Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
File:                     5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json)
Hash identifier:          PLittcaB0z0YhC+OL6FGdeX9LgKyxl7mg5fxRY1OMj0=
Subject key identifier:   83:A0:FE:05:5B:48:32:39:68:27:D5:81:69:C1:54:92:E6:60:DF:D2
Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
Certificate issuer:       /CN=e5c7c39a5912ddc21e9f6b519896725762127833
Certificate serial:       019873E21DE4F9CE573CA72B7FEA45E8393D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
Manifest number:          0191
Signing time:             Mon 04 Aug 2025 07:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:55 +0000
Files and hashes:         1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: 07gPheszG5Z8XNSHSV9X7PsqdjiQRb73mJFTRgDjR/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:1d:e4:f9:ce:57:3c:a7:2b:7f:ea:45:e8:39:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833
        Validity
            Not Before: Aug  4 07:00:55 2025 GMT
            Not After : Aug  5 07:00:55 2025 GMT
        Subject: CN=83a0fe055b4832396827d58169c15492e660dfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:b2:cd:b3:4e:7b:3a:96:9b:a0:bc:ef:fa:
                    0d:a2:92:f1:26:41:c2:7b:ab:d0:11:25:d7:4e:34:
                    c0:16:77:6a:89:0d:1a:f8:27:cc:eb:c8:9f:cd:06:
                    b1:b2:07:4d:83:94:97:36:18:a5:eb:65:64:3d:08:
                    5f:2a:9a:e6:26:66:58:98:e9:ae:13:d4:62:34:86:
                    fb:2d:c4:27:99:a3:41:1f:5c:22:32:e0:81:c3:10:
                    3e:14:8a:eb:fa:7c:b0:cf:fb:f3:b2:b7:df:27:03:
                    7b:80:a0:78:98:f7:7b:8a:78:f2:40:c1:4d:04:74:
                    c8:cd:9a:54:7a:88:a4:38:17:39:0b:b1:10:a7:7a:
                    52:4a:2c:42:da:f5:3f:fe:50:cd:ef:f2:8a:3b:d1:
                    9a:ec:b6:e1:49:5c:9a:e1:3e:ec:98:15:0a:47:f3:
                    ba:39:e1:35:b3:00:ac:f4:ab:c1:4b:58:b4:01:2b:
                    e5:68:e6:23:ac:92:be:b0:ca:a6:4d:c5:cd:02:cf:
                    7c:e2:f2:85:6d:94:42:7e:a1:75:d8:10:c1:6a:f6:
                    86:8a:4a:11:e6:0f:58:a7:ee:2f:eb:1a:53:36:de:
                    18:19:0e:50:04:da:3a:56:2e:bf:cd:5c:dd:14:9b:
                    b3:75:6a:b6:4d:73:71:07:42:d9:26:b8:81:85:73:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:FE:05:5B:48:32:39:68:27:D5:81:69:C1:54:92:E6:60:DF:D2
            X509v3 Authority Key Identifier:
                keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:7c:fd:5b:aa:8a:fb:b8:41:d1:54:c2:73:60:9c:09:b9:
         90:c4:c4:ee:f9:bb:2c:66:8e:49:3a:16:0f:ad:92:fb:77:27:
         a4:cb:11:10:93:20:5e:d3:97:12:e9:46:47:f0:eb:ce:d4:f0:
         26:d5:8f:92:1f:6e:d2:95:22:22:43:58:0e:94:d1:be:3f:ac:
         51:f5:ef:8f:ed:0b:82:24:8a:fc:45:01:23:1d:2d:36:2c:8b:
         da:ef:e9:35:65:56:7d:5c:ad:b9:bf:38:eb:30:0b:ca:49:21:
         5c:08:04:17:41:77:c4:0c:5f:10:fa:cf:cb:7b:4c:ce:f4:1c:
         65:26:af:25:3b:44:95:48:7b:d2:30:77:aa:45:61:0c:3a:c2:
         95:45:76:12:48:9d:a8:2a:d5:f2:4c:9d:92:ee:8d:7b:34:34:
         52:9f:03:17:25:cd:b9:6d:0e:79:8c:23:55:37:2e:80:3f:c3:
         c0:de:99:e3:a9:57:1a:a7:e6:61:21:16:d1:72:3f:c8:f0:e5:
         7b:0e:ce:3a:83:07:e5:45:39:03:73:50:78:80:fb:8b:e5:16:
         3a:5c:4c:35:01:b4:f6:b9:75:c3:7b:0e:20:49:2a:4b:55:c2:
         d2:fa:3e:ee:46:a6:3c:99:06:60:0e:1a:f5:73:30:bf:c0:4a:
         4a:7b:9c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4h3k+c5XPKcrf+pF6Dk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzdjMzlhNTkxMmRkYzIxZTlmNmI1MTk4OTY3MjU3NjIx
Mjc4MzMwHhcNMjUwODA0MDcwMDU1WhcNMjUwODA1MDcwMDU1WjAzMTEwLwYDVQQD
Eyg4M2EwZmUwNTViNDgzMjM5NjgyN2Q1ODE2OWMxNTQ5MmU2NjBkZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruyyzbNOezqWm6C87/oNopLxJkHC
e6vQESXXTjTAFndqiQ0a+CfM68ifzQaxsgdNg5SXNhil62VkPQhfKprmJmZYmOmu
E9RiNIb7LcQnmaNBH1wiMuCBwxA+FIrr+nywz/vzsrffJwN7gKB4mPd7injyQMFN
BHTIzZpUeoikOBc5C7EQp3pSSixC2vU//lDN7/KKO9Ga7LbhSVya4T7smBUKR/O6
OeE1swCs9KvBS1i0ASvlaOYjrJK+sMqmTcXNAs984vKFbZRCfqF12BDBavaGikoR
5g9Yp+4v6xpTNt4YGQ5QBNo6Vi6/zVzdFJuzdWq2TXNxB0LZJriBhXOjsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOg/gVbSDI5aCfVgWnBVJLmYN/SMB8GA1UdIwQY
MBaAFOXHw5pZEt3CHp9rUZiWcldiEngzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQt
MzhmODY0YTM0Yjc4LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMGFmODMtMDhmNS00OTE5LWJhMWQtMzhmODY0YTM0Yjc4
LzEvNWNmRG1sa1MzY0llbjJ0Um1KWnlWMklTZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADON8/Vuq
ivu4QdFUwnNgnAm5kMTE7vm7LGaOSToWD62S+3cnpMsREJMgXtOXEulGR/DrztTw
JtWPkh9u0pUiIkNYDpTRvj+sUfXvj+0LgiSK/EUBIx0tNiyL2u/pNWVWfVytub84
6zALykkhXAgEF0F3xAxfEPrPy3tMzvQcZSavJTtElUh70jB3qkVhDDrClUV2Ekid
qCrV8kydku6NezQ0Up8DFyXNuW0OeYwjVTcugD/DwN6Z46lXGqfmYSEW0XI/yPDl
ew7OOoMH5UU5A3NQeID7i+UWOlxMNQG09rl1w3sOIEkqS1XC0vo+7kamPJkGYA4a
9XMwv8BKSnuclg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:12 2025 by rpki-client