Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          GBfynxMq4blXlE7phe8t3DB6Y7HLcOZ4Q8zCjNzIH4U=
Subject key identifier:   A8:93:AF:91:C3:54:80:63:98:D1:59:C6:E6:CB:BE:B9:47:4C:2A:E7
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       01988768ADD794EA762258AC899AF83AA099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          13DE
Signing time:             Fri 08 Aug 2025 02:00:41 +0000
Manifest this update:     Fri 08 Aug 2025 02:00:41 +0000
Manifest next update:     Sat 09 Aug 2025 02:00:41 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: wE4S4lHkVt8UigS1S4KI4Cvaby09/h/hLi120naSJaI=)
                          2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:68:ad:d7:94:ea:76:22:58:ac:89:9a:f8:3a:a0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Aug  8 02:00:41 2025 GMT
            Not After : Aug  9 02:00:41 2025 GMT
        Subject: CN=a893af91c354806398d159c6e6cbbeb9474c2ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:8b:f6:9f:98:0e:87:a0:92:54:c2:a3:ec:
                    5a:bd:da:fd:b6:0d:7c:e5:5b:81:08:de:a4:6c:6a:
                    83:a3:ad:35:c3:1f:2f:a1:85:8d:a2:3f:3e:3e:d1:
                    42:e4:31:97:bd:b1:ed:b0:b9:ce:76:be:57:45:97:
                    19:1e:9b:9d:5b:77:72:fa:ee:d0:11:f9:11:d7:2e:
                    0f:94:7f:4c:bc:b3:a7:90:0e:2e:10:cc:55:0f:c9:
                    bc:5e:57:fd:7e:8f:57:6e:08:a9:9f:2e:ae:62:cd:
                    8f:7d:b5:46:7e:00:90:1a:55:54:a8:c3:7a:23:b4:
                    99:f5:47:ca:47:eb:20:92:ad:ed:0f:55:87:dd:3a:
                    ee:4f:90:84:a2:05:b4:c6:62:8d:57:5b:26:b2:ef:
                    fb:e8:82:c8:39:fa:35:c9:19:7a:9d:0f:84:9a:54:
                    db:1a:17:d8:da:48:79:e3:c0:91:d9:8c:fc:0d:2b:
                    43:ec:26:d4:06:bf:69:1a:3f:96:e7:2c:5e:82:12:
                    ed:fa:4f:41:06:69:a9:57:06:b9:3f:57:41:e4:fe:
                    24:38:03:df:71:28:a6:e5:e0:82:49:d3:dc:a1:4c:
                    09:d2:f2:4a:14:e7:03:9a:f5:95:77:f9:6f:bc:00:
                    02:fb:e5:39:11:ba:00:59:82:3a:46:d8:41:02:7f:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:93:AF:91:C3:54:80:63:98:D1:59:C6:E6:CB:BE:B9:47:4C:2A:E7
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:a5:67:14:b2:cf:90:e5:07:0c:bc:0e:6b:c2:36:ce:78:
         5f:ac:f0:05:3f:42:27:e3:83:70:e5:6a:55:70:78:7c:42:4b:
         5e:a0:95:5e:54:40:84:66:5d:17:1c:08:f7:38:b0:d2:26:e8:
         91:e8:a1:9c:41:98:4a:35:35:03:60:98:58:87:9f:e9:b4:0e:
         56:7c:8f:06:1a:57:cc:cb:b0:ec:3f:ab:1d:28:59:e4:b1:fc:
         71:84:3d:9a:15:b9:32:46:f8:e7:35:40:40:4c:27:60:a8:b4:
         b2:2b:dd:00:7a:61:74:5b:4b:a0:fe:39:73:78:97:4a:3c:28:
         9d:82:32:24:31:13:f5:1e:b0:ba:2c:60:68:b4:8e:6a:ce:1f:
         95:28:20:62:07:e4:8b:4f:92:39:62:2f:b2:e8:fd:90:f8:0d:
         a3:f9:82:75:bf:59:4a:3c:4e:a6:8b:8a:7f:2d:6f:88:72:b6:
         12:dd:39:ee:0a:c0:bc:9e:b3:1d:03:a9:30:33:b6:e3:c5:43:
         66:dd:6b:46:ef:3c:b0:df:44:1b:c6:3a:a7:68:20:a1:49:6a:
         74:94:13:0f:2e:1b:58:fc:33:2a:67:f6:a7:2f:f1:e6:7c:9c:
         98:26:9c:11:c2:40:7a:54:0e:b7:a3:66:90:10:a7:31:08:bc:
         c3:65:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:14 2025 by rpki-client