Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File:                     5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier:          6FtbKz89fZ7qYHAjem2RAa4WL6yaRMAFXZMjWpsrbp8=
Subject key identifier:   31:DF:27:03:41:32:B7:EF:D6:FD:7E:ED:0F:7D:BA:3D:1E:8B:17:98
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer:       /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial:       01988F223A566B83BD339458795E7D58835D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number:          D5
Signing time:             Sat 09 Aug 2025 14:00:41 +0000
Manifest this update:     Sat 09 Aug 2025 14:00:41 +0000
Manifest next update:     Sun 10 Aug 2025 14:00:41 +0000
Files and hashes:         1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: lNgsTB0Ar6EB+KWDDt+g0+564qxqPq9S8AdIGhqrsNc=)
                          2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:22:3a:56:6b:83:bd:33:94:58:79:5e:7d:58:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
        Validity
            Not Before: Aug  9 14:00:41 2025 GMT
            Not After : Aug 10 14:00:41 2025 GMT
        Subject: CN=31df27034132b7efd6fd7eed0f7dba3d1e8b1798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:7e:0b:73:68:38:aa:fa:ee:24:7b:bf:24:
                    69:01:28:8e:dc:f6:08:03:1f:c2:63:a6:63:19:89:
                    ec:0f:3d:4a:dc:68:cd:12:53:9c:fe:ad:27:86:9d:
                    57:82:65:5f:6c:01:f7:5f:4a:ac:49:0c:dd:90:07:
                    70:4b:3b:02:9d:46:e5:31:3e:a9:35:14:fb:ba:9e:
                    66:01:03:78:cd:84:73:bd:4c:c1:ae:75:2a:7d:e5:
                    37:7a:3c:cd:a4:6e:d5:eb:bf:52:b0:1a:88:ac:2c:
                    fe:3e:2e:1e:ce:a4:1f:dd:26:f3:6b:a5:9b:55:1e:
                    45:af:cb:8b:9d:2a:43:aa:d3:cf:70:4f:93:1d:23:
                    ae:ef:13:e8:a7:9c:71:60:7f:6e:fc:b9:e8:ea:d8:
                    af:c5:34:3d:9d:e8:8c:7e:85:5d:4b:0e:f9:02:23:
                    e7:2b:e9:8e:ad:ed:65:d8:b7:f9:28:e0:e0:83:cb:
                    a9:b5:c1:45:fb:1a:44:a6:5b:de:68:64:df:44:53:
                    ef:54:7a:68:c9:55:59:e4:8a:7d:2f:c6:d9:c8:81:
                    a5:d1:11:b9:8d:be:a0:57:fe:11:0f:af:1c:f4:c6:
                    7f:61:1f:da:15:7e:84:76:83:e5:49:a9:8d:b0:48:
                    e2:dc:08:5f:e5:f1:ca:a5:4c:58:d1:44:a8:68:de:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:27:03:41:32:B7:EF:D6:FD:7E:ED:0F:7D:BA:3D:1E:8B:17:98
            X509v3 Authority Key Identifier:
                keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:f7:39:c3:2b:ef:65:1d:98:e8:ab:d1:7c:e9:eb:30:b1:
         c9:32:03:6d:9c:f0:58:e1:1c:c9:6a:a5:81:55:0c:c0:ed:0c:
         fc:41:e7:6a:43:ba:35:96:c5:11:92:70:19:ce:8c:32:88:bd:
         b0:f3:ea:aa:47:b3:71:69:ec:ed:6f:de:c5:34:f5:74:03:c1:
         aa:17:92:fd:0d:b0:f6:c5:f9:49:4d:86:5f:30:38:45:8d:c1:
         ec:03:ba:06:be:70:9b:37:f3:0c:d1:2c:19:a5:1e:f9:c2:bb:
         d6:32:15:88:37:9a:e5:72:d4:ba:6f:dc:35:bc:ee:e2:58:39:
         2e:3d:02:94:4b:fb:f0:e7:72:9d:7f:39:74:1f:33:ef:4f:88:
         d9:54:08:49:e9:50:fb:4a:d1:d8:d9:41:94:09:ae:b9:4f:05:
         65:d5:b7:8c:ef:84:50:40:6d:4b:de:37:db:16:83:cc:ec:36:
         79:2f:99:bb:71:55:bd:76:91:a1:8b:8a:64:ef:20:3e:86:3f:
         d5:ac:b6:2d:ed:c9:97:5e:8a:a2:54:4f:52:07:57:52:67:19:
         92:dc:82:87:41:ad:60:0b:f5:e3:34:f7:27:d3:50:e7:f2:e7:
         59:15:a7:3b:d5:a4:06:9a:2d:63:b0:5c:58:7a:99:2b:47:5f:
         2f:78:43:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPIjpWa4O9M5RYeV59WINdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1
YmNjZWMwHhcNMjUwODA5MTQwMDQxWhcNMjUwODEwMTQwMDQxWjAzMTEwLwYDVQQD
EygzMWRmMjcwMzQxMzJiN2VmZDZmZDdlZWQwZjdkYmEzZDFlOGIxNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXR+C3NoOKr67iR7vyRpASiO3PYI
Ax/CY6ZjGYnsDz1K3GjNElOc/q0nhp1XgmVfbAH3X0qsSQzdkAdwSzsCnUblMT6p
NRT7up5mAQN4zYRzvUzBrnUqfeU3ejzNpG7V679SsBqIrCz+Pi4ezqQf3Sbza6Wb
VR5Fr8uLnSpDqtPPcE+THSOu7xPop5xxYH9u/Lno6tivxTQ9neiMfoVdSw75AiPn
K+mOre1l2Lf5KODgg8uptcFF+xpEplveaGTfRFPvVHpoyVVZ5Ip9L8bZyIGl0RG5
jb6gV/4RD68c9MZ/YR/aFX6EdoPlSamNsEji3Ahf5fHKpUxY0USoaN4xtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHfJwNBMrfv1v1+7Q99uj0eixeYMB8GA1UdIwQY
MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt
MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz
LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjr3OcMr
72UdmOir0Xzp6zCxyTIDbZzwWOEcyWqlgVUMwO0M/EHnakO6NZbFEZJwGc6MMoi9
sPPqqkezcWns7W/exTT1dAPBqheS/Q2w9sX5SU2GXzA4RY3B7AO6Br5wmzfzDNEs
GaUe+cK71jIViDea5XLUum/cNbzu4lg5Lj0ClEv78OdynX85dB8z70+I2VQISelQ
+0rR2NlBlAmuuU8FZdW3jO+EUEBtS9432xaDzOw2eS+Zu3FVvXaRoYuKZO8gPoY/
1ay2Le3Jl16KolRPUgdXUmcZktyCh0GtYAv14zT3J9NQ5/LnWRWnO9WkBpotY7Bc
WHqZK0dfL3hDEA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:25 2025 by rpki-client