e4:e4:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:18 2025 by rpki-client