Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File:                     5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier:          7zY9K+0N6vI4bbiQ3XkB06KwTNz428CPlmNpreKl4kU=
Subject key identifier:   9A:18:E3:23:E8:56:E4:B6:5D:95:C0:A8:D8:F6:9C:77:67:D2:E2:E9
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer:       /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial:       0198733DD3AAC2A25B607721FBC311B4523E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number:          0553
Signing time:             Mon 04 Aug 2025 04:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:28 +0000
Files and hashes:         1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: MTI7v6RFQ1+bJffuqJWiJwC0U7U9+yTOSQ81gmBb8aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:d3:aa:c2:a2:5b:60:77:21:fb:c3:11:b4:52:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
        Validity
            Not Before: Aug  4 04:01:28 2025 GMT
            Not After : Aug  5 04:01:28 2025 GMT
        Subject: CN=9a18e323e856e4b65d95c0a8d8f69c7767d2e2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:4f:95:50:84:cf:53:1d:99:0a:0d:0c:c2:
                    71:97:c5:23:8a:c4:88:9c:72:1c:c0:96:27:7d:35:
                    ab:1a:d0:8b:7e:3c:d4:a9:ff:05:99:34:69:42:75:
                    42:a5:e7:7f:b7:26:fc:f6:e7:76:48:1b:4b:a7:59:
                    62:ee:c8:2d:42:7d:37:af:af:fd:b6:09:6e:a6:38:
                    2f:cb:e3:87:92:3c:07:2f:fd:2f:b5:5d:f5:79:fb:
                    0f:15:83:e9:f2:07:ee:85:cc:3e:2b:cd:30:88:aa:
                    b9:02:a8:4a:55:36:f2:58:53:b9:4f:d3:f3:a4:1d:
                    be:15:b4:e8:5c:e3:a9:42:b0:1f:bf:73:fd:1c:8b:
                    43:4f:59:a6:06:90:d9:f1:84:6c:3a:5e:b3:40:60:
                    ad:b0:02:b1:4a:2e:23:08:6e:58:5f:98:2c:50:0e:
                    34:95:03:57:56:e3:15:07:0a:48:61:13:b9:c9:e2:
                    bc:1c:37:54:d6:ed:b8:75:b2:3e:f5:62:56:af:0e:
                    70:47:e5:bf:8d:7e:93:fe:41:c5:e4:2a:22:c6:4c:
                    22:79:02:4f:65:06:6e:c3:93:05:a9:3a:3e:d9:c7:
                    b2:87:73:55:65:78:c6:e0:a0:80:e3:36:fc:f5:84:
                    39:f2:e9:a9:3f:03:c4:55:cf:8c:98:b4:59:42:ba:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:E3:23:E8:56:E4:B6:5D:95:C0:A8:D8:F6:9C:77:67:D2:E2:E9
            X509v3 Authority Key Identifier:
                keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:4c:4f:6e:3a:86:82:9a:da:ad:d6:5f:f8:b3:d0:e3:4c:
         da:0f:58:5f:38:fc:11:32:7e:2a:4f:3b:7f:a0:59:9f:66:0f:
         95:09:1e:74:36:48:a2:69:dc:4c:06:b6:c4:a0:a0:7f:98:ee:
         e7:9e:39:5f:98:f2:e7:02:d2:15:e5:c4:6b:7b:9d:2b:f6:cc:
         2d:18:00:b0:08:f5:e2:b5:45:da:36:73:b0:f4:08:97:a4:7a:
         e3:a1:88:c3:40:eb:1f:6e:13:5b:41:20:e2:17:5e:b7:4b:aa:
         cb:30:da:a5:4d:61:d0:cc:70:96:18:06:a8:53:4e:d0:c1:95:
         6b:01:4f:56:77:37:3c:8c:98:95:24:4f:5d:1e:eb:6a:2f:47:
         25:b1:17:7c:4f:e6:71:14:6a:d5:9f:35:f7:8a:1a:e1:1d:23:
         93:8b:e6:0c:9d:c4:79:4a:3e:33:57:e2:ce:1a:e0:89:fb:cc:
         0a:27:ab:4a:12:83:78:f5:78:40:3c:d0:a8:b9:02:9c:5c:d9:
         46:87:5f:00:24:43:9c:c5:0b:0a:6d:68:d7:95:94:71:a9:2c:
         aa:c5:8e:9d:d3:25:61:a0:17:74:bf:04:3e:4d:1e:2f:62:35:
         9c:cc:0b:3a:36:f7:41:13:e1:79:5b:83:e0:e6:38:d5:81:49:
         c0:75:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:31 2025 by rpki-client