Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          gZFwDVuLLVNeoK4kk4mJFlwAZMfyU6ItAVeikLsvpS4=
Subject key identifier:   CB:A1:53:AE:29:51:EB:B4:57:E5:03:0C:97:F1:6E:7C:AB:3B:A8:09
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       0198D5F1C02E76C7191D55DE7BE77825C6C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          118C
Signing time:             Sat 23 Aug 2025 08:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:46 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: KnrQv3QsrCYF0Zd2rghU+8P02gwI07zytWLal7dbu80=)
                          2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
                          3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
                          4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:c0:2e:76:c7:19:1d:55:de:7b:e7:78:25:c6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Aug 23 08:00:46 2025 GMT
            Not After : Aug 24 08:00:46 2025 GMT
        Subject: CN=cba153ae2951ebb457e5030c97f16e7cab3ba809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:63:5a:4b:a8:23:9a:60:9b:45:97:36:f2:
                    a2:c5:b7:4e:36:03:d8:1d:11:7b:9c:d5:db:49:48:
                    73:58:9e:48:3e:2f:50:9b:de:80:1c:32:0b:6e:9a:
                    59:ce:da:74:46:37:1d:ca:ab:cd:3c:f8:60:5b:be:
                    c4:fe:0e:fd:53:07:26:03:32:6a:cf:a0:a3:cc:91:
                    80:da:c3:57:d0:e5:50:96:1b:7e:ae:b1:4f:a7:ad:
                    8f:12:b3:13:fd:22:f9:29:d9:84:f9:21:d5:3c:91:
                    d9:f3:0c:3d:2f:4f:62:66:21:d3:f5:d5:e5:48:88:
                    b3:1b:9d:c9:94:3f:b8:9f:17:b0:ec:65:9f:61:af:
                    48:7f:ca:43:4b:12:35:66:c4:af:50:2a:83:f1:f4:
                    b2:e8:73:23:b3:5b:88:0f:4e:91:d1:9b:49:63:c8:
                    22:90:fe:8e:f3:18:7e:d3:02:c3:ba:6c:48:20:d6:
                    3e:13:35:c5:d3:b0:60:8b:73:9a:eb:c1:96:3c:ef:
                    57:a2:09:ec:36:95:a0:38:30:ea:0b:32:cf:06:35:
                    20:40:95:7b:42:a4:7f:a5:4f:ad:d7:65:4c:88:f2:
                    7d:3c:59:8e:25:3d:e1:6d:a7:66:92:a5:ff:ac:46:
                    fd:ff:32:54:6d:54:43:1f:4b:e6:ed:22:cc:3a:cd:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:53:AE:29:51:EB:B4:57:E5:03:0C:97:F1:6E:7C:AB:3B:A8:09
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:63:b9:37:3b:a4:65:23:e9:ce:cc:e4:b8:59:01:e3:9b:d3:
         8c:e8:16:6f:11:0f:0f:ea:57:da:98:b8:fb:ae:7f:5e:27:75:
         12:e2:17:85:62:cb:88:40:79:73:3f:ed:81:5f:e6:f7:a2:06:
         3d:21:bc:d9:5b:70:5f:1e:c9:41:d0:2b:92:1a:c0:cd:bf:2f:
         3e:4e:2f:33:7a:46:f4:64:b0:4f:6b:dc:3a:b4:86:4e:f8:f6:
         51:2c:88:98:11:82:17:df:30:73:36:bb:61:4c:28:bc:b5:36:
         85:4c:bc:e6:3a:97:2b:6e:39:a2:06:b3:ea:e3:d9:7f:19:71:
         76:3a:38:39:07:c6:0f:06:96:66:e8:1f:0b:1d:c6:9b:5b:0d:
         f6:9b:14:35:f8:6a:b5:ff:70:c8:fc:a3:9f:24:c4:84:ea:5c:
         ee:52:5b:c3:6c:a6:eb:88:bd:57:a9:8b:4e:f0:7f:c4:6e:52:
         99:2b:5f:46:0e:a1:ad:35:74:7b:a7:e6:c8:3e:94:1e:b6:cf:
         03:0c:f5:62:f9:24:c8:30:fc:a0:1f:6c:94:10:5f:76:e2:93:
         1f:a7:a3:28:ef:ae:31:0c:f6:88:d3:92:f4:49:8b:81:58:12:
         77:ef:c2:d4:ab:fb:f1:ec:f3:16:fb:51:5b:be:2c:45:55:93:
         fe:2b:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:17:53 2025 by rpki-client