Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File:                     5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier:          FxdDB3u5gvDFrc9H7E+FfA9D4gcN1MM/3AS0WmZg4WQ=
Subject key identifier:   5F:5A:73:71:72:2A:D2:58:E7:4F:14:94:9A:FC:DD:C5:2E:03:EB:ED
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer:       /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial:       0198737430DBCDE0DA3165747AB962271FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number:          0572
Signing time:             Mon 04 Aug 2025 05:00:51 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:51 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:51 +0000
Files and hashes:         1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: PD0dQeUr3WSIMJsgHB5N6SeDT7RmZLgLxNzlC9ykM34=)
                          2: fv9GU78KTThVylwpUoVkrE_AXzQ.roa (hash: nnsqZgD7w8A2HHvf/0xUBOlqX3ZvvzafFDRwPNk7+QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:30:db:cd:e0:da:31:65:74:7a:b9:62:27:1f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
        Validity
            Not Before: Aug  4 05:00:51 2025 GMT
            Not After : Aug  5 05:00:51 2025 GMT
        Subject: CN=5f5a7371722ad258e74f14949afcddc52e03ebed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:42:bb:97:78:ed:1c:75:67:b5:71:40:4f:
                    c3:fd:39:8e:5c:ed:09:ee:12:23:7c:99:22:8b:34:
                    91:b1:10:51:a4:07:13:e8:67:1e:56:9f:17:66:16:
                    ae:95:d5:25:ee:f1:8f:c5:ac:d3:3f:fb:e7:ed:3f:
                    12:42:d3:2b:57:cd:21:1d:9e:7a:27:15:bf:70:a2:
                    2c:f2:23:cb:29:6f:19:a5:e7:a3:0a:cd:ad:24:c8:
                    69:89:12:c3:e4:f2:1e:6b:55:29:89:64:6e:a2:a6:
                    90:09:bc:f7:ff:c0:e9:61:d8:3f:51:f5:d4:03:b9:
                    a7:61:e5:97:d1:b9:98:c2:63:04:c9:a9:81:11:49:
                    aa:0b:df:f5:ed:8d:02:e0:15:b0:01:03:8e:7b:c6:
                    89:ed:2b:f9:e7:46:9e:e1:be:37:0c:53:3c:4e:1f:
                    43:8d:a2:07:63:cc:1f:8c:a1:40:b4:0a:18:e5:c7:
                    9d:9d:b6:98:63:0a:56:0f:77:b8:2b:48:af:ed:9e:
                    55:6e:c4:58:78:0e:c8:c6:fc:81:2e:e9:42:82:51:
                    22:75:0a:4e:0d:24:54:0a:4f:7b:bc:51:fc:b5:c6:
                    08:ee:46:3b:e8:a7:f1:6c:2d:37:ba:76:d1:ce:4f:
                    32:3a:76:41:53:7c:e3:19:8d:bf:01:35:66:38:00:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:73:71:72:2A:D2:58:E7:4F:14:94:9A:FC:DD:C5:2E:03:EB:ED
            X509v3 Authority Key Identifier:
                keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:36:b3:bf:88:bf:32:8f:d9:4a:cf:1a:cc:05:8d:cc:cf:09:
         b0:71:ae:c7:fe:49:5d:45:1c:44:71:fb:f0:96:63:0b:42:b9:
         21:74:6b:23:9b:fa:1f:14:e9:bd:4a:1e:51:02:a3:f2:34:cb:
         f5:b2:55:fb:28:60:92:0b:c0:d0:cc:65:66:8b:ff:a6:89:98:
         e3:53:9d:0d:8d:f2:2f:b3:3b:57:09:4b:93:c8:15:6f:d6:22:
         e7:e8:c3:ca:6f:fc:da:c8:19:c4:b5:8c:52:53:df:da:22:90:
         f6:39:e6:f7:74:94:b8:14:78:0d:20:6b:ab:bd:57:f9:9c:0f:
         e3:e7:7f:69:66:49:db:ac:0f:01:32:b1:ef:8a:6f:44:be:1d:
         24:41:f2:54:3f:c2:44:66:90:b4:3e:24:a5:49:0e:a3:fb:0c:
         78:8c:f3:5a:2f:f3:e3:65:37:49:f8:8d:b6:0a:35:b5:8a:f2:
         1d:7e:4b:a6:4b:66:3c:68:fb:d3:82:98:ae:a5:93:79:2e:68:
         aa:0b:5e:76:d0:eb:82:15:3b:b7:79:62:30:36:ef:68:70:90:
         c3:b4:5e:af:e9:a7:af:74:06:48:c6:b8:29:65:59:45:96:75:
         ef:9b:f7:2d:ce:ea:c7:a0:b8:24:23:65:45:8a:8c:63:8e:11:
         6f:22:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:21 2025 by rpki-client