Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          48a3yYc9Ja29SLxe4xSOc1nDN8ULcMnjphbjtZSZcuI=
Subject key identifier:   5E:22:1E:6C:F3:D8:8C:10:29:2C:4A:63:C3:63:02:AE:39:EA:AB:FF
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       0198D7A96382242C1A39B70C58E6878846C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          080E
Signing time:             Sat 23 Aug 2025 16:00:59 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:59 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:59 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: 8WB8allf/Q1n0xA8Bkmq2zcr7IWSQMGp5cMCoFKZfDw=)
                          2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:63:82:24:2c:1a:39:b7:0c:58:e6:87:88:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Aug 23 16:00:59 2025 GMT
            Not After : Aug 24 16:00:59 2025 GMT
        Subject: CN=5e221e6cf3d88c10292c4a63c36302ae39eaabff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:0f:d1:e9:a3:a4:b7:c1:15:b6:78:2a:f8:
                    07:64:28:40:38:2d:cc:9a:cc:f7:c0:29:e7:30:de:
                    76:16:89:e9:6c:a9:a4:4d:ff:54:17:9c:65:c7:9c:
                    20:34:da:78:4e:44:a2:be:dd:f3:08:b2:e9:b6:c4:
                    4b:ce:a7:b6:c3:bc:8c:63:1d:89:e9:30:7e:03:fd:
                    a0:24:27:f9:81:b7:2a:ec:4f:76:8d:9c:b8:23:3d:
                    ec:bf:cc:0e:ba:16:40:93:4a:d2:d4:0a:f4:79:50:
                    1a:85:c3:3a:6a:be:f4:02:fd:7d:7e:bd:36:a2:f7:
                    7f:32:d1:59:33:b8:00:48:c0:e8:48:81:41:e8:c7:
                    a7:16:6b:ec:c7:43:e3:fe:ce:27:35:08:dd:96:83:
                    2d:7a:58:14:21:98:a8:68:64:dd:29:36:19:d4:94:
                    a7:d0:3d:10:09:07:43:76:0d:f4:93:92:00:74:9d:
                    1e:61:c8:77:1d:4e:23:c9:cd:92:3c:b2:e5:7b:11:
                    bc:0c:63:bc:c8:76:14:95:5a:b3:f7:5a:53:41:b6:
                    a4:02:18:ae:a0:06:13:14:69:62:8a:dc:17:49:58:
                    08:4c:0d:b3:58:49:d1:41:c3:6b:15:ea:b4:84:51:
                    67:16:bc:cc:39:39:d3:cb:9c:7b:50:49:c3:e8:15:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:22:1E:6C:F3:D8:8C:10:29:2C:4A:63:C3:63:02:AE:39:EA:AB:FF
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:04:df:d5:ef:57:25:a8:9d:b9:09:c1:98:bf:4f:d1:2b:
         11:a0:34:1e:c6:6d:fe:df:77:77:c7:dc:75:01:99:cc:ef:15:
         d5:38:b9:bf:98:1d:de:22:86:e2:45:d0:c5:07:6a:88:15:42:
         67:c9:47:73:9e:2d:1f:6d:ba:50:be:69:77:a9:bc:6b:16:8a:
         79:05:46:af:23:4c:25:d7:df:5e:58:a4:d8:2d:6e:39:f7:ec:
         bb:60:87:f9:e2:de:fd:49:b4:ec:33:28:7f:81:99:18:f2:26:
         c8:be:ca:5a:2f:f6:1b:c0:36:f1:fb:a7:64:e8:71:73:af:54:
         61:9f:e7:da:c0:8e:c5:bc:f1:fc:f3:14:4e:05:f1:9e:e1:28:
         ba:47:36:b1:f9:99:a1:fe:1e:45:9b:c5:8d:aa:f2:49:c0:1d:
         79:af:1c:c1:1d:20:72:ce:4c:f2:5a:2e:b7:bb:f5:41:e5:aa:
         f0:b1:fa:e7:77:2d:e6:bf:ee:54:48:03:c8:17:5b:16:77:eb:
         83:fc:cf:70:15:fb:af:ae:9a:5b:f2:76:b4:91:41:79:01:a6:
         99:b2:ce:19:e3:05:db:30:6e:6c:e0:67:b1:6e:fd:c2:0e:2f:
         f0:91:88:a5:9d:65:d2:ae:1a:89:c7:4b:da:12:97:2f:e5:18:
         41:62:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:20 2025 by rpki-client