Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File:                     5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier:          JoNixKTzVpCQ/nYx27kQ46lf1Jm5QC62qEedXq2asT4=
Subject key identifier:   4A:81:40:12:46:24:C4:72:EF:43:8A:D4:9D:77:31:F7:4C:D7:8B:E6
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer:       /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial:       0198A083BF3777413A36E4B46243BB0B2BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number:          0E01
Signing time:             Tue 12 Aug 2025 23:00:45 +0000
Manifest this update:     Tue 12 Aug 2025 23:00:45 +0000
Manifest next update:     Wed 13 Aug 2025 23:00:45 +0000
Files and hashes:         1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: YT3rycfS52vWUSlZNz7uyRrQ7fbcWn8uux6ctadekps=)
                          2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:83:bf:37:77:41:3a:36:e4:b4:62:43:bb:0b:2b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
        Validity
            Not Before: Aug 12 23:00:45 2025 GMT
            Not After : Aug 13 23:00:45 2025 GMT
        Subject: CN=4a8140124624c472ef438ad49d7731f74cd78be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:43:67:a1:b7:3d:c9:f8:d3:10:fa:6d:ab:
                    2d:e5:97:44:d0:f5:f1:e3:40:db:fc:70:ef:ae:8f:
                    b8:36:c1:f7:51:33:34:2a:dd:2b:f8:8e:33:e9:94:
                    c1:d9:ef:b0:78:83:d6:e5:d6:d1:62:b0:85:85:35:
                    90:3b:e5:a9:21:07:89:ca:67:87:df:a9:20:92:6c:
                    2c:fb:ed:ec:fb:a8:86:9a:36:c0:a8:c3:36:e3:34:
                    17:20:b7:e9:01:c1:97:1e:04:4e:e4:38:d1:02:e2:
                    8b:f6:f2:e6:20:48:40:1b:8b:85:16:da:df:1e:90:
                    9e:e9:f1:4c:80:40:61:41:e9:ce:14:34:3a:3d:ed:
                    57:0e:05:f6:c8:4f:f5:b9:b6:2e:97:a8:66:4e:82:
                    f8:f4:ae:b2:fe:38:a3:f9:d8:a7:ac:fb:1c:64:5e:
                    35:d8:ff:cd:1e:15:90:5e:d8:e7:dc:ac:40:c6:60:
                    6a:f5:67:58:29:0d:c9:a3:9a:b9:6f:8b:37:9d:25:
                    d5:f4:69:ca:e5:07:c6:2e:90:20:01:be:c3:bb:94:
                    33:af:9f:ef:4b:b9:30:da:a2:0e:79:1f:70:f1:91:
                    56:f5:4b:2d:23:53:41:e3:81:60:28:11:8c:59:62:
                    1c:e1:e6:f8:3d:cb:25:c7:6f:f2:44:f6:ac:68:50:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:81:40:12:46:24:C4:72:EF:43:8A:D4:9D:77:31:F7:4C:D7:8B:E6
            X509v3 Authority Key Identifier:
                keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b2:ef:e5:60:6d:2d:80:f3:48:1e:71:26:ee:85:00:d0:39:
         a9:94:1e:96:3a:be:9f:92:c9:11:c3:e3:85:8c:06:36:06:91:
         7a:8e:72:10:71:3e:f5:d4:cb:10:64:87:48:57:5c:a7:03:d1:
         84:6e:b6:2e:ca:a0:7d:8b:10:e2:a5:3f:c9:2c:40:3e:ad:36:
         c3:7d:5d:c1:74:19:e4:4c:35:d0:f0:39:b2:d4:ba:01:8a:dd:
         db:a6:9e:31:b5:56:f8:ab:f0:b7:14:56:af:05:2a:c2:e1:6c:
         d0:79:44:13:34:1c:19:be:d3:11:07:ad:3e:1a:7a:28:5e:4b:
         13:8e:74:ca:64:1e:e8:53:7f:4b:b5:32:cc:fd:77:90:1e:2f:
         cc:26:64:ce:7a:49:33:cd:c2:bd:ce:56:e0:8b:f4:d7:84:1d:
         4c:d3:3f:57:7c:42:6a:c4:38:55:ea:f6:f6:ce:9a:bd:8a:3e:
         65:47:10:bf:47:81:0b:66:f1:57:f1:14:7a:94:15:72:8c:65:
         c2:67:46:c5:8e:46:19:ad:4b:d0:96:32:61:40:a0:89:b6:03:
         15:90:68:08:4b:a0:2c:10:19:ec:90:f8:6a:54:3f:7a:37:37:
         98:6a:6f:7f:11:56:4e:94:87:3a:a9:9b:93:04:d1:e7:1b:bc:
         75:d7:b3:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigg783d0E6NuS0YkO7Cyv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5
MDYzZTQwHhcNMjUwODEyMjMwMDQ1WhcNMjUwODEzMjMwMDQ1WjAzMTEwLwYDVQQD
Eyg0YTgxNDAxMjQ2MjRjNDcyZWY0MzhhZDQ5ZDc3MzFmNzRjZDc4YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur9DZ6G3Pcn40xD6bast5ZdE0PXx
40Db/HDvro+4NsH3UTM0Kt0r+I4z6ZTB2e+weIPW5dbRYrCFhTWQO+WpIQeJymeH
36kgkmws++3s+6iGmjbAqMM24zQXILfpAcGXHgRO5DjRAuKL9vLmIEhAG4uFFtrf
HpCe6fFMgEBhQenOFDQ6Pe1XDgX2yE/1ubYul6hmToL49K6y/jij+dinrPscZF41
2P/NHhWQXtjn3KxAxmBq9WdYKQ3Jo5q5b4s3nSXV9GnK5QfGLpAgAb7Du5Qzr5/v
S7kw2qIOeR9w8ZFW9UstI1NB44FgKBGMWWIc4eb4Pcslx2/yRPasaFB0bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqBQBJGJMRy70OK1J13MfdM14vmMB8GA1UdIwQY
MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt
NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1
LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLLv5WBt
LYDzSB5xJu6FANA5qZQeljq+n5LJEcPjhYwGNgaReo5yEHE+9dTLEGSHSFdcpwPR
hG62LsqgfYsQ4qU/ySxAPq02w31dwXQZ5Ew10PA5stS6AYrd26aeMbVW+KvwtxRW
rwUqwuFs0HlEEzQcGb7TEQetPhp6KF5LE450ymQe6FN/S7UyzP13kB4vzCZkznpJ
M83Cvc5W4Iv014QdTNM/V3xCasQ4Ver29s6avYo+ZUcQv0eBC2bxV/EUepQVcoxl
wmdGxY5GGa1L0JYyYUCgibYDFZBoCEugLBAZ7JD4alQ/ejc3mGpvfxFWTpSHOqmb
kwTR5xu8ddez/w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:17 2025 by rpki-client