Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          8+0Tuh/sAIkv84QE2jtH1RoQ2/oBRlQzBnCVGmSuhyM=
Subject key identifier:   E1:FA:4A:EF:F1:96:78:77:64:A7:13:89:77:F0:90:A7:81:BE:12:7F
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       0198D54E02FFEF5A9FC05255791E71EEF7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0C5F
Signing time:             Sat 23 Aug 2025 05:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:56 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: g6Pb+xKC1STDa0kyyG55vrWFPd2fKagRrSCqANk/F4w=)
                          2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:02:ff:ef:5a:9f:c0:52:55:79:1e:71:ee:f7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Aug 23 05:01:56 2025 GMT
            Not After : Aug 24 05:01:56 2025 GMT
        Subject: CN=e1fa4aeff196787764a7138977f090a781be127f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:7d:5b:d9:ac:70:3e:e5:fe:b3:d8:49:39:
                    70:f2:5d:37:bb:ff:4f:49:3c:45:1d:67:74:25:65:
                    b4:a4:5d:56:ff:45:01:e4:bf:bc:41:72:ce:cf:4f:
                    84:4e:1f:e7:7e:88:93:03:06:06:38:fd:c3:5e:fb:
                    d0:1f:d4:77:59:d6:ee:1d:d3:cf:ee:8c:fd:b2:4f:
                    33:c0:d9:68:bd:ab:fb:61:87:eb:03:24:58:3c:a9:
                    a6:a8:52:7e:06:f6:57:62:88:13:27:65:99:30:8f:
                    8d:39:51:5c:ae:a2:db:f9:8c:5e:cc:43:40:50:30:
                    4b:28:25:df:ae:d6:37:df:d5:aa:30:05:20:03:66:
                    bf:aa:67:bf:51:ee:8d:a0:76:71:f7:95:7c:f4:b3:
                    b3:37:d3:1a:4c:9e:68:32:b7:30:86:86:4d:14:ab:
                    78:ec:73:0f:ff:9e:fa:1b:44:2b:97:70:8b:f3:4f:
                    51:40:78:6b:e9:6e:c5:56:cd:cb:39:4d:5d:63:8b:
                    22:fd:6e:24:87:6a:6f:76:c9:d3:be:71:e4:4c:f8:
                    4e:30:4e:87:cf:d6:ac:a8:a8:d6:e4:06:f2:bc:7b:
                    d9:09:9c:d5:65:80:36:19:22:e3:59:0a:0b:d3:20:
                    2d:40:b0:53:fd:de:d3:31:24:1e:f6:b6:31:f5:49:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FA:4A:EF:F1:96:78:77:64:A7:13:89:77:F0:90:A7:81:BE:12:7F
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:73:39:6a:f6:1c:03:ba:ad:a3:ca:da:d5:de:ea:09:0d:2b:
         ae:8c:32:34:ab:6e:39:ad:95:cd:71:8a:51:be:d2:e7:d7:16:
         ea:38:73:a2:ca:45:cb:df:08:df:23:6d:70:41:db:56:6e:98:
         7f:a3:c5:01:1f:55:2f:10:91:71:57:cf:61:66:9d:f6:c8:49:
         b6:bc:a7:e4:94:4e:6d:72:4c:50:a6:bc:31:e1:93:5a:a5:1c:
         dc:6c:48:62:94:ef:8d:74:88:76:9f:a4:5a:83:00:8b:82:96:
         5c:70:a5:0e:e4:4b:bd:2c:01:34:e9:ca:62:d4:78:85:92:a5:
         09:fb:8d:fe:8a:27:8d:66:db:32:21:37:32:9c:15:db:33:eb:
         37:8c:78:63:82:cb:5d:2a:b4:45:24:df:a5:8e:db:bc:72:2e:
         4d:95:46:d6:c6:86:75:34:97:04:11:08:cc:8d:0e:b2:3b:80:
         2b:bb:13:84:ce:75:f1:72:c7:1d:6a:58:fa:71:44:72:fe:3e:
         ba:6b:49:b5:2d:8c:f1:24:0e:e5:71:f0:73:31:df:9b:a1:49:
         ac:9f:ad:33:e0:89:b6:57:db:be:1d:c6:83:4c:85:a8:6d:8a:
         76:e4:c9:83:e6:e8:8d:15:ed:ab:26:13:1d:a2:c1:37:c2:ed:
         d1:89:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:29 2025 by rpki-client