Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          p3ziFcx37p//bqERbu+f2H42/S8UqlTx1ILtOi1qeBc=
Subject key identifier:   B5:A2:42:17:C8:99:CA:79:38:AB:B2:5D:C9:79:15:65:CA:23:3C:74
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       019872CF82A0172A538E3B0C7D884ACA5B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0C2C
Signing time:             Mon 04 Aug 2025 02:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:58 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: /oOqWwOY9QeV/Pol59gq97rExNU53ThUZ/D91DOgQZs=)
                          2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:82:a0:17:2a:53:8e:3b:0c:7d:88:4a:ca:5b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Aug  4 02:00:58 2025 GMT
            Not After : Aug  5 02:00:58 2025 GMT
        Subject: CN=b5a24217c899ca7938abb25dc9791565ca233c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:70:a0:4f:a7:fc:5a:b0:53:12:c3:45:42:
                    5d:93:8f:65:a3:6b:f3:1e:c4:fb:94:4a:d2:f5:85:
                    ec:8e:04:ba:35:84:5e:d6:a9:f5:1e:79:58:b3:f5:
                    31:e2:9b:5d:76:02:5c:73:b8:e0:9a:76:0f:5a:4b:
                    98:20:a8:69:e1:fc:63:65:fe:85:00:fc:d9:e4:34:
                    9e:de:a3:58:9b:e6:b4:bd:33:91:6f:c7:8e:cf:31:
                    01:18:05:5a:06:0b:14:47:52:18:15:bc:d5:33:a3:
                    dd:66:c7:ba:94:e4:79:05:37:32:be:b8:97:ef:cc:
                    42:09:0c:b3:34:3f:78:eb:c8:2d:5d:b3:a2:e5:3a:
                    2a:9a:6d:72:02:10:a1:7c:28:34:4d:61:08:4d:54:
                    14:b8:fa:0d:50:0a:71:f7:d5:bb:f6:07:ee:67:21:
                    3c:b5:79:36:38:0f:c2:3f:b3:bc:7b:4a:69:3f:c7:
                    db:d7:87:a6:ff:47:90:fc:0b:d0:8f:a9:61:25:5e:
                    87:ef:ed:5d:ff:c7:2b:58:a1:a6:3a:dc:25:69:81:
                    4c:3d:46:3f:75:cf:0a:ad:dd:2b:5e:8b:15:16:54:
                    4b:34:9d:0b:4e:58:87:c9:d2:d0:c2:5d:6b:fd:20:
                    99:fc:d0:63:5f:e5:43:9b:60:7a:e1:97:bf:31:40:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:42:17:C8:99:CA:79:38:AB:B2:5D:C9:79:15:65:CA:23:3C:74
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:43:cb:9e:ef:e7:a1:80:80:d6:70:30:b1:90:de:b1:e5:
         d8:1f:63:86:d5:33:50:93:34:6b:92:6c:f4:22:f1:3e:af:0a:
         dc:65:3f:55:04:20:a8:8d:81:1c:a8:4d:a5:22:78:dc:fe:92:
         37:2f:15:ff:1c:a6:e8:0e:0a:4a:9a:f1:ec:b1:bd:7d:12:05:
         af:7b:45:7e:2f:53:b8:8d:d5:65:a5:81:60:e9:40:17:2c:82:
         ba:ac:50:0a:73:4d:f8:00:57:35:33:18:9f:29:44:74:c3:dd:
         69:62:c4:5b:3d:f1:88:7f:fc:20:3b:ef:cc:85:f9:24:6a:79:
         da:2f:54:cd:96:9c:a5:4f:bd:46:c0:97:5d:3e:fa:42:b7:ab:
         c6:39:1c:61:60:24:4f:4a:73:76:ba:e6:60:a7:e7:3b:94:42:
         bd:5c:26:44:2a:16:f1:51:c3:7f:4f:cc:07:59:06:24:47:29:
         a7:3c:20:d3:70:33:f8:91:76:ee:c3:c8:21:37:bf:96:43:0b:
         97:6d:d6:4f:8c:23:05:fa:c7:11:92:e0:3b:43:d2:cc:8a:8e:
         19:ac:18:18:7f:0e:18:b7:69:78:35:51:35:44:ff:e8:08:a4:
         32:ca:b3:2c:12:ce:c1:45:da:86:23:b4:28:c1:3c:b8:8c:e9:
         9d:ff:cf:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz4KgFypTjjsMfYhKylt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDE3YjEzNjUzZmYxZTNlNzgyMmViMWU1ZTBhMTdmNGQ0
Zjc4ODEwHhcNMjUwODA0MDIwMDU4WhcNMjUwODA1MDIwMDU4WjAzMTEwLwYDVQQD
EyhiNWEyNDIxN2M4OTljYTc5MzhhYmIyNWRjOTc5MTU2NWNhMjMzYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNZwoE+n/FqwUxLDRUJdk49lo2vz
HsT7lErS9YXsjgS6NYRe1qn1HnlYs/Ux4ptddgJcc7jgmnYPWkuYIKhp4fxjZf6F
APzZ5DSe3qNYm+a0vTORb8eOzzEBGAVaBgsUR1IYFbzVM6PdZse6lOR5BTcyvriX
78xCCQyzND9468gtXbOi5Toqmm1yAhChfCg0TWEITVQUuPoNUApx99W79gfuZyE8
tXk2OA/CP7O8e0ppP8fb14em/0eQ/AvQj6lhJV6H7+1d/8crWKGmOtwlaYFMPUY/
dc8Krd0rXosVFlRLNJ0LTliHydLQwl1r/SCZ/NBjX+VDm2B64Ze/MUCX1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWiQhfImcp5OKuyXcl5FWXKIzx0MB8GA1UdIwQY
MBaAFObRexNlP/Hj54IuseXgoX9NT3iBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYt
NmFjZDU4MWQ0YjBmLzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYtNmFjZDU4MWQ0YjBm
LzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL9Dy57v
56GAgNZwMLGQ3rHl2B9jhtUzUJM0a5Js9CLxPq8K3GU/VQQgqI2BHKhNpSJ43P6S
Ny8V/xym6A4KSprx7LG9fRIFr3tFfi9TuI3VZaWBYOlAFyyCuqxQCnNN+ABXNTMY
nylEdMPdaWLEWz3xiH/8IDvvzIX5JGp52i9UzZacpU+9RsCXXT76QrerxjkcYWAk
T0pzdrrmYKfnO5RCvVwmRCoW8VHDf0/MB1kGJEcppzwg03Az+JF27sPIITe/lkML
l23WT4wjBfrHEZLgO0PSzIqOGawYGH8OGLdpeDVRNUT/6AikMsqzLBLOwUXahiO0
KME8uIzpnf/Pdw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:16 2025 by rpki-client