Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File:                     5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier:          Yc2PW/9D5548Y5Si/WMeXgIRjfAlmAgx8NuVjYKhcIk=
Subject key identifier:   5E:75:02:35:B4:FF:58:AF:77:2E:C6:74:0E:24:4A:81:48:67:03:87
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer:       /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial:       01984AAECEC245F9DC4BB4F8D40098A82154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 07:00:26 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:26 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:26 +0000
Files and hashes:         1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: jEW9RlQ5Z/OBDQCBPDLKf5N8NKoG6DCTdPNPtKHw0H8=)
                          2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:ce:c2:45:f9:dc:4b:b4:f8:d4:00:98:a8:21:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
        Validity
            Not Before: Jul 27 07:00:26 2025 GMT
            Not After : Jul 28 07:00:26 2025 GMT
        Subject: CN=5e750235b4ff58af772ec6740e244a8148670387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b2:81:28:fc:36:30:ec:6e:1f:9a:cf:e0:63:
                    17:65:cd:51:88:b5:75:4b:2f:5b:83:56:9a:b8:cb:
                    77:f0:5d:e9:19:b3:fd:49:0f:39:e5:25:7f:cc:70:
                    9e:ff:cb:61:41:b6:ac:a9:eb:f1:ec:4c:c8:01:1b:
                    72:11:d7:fe:0c:e1:0b:40:b8:41:2e:b9:69:62:ba:
                    76:b4:b4:a2:e8:df:aa:c6:dc:84:a3:d5:ee:7b:e9:
                    16:9f:3d:94:72:27:79:53:a5:19:4d:98:a5:10:1b:
                    dd:b7:ec:a3:d3:37:77:d7:88:7d:c2:2b:b6:fa:07:
                    be:38:1f:23:4b:2a:ac:00:17:bd:79:d8:17:09:7f:
                    25:7f:f5:3d:71:f7:42:51:bb:18:0c:34:49:9f:93:
                    81:c1:89:92:f3:c0:62:df:02:27:e6:74:06:06:eb:
                    e2:7f:13:40:3b:6a:fb:80:8c:a2:ef:db:d0:c2:7e:
                    39:fb:5c:c2:6e:64:77:63:2e:ef:79:42:9c:e2:b7:
                    28:7a:7e:65:40:c5:2a:23:91:cd:cd:ca:ad:9c:01:
                    b1:3e:bb:de:29:45:6d:09:03:95:00:4e:01:82:0a:
                    f7:b5:da:71:55:6b:f4:02:2d:6a:70:b1:b0:19:28:
                    1e:fb:8f:dd:1a:80:42:84:77:60:2a:99:b0:6b:2c:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:02:35:B4:FF:58:AF:77:2E:C6:74:0E:24:4A:81:48:67:03:87
            X509v3 Authority Key Identifier:
                keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:6f:8b:83:2c:75:c5:1d:6b:68:71:a4:f1:c2:76:5f:39:
         46:19:b6:54:d1:ba:06:36:44:58:e5:53:b4:0a:2c:01:6e:bc:
         2f:b6:7d:c9:8c:49:c4:5c:3f:65:d4:cd:75:80:3a:49:6b:6d:
         1f:36:69:6b:e8:76:b6:c0:d4:46:bf:ac:71:85:b0:03:91:e6:
         5d:1f:93:d9:bc:f2:9c:99:23:08:db:8d:d5:19:ab:67:d5:1f:
         f3:d4:e4:35:15:8e:09:e0:63:e1:d0:a2:4e:a0:dd:32:94:9a:
         c1:f9:b1:bf:4a:5f:ce:49:14:02:02:cc:d8:7d:62:c6:a5:30:
         b2:7d:33:de:e1:8c:a7:88:be:0d:59:a0:d1:37:a1:c6:1b:03:
         da:79:40:4e:ac:d5:83:26:4a:77:5b:63:19:31:3c:28:b1:6d:
         67:b7:80:e5:2f:ac:41:83:5a:35:46:8e:de:25:f5:6b:9d:6e:
         85:44:5c:08:bf:cd:ad:4e:d1:c9:4e:39:7e:c3:13:b2:58:74:
         dd:f1:7a:71:47:01:0c:de:f9:78:03:bb:42:10:5b:06:90:0b:
         b0:36:2d:4b:3c:c1:03:36:39:f7:c2:2a:2d:0e:ae:d5:d2:df:
         27:9d:3c:72:1c:41:28:81:d8:95:d3:40:b9:fd:4c:c2:3b:96:
         65:3c:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:21 2025 by rpki-client