Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          8te66Wrd8RZa39vdxOkKcsj2DtH78tJ4SrN/0peM7Rc=
Subject key identifier:   3C:2D:92:D5:7A:5A:B7:52:CB:56:C5:BE:A6:3D:2E:6F:78:15:59:B2
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       019872CF302B1CC94DB855667C6D34B522B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          0604
Signing time:             Mon 04 Aug 2025 02:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:37 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: GWipzkth+6unx9z926cM1y5OZGbmxwp+filtymbQ234=)
                          2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:30:2b:1c:c9:4d:b8:55:66:7c:6d:34:b5:22:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Aug  4 02:00:37 2025 GMT
            Not After : Aug  5 02:00:37 2025 GMT
        Subject: CN=3c2d92d57a5ab752cb56c5bea63d2e6f781559b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5c:7f:14:12:06:01:25:29:79:ec:f6:8f:6d:
                    55:2b:1a:22:29:20:14:8d:91:36:61:bd:84:ad:1b:
                    1a:8d:80:b8:d9:a5:15:a2:d0:33:ec:7e:b2:77:2c:
                    50:ff:5b:ab:c8:ef:6f:9d:09:ad:24:4d:39:90:fd:
                    ce:5a:a2:c9:1f:df:cd:02:77:d3:66:6f:da:e0:4a:
                    9c:11:20:b8:fe:3b:5f:1c:20:ce:17:f5:04:9a:be:
                    52:21:83:86:e7:c8:0b:6e:a5:85:6b:17:48:60:05:
                    f0:7f:8e:18:6a:3f:4b:55:35:b4:71:ae:96:b6:c7:
                    40:99:16:d8:c0:80:c3:f9:c2:75:5d:b9:3d:d2:5b:
                    ec:9e:62:85:45:87:7d:bc:20:3f:0f:9c:2c:96:33:
                    02:62:25:82:5e:90:36:76:40:05:ab:f6:f9:05:12:
                    20:3f:ee:22:a4:7a:bd:5a:e9:71:78:27:d1:cd:ac:
                    00:d5:c1:6c:ae:b4:ff:ef:a6:e9:92:16:27:81:f5:
                    9f:b1:f0:88:16:97:a8:cf:14:7f:17:83:e3:63:fe:
                    30:d9:4b:d0:47:38:8d:f3:21:68:35:c9:bd:f6:c2:
                    0a:48:e2:b0:d1:2c:89:e0:33:78:aa:b5:e8:8d:9c:
                    6a:e4:12:55:67:3a:a6:7c:7a:ed:03:d5:dd:60:ca:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2D:92:D5:7A:5A:B7:52:CB:56:C5:BE:A6:3D:2E:6F:78:15:59:B2
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:51:90:c3:f3:d3:a4:d1:f0:46:f5:e8:40:89:6c:93:4b:02:
         a8:17:28:d7:74:fe:5c:54:3d:cc:c6:66:ad:70:b9:26:32:4d:
         10:ba:5c:46:1b:02:61:ee:19:58:25:11:30:45:2f:a7:0a:3f:
         8a:7c:9a:cd:aa:58:e2:e8:cc:98:b4:e5:f1:08:f8:c7:2d:2d:
         ee:91:84:15:6d:b0:25:5a:9f:3a:5b:71:7f:e6:4a:03:ad:d4:
         c9:56:8c:18:e5:65:cb:39:09:81:6b:69:4d:e9:2a:37:4e:20:
         12:ef:46:b1:a9:1a:41:f5:d3:60:05:17:89:4d:da:e1:52:62:
         09:3a:42:ad:a2:90:39:42:87:64:79:c3:f8:14:1f:c0:10:78:
         53:af:31:e5:27:13:a3:a6:a6:57:94:29:04:e8:9d:3b:43:40:
         d6:6f:e7:1a:a0:de:c5:ee:36:d3:49:9f:7f:04:f7:3a:17:32:
         d1:a2:16:47:aa:89:c8:28:43:80:7d:36:c6:7f:53:08:54:42:
         ae:2d:00:cb:35:1a:6c:3a:8d:3b:52:fa:12:84:4c:4d:fc:d9:
         5c:d7:8a:5c:d0:29:74:46:5c:6c:28:fe:74:9e:3a:5f:f5:8a:
         19:16:d5:c9:ee:8e:d8:93:63:11:e7:b3:a3:1f:56:04:a9:3b:
         31:38:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:39 2025 by rpki-client