Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
File:                     5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft (raw, json)
Hash identifier:          9psNXk5539u0Ru/ll9Nznh2D6gf5DAQjvsEDTlD1818=
Subject key identifier:   EE:AD:B9:80:E1:97:1F:1F:71:F6:8A:82:EF:35:C4:A4:42:8F:89:E9
Authority key identifier: E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
Certificate issuer:       /CN=e5c04c019bc693650428558551facd222080126d
Certificate serial:       0198820B5D775451391FE5291F50C5020657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
Manifest number:          02C8
Signing time:             Thu 07 Aug 2025 01:00:39 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:39 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:39 +0000
Files and hashes:         1: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl (hash: ozfrZpxO3JKk6qaLkFoK6Gdf8VK8bvdKKhrVRtSxusg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:5d:77:54:51:39:1f:e5:29:1f:50:c5:02:06:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c04c019bc693650428558551facd222080126d
        Validity
            Not Before: Aug  7 01:00:39 2025 GMT
            Not After : Aug  8 01:00:39 2025 GMT
        Subject: CN=eeadb980e1971f1f71f68a82ef35c4a4428f89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:2f:09:4d:3a:f6:d5:7d:18:b5:a7:49:01:
                    91:cb:e5:cc:66:af:50:46:f1:66:43:ac:13:8d:6d:
                    86:cf:4f:8e:41:76:77:91:98:b4:4f:d9:7e:18:f1:
                    0b:4d:9c:ae:8e:69:1d:c8:54:aa:a4:25:fe:f6:0b:
                    9d:e0:91:03:6b:0a:7b:36:83:6a:da:9a:2f:59:2b:
                    d8:da:7f:5a:20:40:61:ea:eb:a1:b2:76:66:f0:12:
                    48:b5:a2:b6:d3:2d:7e:07:09:ad:df:ce:08:97:61:
                    cc:70:b9:2a:93:96:4b:63:ff:89:bf:1a:ea:4d:9c:
                    f5:be:8c:7a:ba:68:21:35:cb:0c:99:31:7f:48:11:
                    27:88:7f:63:2f:d7:06:17:7d:4d:ef:ee:7e:f9:15:
                    e9:da:c4:0c:34:35:48:e9:e0:31:d7:1c:85:ea:6e:
                    db:56:c4:81:66:2e:c1:a1:d6:40:32:64:a4:34:61:
                    b6:fd:fb:0c:81:d4:fb:64:22:28:00:d6:8b:cc:bf:
                    fe:65:ba:db:84:34:e5:36:db:33:e2:8e:fd:06:88:
                    32:c1:5d:e1:2a:96:10:2b:02:36:9e:a6:6d:ab:01:
                    f9:27:8b:1c:9d:4a:85:f2:22:1d:6d:9d:01:df:cd:
                    35:74:7f:c7:71:1f:6e:e3:98:9e:c3:e5:fc:27:ce:
                    8a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AD:B9:80:E1:97:1F:1F:71:F6:8A:82:EF:35:C4:A4:42:8F:89:E9
            X509v3 Authority Key Identifier:
                keyid:E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:82:b0:37:d5:cf:d1:7d:92:5d:6e:b2:0c:52:9a:77:d5:6a:
         ac:db:e8:c9:49:13:5c:d3:32:22:8c:39:8b:23:4f:9f:d2:e3:
         04:ab:a0:67:ba:1a:ba:28:06:f1:9d:13:3b:49:5f:d5:89:0b:
         5c:81:f3:a6:49:4e:8a:4f:6f:f5:d6:8b:07:2f:df:77:e6:35:
         45:06:4f:7d:24:74:e2:82:de:93:ab:48:a2:56:09:08:29:00:
         ae:87:47:11:ff:a8:c3:2c:83:68:6f:c4:90:0b:9d:f0:71:53:
         a5:1f:bb:0d:5d:9a:ac:f5:91:7f:7f:c1:ee:0d:29:37:f7:23:
         62:2f:78:2c:28:59:af:ec:65:b9:17:35:b1:72:ac:1c:96:4e:
         f8:cc:1f:21:8a:61:76:21:03:fe:0b:43:75:b1:a8:6d:80:9a:
         24:10:4d:5c:25:4d:3a:80:3e:e2:3a:df:9e:d4:f4:ae:c4:9d:
         8b:df:0a:b4:d5:af:96:b0:27:b7:13:6f:0a:a7:9b:d1:0c:45:
         9e:5d:cc:0e:2b:f2:4f:5f:f3:e7:d4:8f:be:31:8d:ba:2e:a6:
         32:82:31:81:4f:05:a2:7f:49:5c:f0:70:05:a8:fe:33:70:fb:
         be:a5:8d:18:c2:90:d5:e0:f9:be:25:e6:cd:b1:4d:a4:71:4f:
         00:20:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:00 2025 by rpki-client