Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          NzrnJbDMckEV/KeXRdibXN48wV04nYYzK26oARY+0XU=
Subject key identifier:   A6:4C:08:C8:59:84:70:B3:34:C5:A9:1E:4D:65:88:63:9A:79:DA:07
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       01991808982282D10EA130F4B052FFFBBE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          1087
Signing time:             Fri 05 Sep 2025 04:00:40 +0000
Manifest this update:     Fri 05 Sep 2025 04:00:40 +0000
Manifest next update:     Sat 06 Sep 2025 04:00:40 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: lyDQUtObPb2CggZqUPv81ax0lWwGdRYLY90iznUjnKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:08:98:22:82:d1:0e:a1:30:f4:b0:52:ff:fb:be:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Sep  5 04:00:40 2025 GMT
            Not After : Sep  6 04:00:40 2025 GMT
        Subject: CN=a64c08c8598470b334c5a91e4d6588639a79da07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:f4:38:32:66:c4:52:c5:8a:21:57:15:f0:
                    64:5a:53:70:79:37:d3:f5:54:49:58:6f:83:47:07:
                    7d:fb:6d:06:16:1b:74:4d:da:7d:40:d3:35:4f:95:
                    76:00:9c:6f:f7:dc:6e:55:b4:74:a7:0b:9e:ac:fc:
                    00:12:f6:21:8c:7d:b8:fb:00:7b:51:31:f0:d2:e6:
                    ac:96:cb:11:8b:84:53:44:8a:1c:4b:f4:57:83:a0:
                    2d:b8:63:ad:10:7d:ba:c2:aa:1a:e8:f6:b6:df:5f:
                    1d:45:c3:0e:84:fb:4b:71:cc:ea:16:ac:09:02:cc:
                    16:e2:13:53:db:39:cf:83:8a:08:a7:0c:2f:dc:d7:
                    75:6c:c4:19:1b:7e:b5:4d:f1:0d:cc:15:f8:5d:c2:
                    74:a8:2a:cc:c4:b8:e6:0e:39:71:b1:92:c7:17:0e:
                    2a:95:7e:b3:db:49:ac:da:38:2d:a7:21:28:d7:2b:
                    90:ab:8c:e4:fc:c6:bd:02:4a:7c:42:bf:39:5d:bd:
                    1c:07:ff:28:32:08:fc:a4:60:57:4d:88:66:78:17:
                    1c:41:1a:5d:78:6c:de:74:c0:10:87:e0:00:f1:2b:
                    3d:16:3b:e4:c5:6f:92:46:39:65:b1:a0:34:f5:24:
                    26:b2:d8:b4:cb:e5:6c:1d:a4:0e:9f:eb:9d:b3:57:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:08:C8:59:84:70:B3:34:C5:A9:1E:4D:65:88:63:9A:79:DA:07
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:90:8e:31:ca:ba:20:d5:db:8a:46:1c:b8:a5:23:ea:c7:ba:
         49:8a:71:d0:25:31:1a:da:b3:e3:bf:d6:78:b9:c8:97:0d:be:
         6b:64:48:04:a1:79:d4:02:07:a7:c9:fe:4a:7d:85:59:6f:98:
         54:0e:9e:3a:28:52:a5:53:e6:86:1a:d1:94:3d:27:f3:29:ca:
         72:a5:a6:1f:18:d2:74:4d:73:47:31:ef:90:e2:2b:83:fc:6d:
         cc:6e:06:f9:d4:28:f1:ab:71:db:04:8d:f6:97:e6:e8:29:b8:
         19:c7:0b:19:5b:12:f9:71:03:40:c9:a3:cc:2a:0d:19:e1:c5:
         5a:fe:18:bc:2e:71:8a:d2:4e:c1:a0:2d:91:ee:3d:89:a5:28:
         1e:67:b6:9b:aa:3d:57:d6:6c:98:48:fe:56:80:91:ad:82:dd:
         db:da:c3:9b:1c:fe:9e:45:70:8a:b7:c3:1d:f4:aa:7f:55:8b:
         48:d1:d9:02:c4:0c:eb:14:cd:ba:c1:d3:34:ce:ab:e4:a8:9e:
         eb:a2:c5:00:d6:dc:38:4a:28:9f:c7:9a:88:af:bc:87:53:27:
         31:1a:11:26:e4:33:c6:ed:77:66:d0:ab:a1:7c:d6:54:2d:3f:
         2e:f0:9f:20:cc:a2:31:e2:3c:45:81:9e:aa:d4:4b:24:07:3a:
         15:86:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:42 2025 by rpki-client