Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File:                     5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier:          DddjPiqJzFjNsMdg6zZenW06OJYkP46fHaV7VICZUEQ=
Subject key identifier:   75:DF:30:98:B9:3E:F1:1E:ED:F8:D5:2E:E5:F0:48:5A:18:07:9D:E4
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer:       /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial:       0198D4A7A0BF0A001BCE8FE928F3F7DB133E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number:          0E1C
Signing time:             Sat 23 Aug 2025 02:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:12 +0000
Files and hashes:         1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: GePHaQ7WcUCIyKrafAWF60OA8jsoDSokbRRG/DIjimM=)
                          2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:a0:bf:0a:00:1b:ce:8f:e9:28:f3:f7:db:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
        Validity
            Not Before: Aug 23 02:00:12 2025 GMT
            Not After : Aug 24 02:00:12 2025 GMT
        Subject: CN=75df3098b93ef11eedf8d52ee5f0485a18079de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:42:32:6e:b5:e1:06:9a:ed:15:11:90:25:
                    0e:47:9d:c5:36:79:2d:70:46:34:f2:55:e6:8c:1a:
                    9b:f3:f5:48:51:f5:3f:4b:35:a2:73:b3:99:34:af:
                    1d:6d:f9:31:0b:aa:b1:28:73:f8:6a:ad:f4:55:e5:
                    de:09:ae:73:d9:ae:14:00:cb:f8:13:b3:8a:d3:64:
                    75:f7:46:1d:bc:b7:45:e4:f8:ff:bb:1f:8e:68:79:
                    91:96:2d:6f:41:50:82:b6:66:ad:b3:ea:6c:ef:3e:
                    fd:58:ce:6f:77:f5:21:69:4a:e5:dd:5d:f9:c6:e6:
                    47:af:51:62:78:5b:2d:77:04:ee:3b:dd:5a:d2:a8:
                    d3:69:d8:fc:da:5d:af:ef:c7:4b:a3:a1:74:fa:65:
                    d1:5d:f5:c2:97:e8:de:64:a8:04:bd:55:38:01:19:
                    97:b9:55:83:35:fe:99:25:b8:24:3e:db:b1:e1:ba:
                    19:e8:26:1f:7c:6a:78:57:0a:4c:54:75:ff:d1:1b:
                    04:9c:30:2e:60:07:e0:c6:bb:e6:e6:7a:c6:09:05:
                    ac:c7:61:48:da:cb:d8:1e:c7:26:b8:01:19:8b:c2:
                    64:05:45:d8:26:ba:c3:a0:f6:9d:1c:23:00:d7:2c:
                    f7:25:6c:39:42:92:d4:cb:63:b5:ce:fa:02:18:94:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DF:30:98:B9:3E:F1:1E:ED:F8:D5:2E:E5:F0:48:5A:18:07:9D:E4
            X509v3 Authority Key Identifier:
                keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:2d:2f:17:c0:b0:31:e6:bb:91:01:5c:99:b9:b7:0e:a4:
         4b:3b:68:5e:5b:74:76:f2:4e:4d:d3:78:a2:35:2a:40:c9:a3:
         85:4e:15:e7:ac:4a:0c:16:a3:90:cc:3d:17:52:29:f3:44:9f:
         29:62:e2:b8:cb:de:47:f9:b5:55:83:a0:44:ab:63:e4:9a:81:
         30:88:d8:66:87:5f:87:c7:3c:9c:4b:59:0d:d6:d8:b8:8b:1c:
         89:e6:c6:3e:7a:80:66:e9:ad:72:54:d8:2e:30:0b:f5:77:6b:
         52:83:4e:15:e8:0e:fe:38:d4:f7:0c:68:7e:68:da:ff:18:e2:
         13:5a:25:aa:34:e7:44:86:ce:59:be:f2:c5:43:0d:51:18:a0:
         e5:c6:d8:d2:86:9b:57:c7:2c:07:a7:b5:a7:d4:2b:a0:b8:49:
         3e:37:f3:81:18:a3:87:5f:f6:1a:05:f6:f2:31:27:02:8e:c9:
         60:8f:fc:b0:71:5f:99:0b:17:1d:dc:a9:03:b5:d4:57:0c:c5:
         0a:36:ae:63:0a:19:52:af:00:20:b9:6b:90:e7:a3:3f:20:5e:
         28:16:eb:aa:cd:46:a4:f2:f3:47:bc:b4:30:87:3e:ff:54:41:
         66:46:31:f2:5f:9b:fd:42:80:40:b9:c1:2e:94:72:91:12:0e:
         71:86:5f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6C/CgAbzo/pKPP32xM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWRiZjNjNDQ0NjhlNTI0MTFkNDg2MTg1NmJmMGJkYzc5
MDYzZTQwHhcNMjUwODIzMDIwMDEyWhcNMjUwODI0MDIwMDEyWjAzMTEwLwYDVQQD
Eyg3NWRmMzA5OGI5M2VmMTFlZWRmOGQ1MmVlNWYwNDg1YTE4MDc5ZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsNCMm614Qaa7RURkCUOR53FNnkt
cEY08lXmjBqb8/VIUfU/SzWic7OZNK8dbfkxC6qxKHP4aq30VeXeCa5z2a4UAMv4
E7OK02R190YdvLdF5Pj/ux+OaHmRli1vQVCCtmats+ps7z79WM5vd/UhaUrl3V35
xuZHr1FieFstdwTuO91a0qjTadj82l2v78dLo6F0+mXRXfXCl+jeZKgEvVU4ARmX
uVWDNf6ZJbgkPtux4boZ6CYffGp4VwpMVHX/0RsEnDAuYAfgxrvm5nrGCQWsx2FI
2svYHscmuAEZi8JkBUXYJrrDoPadHCMA1yz3JWw5QpLUy2O1zvoCGJS1gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXfMJi5PvEe7fjVLuXwSFoYB53kMB8GA1UdIwQY
MBaAFOSdvzxERo5SQR1IYYVr8L3HkGPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMt
NWNhZGJkY2YyMjE1LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ZTQ1N2UtMzY2ZC00NDBiLWFmMmMtNWNhZGJkY2YyMjE1
LzEvNUoyX1BFUkdqbEpCSFVoaGhXdnd2Y2VRWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMugtLxfA
sDHmu5EBXJm5tw6kSztoXlt0dvJOTdN4ojUqQMmjhU4V56xKDBajkMw9F1Ip80Sf
KWLiuMveR/m1VYOgRKtj5JqBMIjYZodfh8c8nEtZDdbYuIsciebGPnqAZumtclTY
LjAL9XdrUoNOFegO/jjU9wxofmja/xjiE1olqjTnRIbOWb7yxUMNURig5cbY0oab
V8csB6e1p9QroLhJPjfzgRijh1/2GgX28jEnAo7JYI/8sHFfmQsXHdypA7XUVwzF
CjauYwoZUq8AILlrkOejPyBeKBbrqs1GpPLzR7y0MIc+/1RBZkYx8l+b/UKAQLnB
LpRykRIOcYZfhw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:40 2025 by rpki-client