Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
File:                     5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft (raw, json)
Hash identifier:          ut9nmI0nHGHSZzo4pBnQ2fvEgRkEZbAxSlGLwNio+W4=
Subject key identifier:   45:AF:F9:69:B2:F3:79:8C:F3:E8:3D:56:79:8D:5A:B2:F3:11:E5:33
Authority key identifier: E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06
Certificate issuer:       /CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
Certificate serial:       01988FFE1F8B9219B596486171DCC25CE67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
Manifest number:          0D05
Signing time:             Sat 09 Aug 2025 18:00:52 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:52 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:52 +0000
Files and hashes:         1: 5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl (hash: +YBMNnnreme2Qr23qvB36MuKkciH5qI1s3PPliFopqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:1f:8b:92:19:b5:96:48:61:71:dc:c2:5c:e6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b91b19f4bdbd6ff1d7f372d3a0dd1390050006
        Validity
            Not Before: Aug  9 18:00:52 2025 GMT
            Not After : Aug 10 18:00:52 2025 GMT
        Subject: CN=45aff969b2f3798cf3e83d56798d5ab2f311e533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:98:3e:d9:a5:6e:f7:02:92:f7:88:44:e1:
                    65:f9:63:5e:13:79:b3:b6:f3:78:a5:e8:77:d9:7f:
                    d7:e1:4b:fd:f3:89:92:6a:c5:3b:a4:b5:33:85:cc:
                    48:47:bf:2e:ea:5e:57:f5:96:8a:97:26:63:2b:2b:
                    2b:ee:19:2f:bb:b9:83:1b:76:dc:97:25:19:f9:f9:
                    61:43:0d:88:34:26:00:0a:ac:8c:61:54:ca:e9:d7:
                    45:8f:dc:08:49:5e:7e:d2:91:79:af:43:a6:ac:bf:
                    f8:de:13:74:af:08:cf:c1:f5:14:3b:0c:6d:b1:0a:
                    b9:3e:18:e4:45:7a:43:61:be:d3:4c:56:9e:08:a6:
                    69:5c:45:2e:d5:2e:72:c6:6b:a5:58:7a:5e:7e:0f:
                    e6:fb:9b:c6:6d:f7:97:5c:3b:12:b3:fa:94:5b:c8:
                    f4:45:30:a0:74:02:23:fc:a7:68:f7:ad:4e:cd:bf:
                    ce:aa:d3:bc:64:26:c3:c7:fc:d0:99:88:e8:e2:55:
                    d3:74:8f:9a:88:5c:b8:64:29:9b:f0:ff:7b:62:07:
                    61:1c:04:cb:49:2f:7d:a9:ff:1c:40:91:0e:a5:47:
                    b7:2d:85:ea:76:65:cc:f9:39:d6:06:32:ad:57:38:
                    37:92:c6:91:45:b6:fc:8a:66:a1:48:de:f8:04:83:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AF:F9:69:B2:F3:79:8C:F3:E8:3D:56:79:8D:5A:B2:F3:11:E5:33
            X509v3 Authority Key Identifier:
                keyid:E6:B9:1B:19:F4:BD:BD:6F:F1:D7:F3:72:D3:A0:DD:13:90:05:00:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rkbGfS9vW_x1_Ny06DdE5AFAAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/931545-cf7b-4d58-bed7-04b528fae03a/1/5rkbGfS9vW_x1_Ny06DdE5AFAAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:4d:ac:38:4b:73:d0:f0:80:56:34:24:55:42:24:f5:e9:
         66:0a:39:83:e1:65:39:4a:44:5b:27:bb:b1:2c:c1:73:5f:e9:
         31:90:fd:e4:cd:2a:75:fd:cf:24:b2:e6:f2:1e:4f:4e:5b:4e:
         52:f1:5f:c8:82:09:d0:1a:5b:01:9a:32:a6:69:fb:13:27:18:
         cb:f2:ff:c4:4b:cc:c8:4a:5e:ec:46:60:c7:8d:c9:55:b6:15:
         ce:3a:27:00:cb:76:13:29:de:f3:6e:d5:53:24:0e:2b:e5:a2:
         38:6a:1c:f4:23:3d:df:01:00:aa:ed:cf:ad:6a:b7:98:e0:fd:
         3a:41:91:85:d5:44:85:ac:d9:1b:96:61:09:79:42:78:97:b7:
         a3:83:1d:fc:6c:80:bb:a4:44:cd:53:37:44:82:3d:7f:92:b2:
         2a:9a:a3:c9:63:62:ab:ec:d9:42:24:e5:49:c9:0e:87:f7:9d:
         27:42:87:49:f9:02:0d:1a:b4:a9:6d:a0:7c:d7:a0:22:89:98:
         a2:91:0c:d7:94:dd:e3:99:a0:76:9b:37:4c:14:a0:2b:dc:2f:
         95:32:6d:05:89:18:b4:f8:4a:0c:d0:32:0e:57:a1:85:da:7f:
         29:df:cd:a1:d8:d8:1e:72:9b:f2:6b:02:9e:5e:e7:7b:30:13:
         ea:6b:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:40 2025 by rpki-client