Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
File:                     5weSQnGbdzi4P0kUerH1gp93ahU.mft (raw, json)
Hash identifier:          5SXn07OWuBE5mLS9gCfqwBLhwguFw1UcD+H4Rxi8ktI=
Subject key identifier:   E6:F1:4F:4B:41:0F:50:71:47:A8:5F:89:AD:40:56:02:87:14:E8:62
Authority key identifier: E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15
Certificate issuer:       /CN=e7079242719b7738b83f49147ab1f5829f776a15
Certificate serial:       0199228C65FD4021237C68E94C31D7E13671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
Manifest number:          3C
Signing time:             Sun 07 Sep 2025 05:00:50 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:50 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:50 +0000
Files and hashes:         1: 5weSQnGbdzi4P0kUerH1gp93ahU.crl (hash: UK6ButgJAbl/rTG/NZ+bVZ2a5q/44uBfAUEaqjuvqGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:65:fd:40:21:23:7c:68:e9:4c:31:d7:e1:36:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7079242719b7738b83f49147ab1f5829f776a15
        Validity
            Not Before: Sep  7 05:00:50 2025 GMT
            Not After : Sep  8 05:00:50 2025 GMT
        Subject: CN=e6f14f4b410f507147a85f89ad4056028714e862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5a:27:ef:c3:d4:5f:de:fc:73:36:0e:5d:d2:
                    3a:26:8d:08:78:4d:b6:95:0c:aa:0b:f9:8f:30:f2:
                    72:5d:c9:08:e8:29:b7:4c:2d:13:ae:82:f6:26:e5:
                    17:26:07:b1:9f:f7:43:ec:0e:61:0f:25:31:64:26:
                    bb:c2:03:b5:b2:ab:1c:d9:50:b9:42:8d:b9:9b:48:
                    04:7a:7f:84:be:57:fd:ce:b5:68:66:a6:8d:25:54:
                    43:24:f6:ea:bd:3f:57:59:8c:2a:19:c4:2f:26:73:
                    04:b6:71:a3:f7:94:ec:12:7f:c4:34:71:be:14:fb:
                    c4:43:36:91:97:ff:c8:b9:f7:d9:e1:5d:7f:c7:c2:
                    1e:d6:1c:2a:f3:10:c0:62:8f:a9:6b:84:99:3a:13:
                    2c:ce:14:99:0c:a6:84:24:d4:27:e0:b6:60:96:d2:
                    3e:e9:7f:b5:c9:85:fb:88:4d:83:47:80:b2:98:dc:
                    7a:63:2d:66:e3:d6:67:1a:f4:77:3c:2b:8b:6e:5d:
                    7a:16:8d:21:91:00:a9:20:28:84:56:72:53:1b:16:
                    50:22:ec:52:48:46:36:fc:9e:97:8e:0d:05:e2:3e:
                    f2:6f:25:f8:9f:b0:55:30:42:0a:31:9d:15:c4:29:
                    42:a1:4b:0f:aa:e2:af:e2:ce:a1:9b:6e:10:27:4d:
                    1d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:4F:4B:41:0F:50:71:47:A8:5F:89:AD:40:56:02:87:14:E8:62
            X509v3 Authority Key Identifier:
                keyid:E7:07:92:42:71:9B:77:38:B8:3F:49:14:7A:B1:F5:82:9F:77:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5weSQnGbdzi4P0kUerH1gp93ahU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1a59c9-1446-4779-be0a-d50f29308464/1/5weSQnGbdzi4P0kUerH1gp93ahU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:99:23:de:ae:51:01:63:ed:13:09:63:a5:79:12:87:74:3e:
         89:60:63:03:a3:3e:b2:a9:15:bd:5e:0d:e1:32:a5:44:bc:f7:
         47:53:0a:58:8d:f1:8e:17:48:a6:62:e9:4c:a7:29:13:b2:f9:
         f1:04:fd:80:f5:16:a1:c9:fc:d4:7b:16:77:a9:48:31:4f:ea:
         90:e9:9b:3e:25:1c:72:32:a7:3d:33:45:14:3c:6d:6f:b7:c7:
         8e:75:1e:a4:c1:55:ea:fa:75:67:63:11:35:64:d7:9c:3e:eb:
         de:93:76:e1:4d:f8:7b:67:b3:02:aa:72:6b:66:b4:e1:c3:43:
         08:45:5f:60:94:df:9c:09:02:a8:21:26:fd:d2:51:cd:cf:88:
         d1:1e:fe:f3:e1:31:bb:49:01:37:ae:79:df:0d:be:ca:35:e9:
         9d:e5:ae:df:3c:74:54:f9:2f:3a:be:de:98:78:6d:34:66:95:
         ac:bb:03:20:cf:8f:8a:69:a8:a6:9f:ac:2f:e2:46:7c:d8:fd:
         d8:25:97:65:12:01:00:b6:00:a1:dd:a6:91:01:5b:0b:bf:98:
         c7:d1:55:ba:54:3f:eb:72:d4:77:66:90:87:01:8a:5f:ff:51:
         68:4e:8c:69:ff:0d:b6:99:d8:a0:8d:69:7b:cc:7f:73:7a:a6:
         2e:0d:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:52 2025 by rpki-client