Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          ttbwIlPyPm9GpzsVyHGf8G9BfovJn5TZU6irLYEeJ/M=
Subject key identifier:   75:AF:CA:C4:23:E8:CA:7F:8A:B0:CB:F7:8D:89:0F:DD:81:CE:49:EC
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       0198D66075AB01DDB9F332DCF2261CB317DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          101D
Signing time:             Sat 23 Aug 2025 10:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:42 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: DLFFjxd5rlYt8xlKtkCvfhb2FgccqWRi0PY42T1qON8=)
                          2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:75:ab:01:dd:b9:f3:32:dc:f2:26:1c:b3:17:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Aug 23 10:01:42 2025 GMT
            Not After : Aug 24 10:01:42 2025 GMT
        Subject: CN=75afcac423e8ca7f8ab0cbf78d890fdd81ce49ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:19:a3:5d:5a:e4:4a:1c:6c:a0:ab:fa:4b:
                    aa:bd:23:71:5b:16:86:14:8d:6f:a1:0a:97:44:b1:
                    c9:cb:60:49:a5:b0:c3:64:b1:bc:92:7f:de:06:45:
                    e1:ec:c5:f4:f0:d9:ad:09:4f:80:d6:68:e5:8c:9b:
                    42:c7:71:ad:ad:58:3c:be:3e:21:85:29:44:01:f0:
                    a2:1d:a1:03:55:aa:f2:91:23:05:47:09:31:62:7b:
                    3e:cd:61:e2:e4:7f:1a:b1:70:9f:9e:9b:1c:37:43:
                    9d:57:6d:f1:5f:5a:1f:32:aa:82:d9:29:c2:ff:b2:
                    b5:11:f0:b7:f5:bd:5a:88:02:f6:f6:ff:45:1c:f1:
                    77:04:90:52:40:0b:15:47:51:45:ac:43:7e:1b:68:
                    c8:2d:e5:1a:f2:e0:c0:82:a6:92:f3:12:73:2d:1b:
                    50:3e:da:08:0d:70:f9:99:aa:d1:64:36:42:c7:bc:
                    f5:56:8a:10:d9:de:8a:2b:3e:95:74:92:f1:b0:35:
                    2b:0e:a2:b0:1a:39:5e:cd:f8:0c:f2:55:7a:17:59:
                    e9:d7:ed:a7:63:ff:07:5e:64:91:a0:29:81:02:c3:
                    b6:23:b5:3b:f1:e2:58:0f:f8:00:d0:cc:8b:76:33:
                    90:c7:0a:23:ac:1f:67:4d:76:10:7f:ca:5f:5c:53:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:CA:C4:23:E8:CA:7F:8A:B0:CB:F7:8D:89:0F:DD:81:CE:49:EC
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e6:66:45:d3:6a:31:d5:d5:ad:9c:89:49:bc:7a:c8:f0:dc:
         50:28:14:95:3c:9f:8b:da:6c:6c:22:3d:89:1b:2b:69:c6:4a:
         d6:70:ba:9b:90:ab:07:68:fa:fc:9a:9f:af:2f:43:f3:84:40:
         db:01:8a:9f:9b:03:c1:d2:c2:b2:f1:0f:18:c4:f1:70:e6:35:
         96:76:c4:e9:e2:ab:50:e6:e2:43:0b:10:c6:62:84:b9:e6:a8:
         98:9d:35:31:11:d4:9c:dd:80:8a:88:1d:57:2a:b8:16:db:f1:
         f6:b2:e7:72:f8:12:69:8d:e9:6e:e7:c0:97:21:35:02:cb:6e:
         4c:f1:6f:2f:ae:1c:87:51:05:5b:c5:28:2d:a5:d7:21:31:ad:
         a0:d7:7b:fc:9c:a6:8e:cf:0b:3d:92:89:ab:28:97:73:07:5d:
         89:8c:a7:00:45:42:1c:89:a0:eb:54:90:b0:a9:ca:46:2c:4e:
         b5:72:83:0c:e8:b0:51:a1:63:75:dc:f6:ee:bc:11:9c:0d:56:
         c8:1a:c6:d8:80:0c:53:4d:5b:3b:94:d0:ff:3b:06:96:21:5a:
         22:01:ea:db:b9:04:f4:45:bf:80:46:b1:24:45:04:e4:6c:0f:
         2f:df:ee:d2:35:88:79:7e:7a:1e:54:be:8e:84:dc:81:79:ab:
         8a:bc:6b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:48 2025 by rpki-client