Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File:                     5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier:          fJnK7cj3oym7WJCfpzQh7WoP6lpKy+nn5za5fges3v8=
Subject key identifier:   A2:C4:23:EA:63:23:40:87:74:DC:77:D8:88:EF:AB:A4:C2:1A:2F:2A
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer:       /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial:       0199228C9303A972CB55FCD84BE51F109D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 05:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:01 +0000
Files and hashes:         1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: QeRFjqH1pXoUxiDaDZjFfOWf0FVueaf4Qjz8G5t05aE=)
                          2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:93:03:a9:72:cb:55:fc:d8:4b:e5:1f:10:9d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
        Validity
            Not Before: Sep  7 05:01:01 2025 GMT
            Not After : Sep  8 05:01:01 2025 GMT
        Subject: CN=a2c423ea6323408774dc77d888efaba4c21a2f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:82:de:e1:d1:9e:88:52:49:4f:6c:b1:ac:
                    12:8f:3f:10:09:fc:8d:9f:64:b7:e2:91:5a:f4:74:
                    ed:f6:67:90:00:c5:a4:5b:0d:1b:4c:76:85:01:c9:
                    b1:d1:43:2d:50:9f:b4:fe:32:c6:87:51:fc:22:df:
                    ab:6c:a3:95:10:3b:95:5b:e7:03:ba:3e:51:41:97:
                    de:2a:44:64:91:8b:48:bf:87:e3:5b:64:ec:72:39:
                    90:53:50:bc:e0:05:da:53:d1:8f:c9:86:6e:50:5e:
                    34:3c:e8:55:36:24:48:a3:2c:77:16:81:c9:2b:4b:
                    82:6b:f4:46:d9:4c:db:17:c0:87:34:8f:70:1a:e0:
                    36:db:ba:55:8b:62:fa:2b:49:bb:f7:1b:c0:9f:93:
                    35:8d:40:b8:29:d8:dc:7b:d0:1c:a7:01:23:08:6c:
                    82:9d:e2:6a:4d:71:b3:10:ad:1f:99:2b:9e:da:d4:
                    91:5f:f8:a4:16:20:b8:bb:4e:1e:e4:a1:81:c6:b2:
                    b7:b0:f6:1f:a6:d7:97:be:d8:f3:c9:b6:03:0b:c8:
                    2c:6b:76:7b:4f:c4:39:1e:be:3e:4f:09:91:32:96:
                    43:27:46:36:5a:12:15:62:57:23:6a:2a:64:cb:e8:
                    f0:75:a5:cd:28:76:aa:4b:70:aa:6d:18:26:89:4e:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:23:EA:63:23:40:87:74:DC:77:D8:88:EF:AB:A4:C2:1A:2F:2A
            X509v3 Authority Key Identifier:
                keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:e0:03:68:61:b9:64:14:e3:f2:22:ec:82:0c:dc:8a:91:
         a5:95:cf:8a:18:5c:e5:e8:df:a3:6e:61:68:a3:81:bf:fc:69:
         85:34:50:68:0d:c3:65:0d:c4:23:0d:56:d4:ee:f7:9c:79:b9:
         2a:ab:14:75:f3:4e:85:06:e4:43:fe:8c:c6:e4:a0:9a:13:b0:
         18:e7:86:cd:b9:77:1b:3e:64:95:66:52:3f:e3:15:7d:ae:6f:
         49:20:af:71:52:5e:66:f9:8c:18:99:b2:25:24:61:ca:30:8d:
         ee:0d:16:8e:be:8e:30:01:01:0a:c5:a2:50:f6:2a:1b:48:40:
         a7:c5:0e:50:31:8d:8d:e5:63:85:f1:ca:5c:c5:12:17:25:24:
         cb:38:61:43:92:0b:7f:9d:e1:b7:e5:ec:7d:84:fa:be:33:cb:
         d2:94:34:1f:cc:5d:26:a1:03:60:59:1c:92:6e:12:55:cd:d6:
         5b:92:fd:a3:78:cf:0a:47:26:ca:53:47:63:79:e6:09:8c:8a:
         70:e4:56:65:2e:15:81:e7:7b:a3:c7:53:b3:6a:d6:29:5b:49:
         2e:9b:19:95:54:2f:7b:98:df:c0:43:bf:42:60:96:ad:07:cb:
         22:65:45:09:5c:4d:d0:25:70:b0:b4:51:16:de:01:d0:49:c2:
         9c:31:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:25 2025 by rpki-client