Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          pVE8EmLqpobUZoMdEo+cASb17FlaTkIhJFPucTremzg=
Subject key identifier:   10:D8:FD:BC:66:0E:CD:5A:A2:D2:84:6F:C0:7D:31:F5:89:50:7F:BD
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       0198D54E10E14FC93CADFCFB05474D4A3460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          15E3
Signing time:             Sat 23 Aug 2025 05:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:59 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: 6Rg26X6KQoLBhXd5rgFKFHGwoyaXxYvxaWXxcJ/0gQE=)
                          2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:10:e1:4f:c9:3c:ad:fc:fb:05:47:4d:4a:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Aug 23 05:01:59 2025 GMT
            Not After : Aug 24 05:01:59 2025 GMT
        Subject: CN=10d8fdbc660ecd5aa2d2846fc07d31f589507fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:72:a5:60:82:1b:13:4c:a4:5f:bb:68:e6:
                    4c:eb:82:98:a0:36:70:66:8c:a0:2b:f0:26:af:83:
                    7e:75:a5:be:c4:bc:e3:bc:14:92:d4:b3:0e:4e:ff:
                    ec:d1:ad:9c:9f:a1:43:8d:47:29:36:44:c7:68:cc:
                    c0:c7:fe:e5:a4:19:0c:b4:a5:d5:7a:71:57:be:c5:
                    b6:1a:81:82:b4:59:d7:3d:13:fc:f4:f2:92:5a:20:
                    ef:80:87:42:9c:96:1c:41:c0:21:98:ad:60:57:5f:
                    8d:8e:67:b6:b0:4f:a5:23:2e:e5:8f:69:fe:b0:9a:
                    7a:0a:2a:4f:c8:91:77:88:57:02:df:1e:cd:9e:ff:
                    08:26:5b:bd:7b:58:28:81:bd:fc:6a:be:62:72:95:
                    f7:5f:62:83:ba:1d:18:73:f7:e5:99:90:d7:23:ac:
                    dd:a9:11:cc:03:c5:3a:ae:e8:67:2c:aa:84:57:e0:
                    c4:96:ac:cf:16:19:cf:67:ee:41:72:7a:9a:3d:2a:
                    94:e6:b1:04:31:e1:a5:49:de:3b:fd:11:24:eb:37:
                    ba:2e:7f:39:6e:e4:3a:2b:4c:31:4a:be:b1:3a:32:
                    ca:fd:04:b2:92:8b:b9:17:bc:b5:93:08:38:65:09:
                    77:81:82:f6:64:ff:50:43:1d:d5:4e:4f:c8:94:05:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D8:FD:BC:66:0E:CD:5A:A2:D2:84:6F:C0:7D:31:F5:89:50:7F:BD
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:9d:e1:57:4a:e8:da:da:26:2f:33:ea:d4:02:36:e9:63:
         a3:80:2a:89:49:49:8f:ac:2c:3a:7d:ff:93:50:97:74:6a:bc:
         b2:c1:5b:26:f3:f2:0c:b3:48:d0:80:a5:93:b7:c9:d9:c6:fe:
         d5:5b:5c:d5:53:93:e2:6f:68:17:16:55:f1:f9:45:b6:89:3b:
         8a:9c:6d:d1:bf:23:b4:96:27:bb:cd:72:49:25:ec:7e:87:41:
         a2:ca:c5:49:36:21:66:7b:78:63:ab:ed:44:a1:22:bf:f7:cf:
         1c:f3:28:02:ba:21:26:32:06:f5:41:42:af:47:3b:dd:14:45:
         ce:fa:2c:09:78:4d:95:7d:f9:f4:1d:e0:5f:a9:12:e7:0b:cb:
         59:fe:07:39:cb:04:3b:5a:ee:c5:57:f6:95:c3:b8:22:8c:26:
         68:b8:a6:51:8c:fc:65:c9:33:e4:48:89:d9:3c:ee:27:c3:13:
         6c:51:e6:c8:bb:1c:b2:aa:d2:6b:d7:b4:ea:e0:d4:27:92:45:
         38:b4:ba:4c:d5:25:d3:54:02:e6:7e:2c:7a:7f:d4:c2:d4:8b:
         26:c9:8d:3f:84:f3:02:5c:07:21:90:ee:e8:3e:15:f2:be:b4:
         e0:09:ed:c9:3c:5c:3c:28:cd:00:5d:6f:9b:0c:34:5c:99:cc:
         a2:b8:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:46 2025 by rpki-client