Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
File:                     5bHedEPq8YzrBoiNfvk6VjWkrh4.mft (raw, json)
Hash identifier:          IjGVq7dzQ8j6BsYglsIpXYobk7skPsLgC2/rKwSIdSA=
Subject key identifier:   D2:E0:CB:20:7D:0C:1A:86:14:D4:B4:6D:48:63:63:8F:92:DB:B7:78
Authority key identifier: E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E
Certificate issuer:       /CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
Certificate serial:       0198A0F213730F5685E8ED52A8B2FD0ADA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
Manifest number:          0CED
Signing time:             Wed 13 Aug 2025 01:01:15 +0000
Manifest this update:     Wed 13 Aug 2025 01:01:15 +0000
Manifest next update:     Thu 14 Aug 2025 01:01:15 +0000
Files and hashes:         1: 5bHedEPq8YzrBoiNfvk6VjWkrh4.crl (hash: ecHVgaNQ+01r2q+oQ9qkuUlzyHRRd9YaDHtGOGZBy9E=)
                          2: LPt_zehQ6PKVzp0MjfSZ8bhI3FI.roa (hash: 2Of6PA2/JSgV0uL+6WcJ1JnLHaSmd2yrbwOuprAZdu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f2:13:73:0f:56:85:e8:ed:52:a8:b2:fd:0a:da:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b1de7443eaf18ceb06888d7ef93a5635a4ae1e
        Validity
            Not Before: Aug 13 01:01:15 2025 GMT
            Not After : Aug 14 01:01:15 2025 GMT
        Subject: CN=d2e0cb207d0c1a8614d4b46d4863638f92dbb778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:a8:4e:ea:68:55:7b:01:a9:e7:cb:8c:b5:
                    96:5f:d7:05:fc:56:4b:50:2a:71:75:12:b1:fc:5a:
                    67:d1:1a:c7:1d:48:41:cc:00:90:cb:f1:1b:de:11:
                    8f:bb:04:03:92:e0:35:f2:3e:48:1c:62:b7:53:36:
                    ad:fa:0d:63:0d:f0:b5:b3:29:db:ed:74:05:71:4d:
                    05:1d:9b:90:f2:d1:52:66:5d:13:c8:33:7e:5d:ad:
                    8b:82:23:08:a2:36:ac:7b:9a:67:a2:3b:1a:e6:08:
                    7f:b4:3e:b6:e7:3a:29:d7:79:54:b0:b5:c9:33:3b:
                    f9:72:e7:e4:51:e0:2b:96:b8:c8:96:88:8a:ad:b3:
                    c9:41:ab:a4:f6:8a:f1:09:02:f5:70:f5:7a:99:40:
                    71:c1:b4:f3:6d:56:37:27:f0:99:ee:8c:ea:44:78:
                    e4:af:0f:27:ab:cb:ed:58:2a:3d:d1:bd:87:b8:48:
                    46:06:e0:35:35:77:73:4e:87:67:7c:9f:67:eb:69:
                    82:86:07:80:77:d3:a8:a6:8c:2a:49:30:e9:d1:ad:
                    bb:7b:c9:62:9a:9f:ba:8c:c0:c2:f3:f4:55:18:69:
                    0d:43:7c:97:f5:88:e2:18:30:57:f7:1b:3a:1b:b7:
                    68:83:59:87:6b:33:17:2b:0f:eb:48:f1:61:20:5e:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:CB:20:7D:0C:1A:86:14:D4:B4:6D:48:63:63:8F:92:DB:B7:78
            X509v3 Authority Key Identifier:
                keyid:E5:B1:DE:74:43:EA:F1:8C:EB:06:88:8D:7E:F9:3A:56:35:A4:AE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bHedEPq8YzrBoiNfvk6VjWkrh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/784838-0e3b-46ba-8595-d8f6ab83b533/1/5bHedEPq8YzrBoiNfvk6VjWkrh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:59:21:f3:58:ad:8a:ad:2c:00:c1:8a:64:b1:1d:08:5b:
         73:79:67:79:fb:3c:c3:43:c9:7d:dd:d2:b6:bf:a8:4c:06:fe:
         3f:a0:6a:1b:70:54:08:8a:57:7e:70:4c:c2:9b:70:86:d6:fd:
         90:56:0a:cc:c0:1c:27:47:a7:e8:5c:fa:6e:90:88:5d:dd:ff:
         8f:08:dd:75:64:0f:7c:fb:ee:2b:48:7b:b3:e0:e6:a0:c9:17:
         6f:b0:8e:f0:cf:55:5e:d8:c1:8a:c4:c4:78:7d:9a:b2:24:70:
         0b:44:2b:f5:46:2c:9d:98:30:d7:38:0b:39:96:ca:37:72:4f:
         5d:11:00:bb:02:82:dd:51:f0:91:7e:0b:d2:88:4e:2e:af:cf:
         af:42:30:e1:14:19:a0:e0:3d:ad:f8:e7:97:17:1c:ae:ee:d9:
         7c:4d:91:df:2c:d0:40:c8:82:00:af:65:c2:e3:f4:76:83:db:
         e0:fc:11:3e:ee:89:96:50:ad:1b:cc:2d:a9:88:f0:26:26:34:
         4c:9e:f1:9d:66:b5:40:36:cd:b6:91:c2:63:b2:dd:54:13:e4:
         5e:cf:96:b4:f1:15:53:44:ac:99:75:1a:e7:b5:9e:bd:40:c0:
         de:cf:92:ba:f5:f5:fa:1e:a4:5f:d3:fe:fa:4a:b6:93:30:ab:
         f7:1a:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:04 2025 by rpki-client