Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File:                     53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier:          tDIDD5zlqDCLPa0v7qBA2MSD/IugCpYcTW7tEyyfLnQ=
Subject key identifier:   5B:78:83:AB:F0:72:01:0B:83:0A:33:78:31:E9:64:50:34:D0:B6:BC
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer:       /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial:       019895242B39A192C0497ED3D186E3C9295D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 18:00:32 +0000
Manifest this update:     Sun 10 Aug 2025 18:00:32 +0000
Manifest next update:     Mon 11 Aug 2025 18:00:32 +0000
Files and hashes:         1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: MUURIBbKyfIzSAC2xeye36TjbBJ3HdqDFVAesjtsB74=)
                          2: tUZHDdFwry8ADa4Cy4cgEjcwGpA.roa (hash: khx6M/GES6UZBMxotwf4KeFJV0Wp8E9iWqwkSmvOz7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:2b:39:a1:92:c0:49:7e:d3:d1:86:e3:c9:29:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
        Validity
            Not Before: Aug 10 18:00:32 2025 GMT
            Not After : Aug 11 18:00:32 2025 GMT
        Subject: CN=5b7883abf072010b830a337831e9645034d0b6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:85:63:0f:40:7c:30:07:72:60:9d:e3:6b:
                    6a:e5:87:35:41:3a:79:05:e5:73:c4:fa:e6:05:7c:
                    4d:ef:2a:8a:70:4c:2c:48:c3:c8:ae:d7:f2:70:53:
                    6f:ae:92:fa:12:c5:9f:45:8a:ab:ef:43:b9:91:e9:
                    05:ab:e0:17:7d:28:71:ce:07:37:90:4c:e2:ae:7a:
                    cd:37:f4:31:8c:32:59:12:a7:4b:1c:e9:4f:30:9b:
                    0f:4d:58:9b:07:63:a2:5f:23:42:46:1f:96:6a:f0:
                    62:22:09:e5:32:0e:69:f5:93:0d:c7:08:15:2b:26:
                    fa:26:ee:1c:8a:f9:05:d4:ff:75:1b:4d:29:ee:fd:
                    0c:e2:d6:ab:a2:ee:a8:7c:db:5c:1d:0f:83:13:fe:
                    d4:cc:a2:b8:31:06:93:66:ba:c0:d1:bf:a0:d4:49:
                    56:c9:82:55:b6:b5:05:0c:d6:69:a3:68:30:e4:4b:
                    86:cc:a2:76:1e:9a:79:56:65:f9:5f:4d:49:91:df:
                    ae:a3:16:36:8c:4e:96:97:df:79:6f:e3:12:c6:d9:
                    0f:5a:37:0b:0e:d4:bb:c4:e2:03:be:36:28:a0:7a:
                    f1:43:49:c1:65:d2:33:d7:e7:26:16:e3:1a:98:91:
                    bb:a0:3a:42:89:be:89:9b:70:14:97:21:41:5b:a0:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:83:AB:F0:72:01:0B:83:0A:33:78:31:E9:64:50:34:D0:B6:BC
            X509v3 Authority Key Identifier:
                keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:41:80:c4:cb:84:0a:08:b7:19:c1:97:af:68:aa:d8:e2:ce:
         89:ec:8d:99:02:db:ad:be:96:ee:a2:aa:af:77:1d:dc:92:3d:
         a9:8d:ee:94:65:97:00:e3:d7:e0:b1:69:66:6e:4b:bd:e6:93:
         db:e9:c3:2f:25:40:55:75:74:72:96:9c:fc:86:8f:f4:b0:05:
         5e:77:fd:1c:c4:4b:55:4a:85:ee:13:63:23:0e:f5:4c:0d:0c:
         52:67:10:88:b2:fc:39:1b:fd:3c:cb:7c:ab:aa:bd:cc:54:d9:
         bd:54:66:4a:0c:b4:b5:ec:c9:a8:7c:70:0d:71:96:93:2b:8e:
         d6:b9:88:c4:d5:78:ff:5c:4f:19:c3:1e:14:8b:8a:d9:62:e3:
         7c:01:a1:4c:a3:9c:3d:60:3a:15:30:19:33:34:64:80:93:96:
         43:e1:a1:e5:4e:6d:db:f1:93:f8:4e:f9:d4:cd:ab:61:1d:fe:
         1b:dd:de:f3:d6:03:d7:a7:af:18:7b:59:68:c7:d9:02:e7:38:
         28:55:a8:44:86:f4:31:6d:ba:75:40:67:8d:03:5b:c3:82:92:
         85:2f:a7:b4:53:cd:71:94:55:b7:87:0e:75:ae:2e:f8:ec:8b:
         f3:5b:bf:93:5f:c4:26:9a:30:67:f1:36:9d:2b:b4:25:30:3c:
         24:13:02:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:13 2025 by rpki-client