Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File:                     5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier:          RWC384HwUIBwpJt2TUobV13uN0Nn9bIL5euMuEObI/I=
Subject key identifier:   6D:C6:4D:8C:00:E7:9C:98:77:79:AB:FC:D8:0B:A8:BE:4A:67:3E:78
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer:       /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial:       0198752B83ECE06F13A9857F1D3A814CFF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number:          0335
Signing time:             Mon 04 Aug 2025 13:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:42 +0000
Files and hashes:         1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: NV5PcHFvW2iX/scavhf9g/42ujZdSj6bgSf53idtAW0=)
                          2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:83:ec:e0:6f:13:a9:85:7f:1d:3a:81:4c:ff:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
        Validity
            Not Before: Aug  4 13:00:42 2025 GMT
            Not After : Aug  5 13:00:42 2025 GMT
        Subject: CN=6dc64d8c00e79c987779abfcd80ba8be4a673e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:b2:e1:8f:a6:b9:e3:fd:bf:cb:b4:64:c6:
                    92:e8:72:0c:be:38:a3:01:88:d7:46:36:04:2c:92:
                    5e:e6:e2:70:b8:01:87:b9:87:7e:63:19:24:81:6d:
                    1b:04:90:a9:ff:38:69:47:3c:ab:b4:3d:69:fb:9f:
                    f8:44:fd:44:cc:a3:09:75:b3:61:1a:23:94:fc:fe:
                    f4:6b:56:22:30:5d:ba:47:ed:4f:6e:cd:39:35:d2:
                    64:6b:78:8d:65:99:1a:24:19:dd:f5:ca:89:19:1f:
                    63:4d:39:97:ec:2b:90:be:1d:e6:26:8d:09:6c:d0:
                    9b:a1:09:1f:74:fa:90:32:f3:1d:6c:12:e9:53:b2:
                    77:64:53:2e:41:ab:d8:f8:e4:a0:86:2f:5d:73:a1:
                    80:50:7b:1f:09:af:d7:1d:a9:ec:2d:dc:e6:cb:4c:
                    14:f3:bd:87:c8:e4:4c:bc:8b:de:7d:c1:1b:dc:9f:
                    7c:aa:4e:bd:42:1a:8d:33:80:69:fd:14:e9:34:67:
                    e7:3c:43:5c:f2:56:bf:ed:2b:f5:25:eb:64:ac:9d:
                    c1:1d:d4:53:d9:d7:35:1f:84:a9:87:a5:a9:4c:c4:
                    9a:de:61:69:1b:96:96:cc:6d:b2:4d:4d:bb:a5:20:
                    9c:68:ea:fb:ad:82:48:2b:0c:2a:0f:3c:a7:21:4a:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C6:4D:8C:00:E7:9C:98:77:79:AB:FC:D8:0B:A8:BE:4A:67:3E:78
            X509v3 Authority Key Identifier:
                keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:64:1a:b5:ea:97:55:0d:1b:02:bf:e8:0c:61:79:61:e6:
         3d:50:35:35:81:6f:1f:ca:0b:5b:87:eb:7c:90:fa:f3:79:90:
         79:8f:1f:4a:a0:a6:84:f0:12:92:9e:02:42:53:f2:a0:95:f3:
         34:f3:72:9d:ec:a4:c8:15:85:02:a4:12:8f:96:9e:5e:bb:2a:
         6f:cc:1e:12:d1:27:c1:18:f2:1c:42:0a:53:42:cd:ce:b2:e5:
         14:78:6d:f1:90:da:21:a2:0f:0f:c9:3e:fd:a8:95:3c:79:5d:
         7a:47:21:1e:cf:d2:12:c1:4b:62:83:a8:37:6d:21:37:06:42:
         3c:88:d6:27:57:31:fb:45:be:1f:f0:ea:7b:a2:3b:96:85:20:
         9f:d8:9d:4f:97:46:04:24:66:90:e7:74:4d:a8:fb:e9:a3:2a:
         bd:10:19:4e:95:3a:8e:1f:48:50:45:b4:f8:3b:8c:8d:b5:92:
         e4:4a:20:df:62:21:c2:5f:e3:c5:3b:d2:23:47:bd:00:96:1c:
         13:85:e4:45:07:ba:d5:2f:89:f3:a6:fa:87:3b:c1:75:32:51:
         c7:c9:92:1f:e6:39:04:83:9a:44:9b:d3:83:4f:51:b3:a9:75:
         bd:bd:03:43:e6:36:20:8f:bf:94:0e:e6:19:ac:9f:10:84:e6:
         f2:9c:84:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:10 2025 by rpki-client