Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
File:                     5UHTgH6p2K1130eFWJlQnubzKCA.mft (raw, json)
Hash identifier:          qBp+5sZkrFVd5uj18dePSN1QwhM4Mf7HpwF5Hu8en80=
Subject key identifier:   FB:55:CE:A6:A3:69:9A:BE:57:10:8F:AF:81:6E:A2:4D:5B:7C:4E:8B
Authority key identifier: E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20
Certificate issuer:       /CN=e541d3807ea9d8ad75df47855899509ee6f32820
Certificate serial:       019874507A1396E158AAD073EAD77AAEA838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
Manifest number:          0163
Signing time:             Mon 04 Aug 2025 09:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:27 +0000
Files and hashes:         1: 5UHTgH6p2K1130eFWJlQnubzKCA.crl (hash: bbjl7IE5NkpFq0gZRTKU6spX4njtZZyRYd8OuX38GvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:7a:13:96:e1:58:aa:d0:73:ea:d7:7a:ae:a8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e541d3807ea9d8ad75df47855899509ee6f32820
        Validity
            Not Before: Aug  4 09:01:27 2025 GMT
            Not After : Aug  5 09:01:27 2025 GMT
        Subject: CN=fb55cea6a3699abe57108faf816ea24d5b7c4e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:33:d4:d3:80:06:ad:b9:34:db:16:e6:7a:
                    57:3d:e8:20:7b:b3:8e:8c:d4:60:a2:72:f4:b0:e2:
                    b0:40:56:14:66:2a:b4:42:97:a1:56:07:6f:6c:63:
                    1a:d8:d1:94:16:d1:80:5b:1d:85:7a:83:1e:28:71:
                    6b:91:32:e0:b7:e9:43:fb:99:32:15:1a:58:c4:86:
                    f9:4b:76:fb:e8:ed:51:8a:b4:63:b5:14:6f:06:34:
                    53:b0:fa:d9:63:41:65:47:a5:6a:dd:7a:30:84:96:
                    45:7a:12:aa:be:3d:32:e6:e0:c5:15:fc:ed:65:36:
                    e4:6c:91:4c:eb:e2:d2:52:66:26:03:cf:e5:2f:c0:
                    79:d7:2c:fc:98:f3:60:47:32:a9:39:7c:d0:9f:8f:
                    48:36:b0:89:7b:2b:75:d4:a9:c3:e4:81:8d:c0:22:
                    1c:c0:17:56:e9:be:33:c4:e4:ae:8a:85:87:cc:56:
                    3f:2a:9e:f4:73:12:94:4c:72:6f:6b:bf:55:0e:7f:
                    01:b1:aa:03:76:cb:79:03:4b:0e:16:35:d7:ef:85:
                    18:1c:10:a6:22:51:5f:7b:f9:83:0a:b0:12:e9:fb:
                    2f:35:bb:33:ea:37:fd:3a:28:5e:68:36:73:4d:84:
                    cf:28:63:d5:33:45:05:2d:34:00:2b:ec:47:c4:10:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:55:CE:A6:A3:69:9A:BE:57:10:8F:AF:81:6E:A2:4D:5B:7C:4E:8B
            X509v3 Authority Key Identifier:
                keyid:E5:41:D3:80:7E:A9:D8:AD:75:DF:47:85:58:99:50:9E:E6:F3:28:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UHTgH6p2K1130eFWJlQnubzKCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2bae50-faca-4d4e-ae38-2d077b782c72/1/5UHTgH6p2K1130eFWJlQnubzKCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:e7:36:6e:5a:13:21:97:3e:44:01:5b:4b:9f:ae:22:3f:
         01:60:6b:b4:5a:b8:8e:7f:d4:a5:dc:d1:3e:0d:c1:4e:1f:79:
         f4:b2:43:b0:f0:0a:b8:3d:c3:7d:1d:de:c3:46:e6:f5:1e:84:
         8b:79:d1:c2:02:bc:87:94:75:57:e1:fe:a6:b2:45:11:99:94:
         7c:b8:3d:cf:50:1a:ce:63:90:07:55:06:df:c4:a0:e0:ef:d2:
         4d:02:cd:0d:a7:90:1b:48:26:b5:5d:bb:a0:60:de:25:5c:b9:
         ba:68:90:ee:3a:f6:d4:95:7f:97:4b:a5:3e:e1:c7:b7:9b:10:
         bd:ba:19:49:b9:46:25:71:99:f1:e6:11:3a:ed:51:66:eb:74:
         ef:d5:b0:55:71:00:ba:3e:df:05:ba:8a:e3:f7:36:5f:28:7e:
         bd:1b:b8:d3:dc:15:e0:8a:3f:df:3f:0a:d6:c7:18:29:50:68:
         12:57:56:bb:a7:d3:6e:4d:1b:ff:c6:de:7f:6c:62:62:1e:35:
         74:28:7d:ea:27:b1:04:6b:0a:fd:6f:b9:41:d1:7d:a6:5d:b2:
         02:1c:45:e8:90:3c:84:5c:27:c6:e1:96:7f:05:a8:de:b9:25:
         54:39:35:40:c5:07:e0:2c:ee:83:28:f6:9d:d5:8f:d5:05:06:
         37:24:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:06 2025 by rpki-client