Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File:                     5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier:          bplEvkeO98PEwdW27tZLpR7tIlGVtDfQGMYLgNbwWAg=
Subject key identifier:   E5:9C:61:64:8E:33:11:C0:DE:5A:97:EA:9B:CA:72:53:DC:B7:C0:03
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer:       /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial:       019891487419494969D9F00EE763221AAC28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number:          1475
Signing time:             Sun 10 Aug 2025 00:01:41 +0000
Manifest this update:     Sun 10 Aug 2025 00:01:41 +0000
Manifest next update:     Mon 11 Aug 2025 00:01:41 +0000
Files and hashes:         1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: 0i7X8+eRh55hWjTtn1BkXQ1/j2X6b5wYOO3KkuoRg2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:48:74:19:49:49:69:d9:f0:0e:e7:63:22:1a:ac:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
        Validity
            Not Before: Aug 10 00:01:41 2025 GMT
            Not After : Aug 11 00:01:41 2025 GMT
        Subject: CN=e59c61648e3311c0de5a97ea9bca7253dcb7c003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:cc:b3:44:f0:6e:a1:65:e4:73:e0:b6:35:
                    5c:55:ec:d4:f5:72:3e:f7:b7:96:a9:dd:e4:61:4d:
                    2b:62:47:05:09:ec:db:b1:ac:53:01:f7:41:8a:f4:
                    89:69:64:ba:ed:b8:c6:f5:23:54:ac:05:38:aa:8b:
                    7d:b4:60:89:64:a6:3a:8a:45:88:a6:33:db:c2:28:
                    d3:79:be:61:0d:18:84:7d:87:f5:d5:8c:a7:ca:55:
                    70:01:e3:02:63:1e:73:ef:7c:03:b6:fd:b3:f9:df:
                    43:9e:52:9d:13:86:6d:48:d7:88:45:54:56:b7:2a:
                    88:75:51:8e:d5:a3:6f:22:51:e8:5d:2b:9f:81:02:
                    3b:99:72:ec:3c:ff:f5:af:86:05:b8:cc:34:1a:7b:
                    03:61:2f:43:6e:ab:37:ec:06:38:f6:6f:ce:bc:1c:
                    2e:94:ef:6c:74:fd:a0:54:f5:05:73:02:1a:ab:e0:
                    23:82:b9:24:48:58:44:18:a9:c8:1d:ee:89:05:57:
                    79:98:be:e3:03:d0:14:8b:03:59:87:5c:d5:01:ca:
                    75:f3:8b:7e:4f:a6:c4:de:19:30:e1:d7:7c:37:a8:
                    bc:bd:54:f8:41:aa:2b:59:ac:54:a0:36:47:4b:6f:
                    38:fe:b3:ad:15:f9:f5:b7:17:5e:b2:27:12:0e:66:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9C:61:64:8E:33:11:C0:DE:5A:97:EA:9B:CA:72:53:DC:B7:C0:03
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:17:70:6d:00:0c:ac:38:2d:c4:a4:02:34:28:23:2c:88:83:
         04:d9:d4:34:af:84:51:ee:16:cb:4d:84:32:34:db:77:26:b1:
         82:ec:16:b0:c6:0c:26:cc:77:90:06:c2:f1:f8:e9:f1:6b:d9:
         ed:3f:f3:fd:6a:01:fa:d8:84:c6:94:cf:74:2c:ab:36:2c:a7:
         ed:39:19:92:30:74:29:4a:60:a8:a7:62:51:b1:b9:c9:59:f8:
         14:d3:18:69:67:6d:1f:a6:b3:cd:25:a5:58:11:c4:84:07:6d:
         ba:88:90:ce:e4:d8:98:35:df:02:30:77:50:b3:c3:be:79:91:
         ae:69:e2:62:68:a9:7c:45:46:87:a5:d9:d1:f1:17:1e:77:d2:
         82:32:86:38:1d:da:a1:85:9f:4f:f7:a2:cd:c3:b3:fe:1e:0b:
         e2:a5:d5:c1:00:d0:a4:dd:61:29:28:01:73:0d:29:de:97:94:
         17:db:25:c7:3e:14:81:97:34:08:b3:1c:6a:4f:c7:31:a9:df:
         f8:6f:04:ef:c8:b3:16:94:40:0e:30:65:52:60:b8:b8:ac:16:
         6f:c2:11:7a:c2:65:fb:f7:68:ed:71:91:73:42:04:d8:93:d3:
         82:20:1b:24:10:8a:95:1e:d5:d0:14:ad:92:04:8f:95:b8:1f:
         12:18:a4:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRSHQZSUlp2fAO52MiGqwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NzY3YjEzZDk5MDc5Y2E3MGZjMjk3OTg4ZGQ3OWVhYzQz
YTlmYTkwHhcNMjUwODEwMDAwMTQxWhcNMjUwODExMDAwMTQxWjAzMTEwLwYDVQQD
EyhlNTljNjE2NDhlMzMxMWMwZGU1YTk3ZWE5YmNhNzI1M2RjYjdjMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zMs0TwbqFl5HPgtjVcVezU9XI+
97eWqd3kYU0rYkcFCezbsaxTAfdBivSJaWS67bjG9SNUrAU4qot9tGCJZKY6ikWI
pjPbwijTeb5hDRiEfYf11YynylVwAeMCYx5z73wDtv2z+d9DnlKdE4ZtSNeIRVRW
tyqIdVGO1aNvIlHoXSufgQI7mXLsPP/1r4YFuMw0GnsDYS9Dbqs37AY49m/OvBwu
lO9sdP2gVPUFcwIaq+AjgrkkSFhEGKnIHe6JBVd5mL7jA9AUiwNZh1zVAcp184t+
T6bE3hkw4dd8N6i8vVT4QaorWaxUoDZHS284/rOtFfn1txdesicSDmYIwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWcYWSOMxHA3lqX6pvKclPct8ADMB8GA1UdIwQY
MBaAFOR2exPZkHnKcPwpeYjdeerEOp+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgt
NGIxZDk3ZGZlY2NmLzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgtNGIxZDk3ZGZlY2Nm
LzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABdwbQAM
rDgtxKQCNCgjLIiDBNnUNK+EUe4Wy02EMjTbdyaxguwWsMYMJsx3kAbC8fjp8WvZ
7T/z/WoB+tiExpTPdCyrNiyn7TkZkjB0KUpgqKdiUbG5yVn4FNMYaWdtH6azzSWl
WBHEhAdtuoiQzuTYmDXfAjB3ULPDvnmRrmniYmipfEVGh6XZ0fEXHnfSgjKGOB3a
oYWfT/eizcOz/h4L4qXVwQDQpN1hKSgBcw0p3peUF9slxz4UgZc0CLMcak/HManf
+G8E78izFpRADjBlUmC4uKwWb8IResJl+/do7XGRc0IE2JPTgiAbJBCKlR7V0BSt
kgSPlbgfEhikDQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:42 2025 by rpki-client