Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
File:                     5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft (raw, json)
Hash identifier:          gumLMOJLRBQQKLrOnaBZ0Qq08knHjwVcpsXkBpMv16Q=
Subject key identifier:   11:48:72:A1:05:6C:DA:11:B5:B9:BA:01:12:85:E4:0B:A7:47:A1:F9
Authority key identifier: E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
Certificate issuer:       /CN=e5c04c019bc693650428558551facd222080126d
Certificate serial:       0198D5163EB4EACB558D1BD4F20F65768219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
Manifest number:          02F3
Signing time:             Sat 23 Aug 2025 04:01:01 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:01 +0000
Manifest next update:     Sun 24 Aug 2025 04:01:01 +0000
Files and hashes:         1: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl (hash: z6Q6rditBzKtBKVmPS539E5vPSL3qUkmQYjBpJHUl6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:3e:b4:ea:cb:55:8d:1b:d4:f2:0f:65:76:82:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c04c019bc693650428558551facd222080126d
        Validity
            Not Before: Aug 23 04:01:01 2025 GMT
            Not After : Aug 24 04:01:01 2025 GMT
        Subject: CN=114872a1056cda11b5b9ba011285e40ba747a1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:3e:b5:6d:c3:82:e4:7a:87:07:9a:7c:6e:
                    60:7a:e9:bf:62:86:94:57:b0:a5:2d:cc:86:66:d0:
                    3b:49:1a:88:1e:05:0a:e8:c3:20:bb:d8:8a:65:9d:
                    96:63:8c:28:ae:cf:0e:f4:d8:f1:c7:0e:65:49:65:
                    60:65:16:35:be:82:83:18:8a:59:09:33:9b:82:9c:
                    27:67:34:ec:03:a2:3f:b2:d3:dc:d7:5c:cb:fc:5e:
                    af:35:24:26:8a:d4:ac:23:13:86:91:02:6c:41:fb:
                    7e:24:ec:97:62:79:07:f9:5a:9e:69:37:6b:68:08:
                    8e:1d:d2:a6:6f:d0:5c:84:f5:84:a5:ac:dd:28:7f:
                    89:b0:2c:bd:44:94:e2:ba:00:db:8d:89:7f:31:07:
                    25:1c:c1:82:20:94:a1:87:a3:dc:d3:83:18:3a:1a:
                    55:fe:e1:a2:8b:58:8c:61:87:2a:89:86:2e:51:59:
                    68:7f:29:70:10:17:1e:ab:82:20:ae:77:1c:04:05:
                    71:08:05:70:95:81:2e:31:7c:f1:4b:c8:36:eb:00:
                    ca:ee:21:19:cf:9c:ab:25:e7:73:e3:bd:d0:b9:e2:
                    29:c8:ab:1b:88:56:86:71:3a:a3:66:89:4d:d8:15:
                    b9:9e:1c:bf:b4:b6:bb:22:92:55:7a:96:be:57:9d:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:48:72:A1:05:6C:DA:11:B5:B9:BA:01:12:85:E4:0B:A7:47:A1:F9
            X509v3 Authority Key Identifier:
                keyid:E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:40:95:a7:3b:80:53:d2:b2:80:87:f2:0e:7d:6e:97:21:
         8a:88:a6:1b:d6:ac:fd:75:dd:cf:52:9d:80:7f:ae:58:05:13:
         84:8b:4a:2c:b7:02:6c:07:ca:ec:42:65:8a:a1:c7:d3:af:11:
         ab:2e:b9:5a:5d:35:7d:f3:05:ec:da:df:f0:62:e6:f0:ca:c5:
         0e:fa:cd:2b:f7:b9:84:54:22:fe:ae:0f:9c:7c:15:db:e8:0a:
         8a:23:50:4a:19:04:e1:83:d7:ae:86:bb:ce:cd:f9:6a:0e:7b:
         03:7e:7d:8f:f2:c1:c4:20:56:88:90:21:a7:85:52:5c:5e:3c:
         f3:6c:1a:dc:36:69:ff:c4:dc:02:30:fb:e4:78:11:d9:0b:60:
         44:00:cd:96:5e:8f:1f:3d:f2:b6:86:22:28:ab:f4:a5:b1:c3:
         77:c1:46:f4:d9:9e:b6:de:8e:00:6e:de:e5:40:1c:a2:11:ed:
         1b:40:47:57:73:6c:d2:9b:16:bc:34:5f:15:bf:5e:8b:36:20:
         ea:c9:dc:cb:ff:e3:9b:82:56:03:f4:5a:99:20:ac:95:b9:c0:
         82:c3:58:12:fd:ca:f0:5d:1c:b9:68:c8:6a:1d:88:db:0b:90:
         c8:31:e1:fd:7e:ca:1c:8e:f0:84:52:83:71:dd:13:c4:b1:82:
         8d:d9:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:37 2025 by rpki-client