Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          rvnJQ15EW9eCu8CFI8IHpUwrY6qk/cp+f75Ovdq7cfE=
Subject key identifier:   31:9D:A1:7A:CC:E0:BE:35:91:32:DA:47:E5:AA:9B:98:F6:74:D9:6C
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       019922FA80025E33C8E68BBC07102A015840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          10CD
Signing time:             Sun 07 Sep 2025 07:01:05 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:05 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:05 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: S4arEFczTVWfyJCY4AIDe42Y4wmNKrw15WCYJU0x050=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:80:02:5e:33:c8:e6:8b:bc:07:10:2a:01:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: Sep  7 07:01:05 2025 GMT
            Not After : Sep  8 07:01:05 2025 GMT
        Subject: CN=319da17acce0be359132da47e5aa9b98f674d96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:8d:01:19:4a:f2:04:2d:6f:e0:a3:8c:a6:
                    83:f6:50:a7:ba:aa:cb:f0:2e:3d:50:9c:58:a9:f3:
                    05:3f:71:25:61:16:c5:90:21:ec:94:2a:6b:8c:57:
                    8d:41:3c:e0:63:18:45:d9:91:71:a7:7e:03:87:3f:
                    fd:ed:8e:62:9f:36:9b:0b:7e:a8:c5:01:72:fb:a8:
                    bf:41:0f:77:74:b9:db:67:85:38:88:d1:77:97:b8:
                    c2:e4:b5:84:72:3d:39:98:01:ab:3c:66:2d:85:fb:
                    11:87:d0:7b:cb:1f:fa:f7:62:5b:47:14:42:c4:3b:
                    13:27:06:5f:36:06:40:06:c3:e0:8c:ad:06:29:9b:
                    76:75:22:51:a4:19:59:f5:fd:c6:e6:02:05:f5:91:
                    f4:43:36:7a:67:90:28:33:fa:82:79:d5:60:ac:5d:
                    04:89:b1:29:76:d9:40:15:31:c5:5c:2c:17:a2:a4:
                    3e:b4:3e:15:e9:2f:32:8f:f5:d5:3a:f3:c1:bd:fb:
                    07:c1:cc:fc:7a:c6:e0:19:30:5c:50:f8:02:59:7f:
                    c4:f3:63:4f:05:77:09:13:63:6d:0e:13:8b:43:f9:
                    11:9c:c4:b9:2e:fb:ec:ab:b5:61:62:90:11:6d:1c:
                    3f:c4:50:ae:68:6a:6b:33:2a:4c:4b:b4:27:7d:05:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9D:A1:7A:CC:E0:BE:35:91:32:DA:47:E5:AA:9B:98:F6:74:D9:6C
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:57:b9:57:0e:19:4d:b8:09:06:c1:18:99:62:c3:85:14:
         f7:36:da:18:53:8f:5b:93:dc:2a:76:65:84:7c:83:e0:fa:b2:
         05:df:0a:b5:09:ab:9b:68:6f:56:b7:60:f1:b8:cc:f8:36:3c:
         09:83:d1:c1:16:ec:35:bc:24:77:a7:8b:77:9c:94:0e:92:b8:
         cc:29:0f:77:36:f8:3c:ab:f5:22:f6:7a:b8:ed:52:07:d8:4a:
         a8:39:42:88:f5:90:b9:eb:f8:d3:3e:ab:38:af:31:5c:3b:22:
         e9:c6:ad:be:51:80:95:98:73:5e:54:9c:ce:6d:19:72:20:07:
         65:e6:4d:0b:1c:9a:6d:68:1d:d9:77:a7:27:a0:59:97:e9:9b:
         c8:17:05:42:17:80:b6:57:bf:55:06:15:a4:33:15:0d:23:3e:
         f0:a0:5c:8b:06:02:ed:9a:0b:03:62:cf:26:aa:95:39:60:70:
         dc:cc:0b:a7:8e:04:f4:73:58:17:72:d7:f8:6e:6c:9e:03:d3:
         91:88:54:39:ac:5b:52:df:28:4c:f4:0d:b7:bf:8c:26:2c:e2:
         e9:66:01:e6:33:1f:0d:3c:41:fa:dc:66:8e:1d:ee:c9:07:00:
         3f:b7:82:e7:7f:9c:cb:be:30:23:ae:b7:98:7b:67:18:0a:84:
         5c:99:00:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+oACXjPI5ou8BxAqAVhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTcwZmI5NDZkYWY5YjllZmUzYjYwOWYyODljYWUwMTlm
YzYxOGMwHhcNMjUwOTA3MDcwMTA1WhcNMjUwOTA4MDcwMTA1WjAzMTEwLwYDVQQD
EygzMTlkYTE3YWNjZTBiZTM1OTEzMmRhNDdlNWFhOWI5OGY2NzRkOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHiNARlK8gQtb+CjjKaD9lCnuqrL
8C49UJxYqfMFP3ElYRbFkCHslCprjFeNQTzgYxhF2ZFxp34Dhz/97Y5inzabC36o
xQFy+6i/QQ93dLnbZ4U4iNF3l7jC5LWEcj05mAGrPGYthfsRh9B7yx/692JbRxRC
xDsTJwZfNgZABsPgjK0GKZt2dSJRpBlZ9f3G5gIF9ZH0QzZ6Z5AoM/qCedVgrF0E
ibEpdtlAFTHFXCwXoqQ+tD4V6S8yj/XVOvPBvfsHwcz8esbgGTBcUPgCWX/E82NP
BXcJE2NtDhOLQ/kRnMS5Lvvsq7VhYpARbRw/xFCuaGprMypMS7QnfQU6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGdoXrM4L41kTLaR+Wqm5j2dNlsMB8GA1UdIwQY
MBaAFBOXD7lG2vm57+O2CfKJyuAZ/GGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMt
MzdiNjFlYzJjMGQ1LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yNjkyODUtNTg4MS00MjdjLWFjYmMtMzdiNjFlYzJjMGQ1
LzEvRTVjUHVVYmEtYm52NDdZSjhvbks0Qm44WVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0tXuVcO
GU24CQbBGJliw4UU9zbaGFOPW5PcKnZlhHyD4PqyBd8KtQmrm2hvVrdg8bjM+DY8
CYPRwRbsNbwkd6eLd5yUDpK4zCkPdzb4PKv1IvZ6uO1SB9hKqDlCiPWQuev40z6r
OK8xXDsi6catvlGAlZhzXlSczm0ZciAHZeZNCxyabWgd2XenJ6BZl+mbyBcFQheA
tle/VQYVpDMVDSM+8KBciwYC7ZoLA2LPJqqVOWBw3MwLp44E9HNYF3LX+G5sngPT
kYhUOaxbUt8oTPQNt7+MJizi6WYB5jMfDTxB+txmjh3uyQcAP7eC53+cy74wI663
mHtnGAqEXJkATg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:06 2025 by rpki-client