Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
File:                     E5cPuUba-bnv47YJ8onK4Bn8YYw.mft (raw, json)
Hash identifier:          uI2Fa2rbrhbGpbvfsbObti176lie28QdNuF7brp7pN8=
Subject key identifier:   13:98:44:ED:5E:7B:FB:E6:DB:2E:1D:25:66:0F:7D:37:08:9E:4B:88
Authority key identifier: 13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C
Certificate issuer:       /CN=13970fb946daf9b9efe3b609f289cae019fc618c
Certificate serial:       0198D5BC12C81E81B25482554E8E9CDCA67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
Manifest number:          10A5
Signing time:             Sat 23 Aug 2025 07:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:09 +0000
Files and hashes:         1: E5cPuUba-bnv47YJ8onK4Bn8YYw.crl (hash: zGFAEDYod2+wv4a3ghSUWa9EmN4HtPLJSMPxmOnA8Qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:12:c8:1e:81:b2:54:82:55:4e:8e:9c:dc:a6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13970fb946daf9b9efe3b609f289cae019fc618c
        Validity
            Not Before: Aug 23 07:02:09 2025 GMT
            Not After : Aug 24 07:02:09 2025 GMT
        Subject: CN=139844ed5e7bfbe6db2e1d25660f7d37089e4b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:37:76:f6:2b:82:39:40:18:be:ac:77:ad:
                    fb:0c:76:29:d9:2e:37:ce:58:28:7e:be:a8:41:46:
                    92:71:b7:70:8c:46:7b:bc:f0:06:b5:4f:e3:24:f0:
                    9b:54:39:89:84:aa:14:b0:6d:7c:5d:0c:8f:21:15:
                    76:bb:bb:df:0d:c0:51:75:17:89:f6:e1:89:92:83:
                    f9:bc:0e:2f:2c:6a:3c:a1:30:cf:61:63:38:c4:78:
                    68:ad:52:e9:bf:fb:03:9f:13:92:1b:bc:a9:7d:8a:
                    c1:bd:93:b9:2f:69:9a:05:15:05:b9:8b:4a:29:d9:
                    3e:6b:16:f4:ea:50:30:87:a7:43:db:86:9f:50:d4:
                    10:75:10:74:ce:f3:63:8d:a1:25:24:f8:71:b1:3c:
                    98:e9:52:76:53:4c:8f:b5:a4:3a:d4:d6:90:30:b5:
                    11:61:f5:dc:41:c9:cd:45:d4:c7:fc:6f:b1:3b:2c:
                    ea:16:32:67:a7:3a:2d:88:fd:72:10:e5:06:22:0c:
                    b6:ab:5d:76:94:6f:68:b8:2c:18:f4:a7:c2:c3:05:
                    9c:fb:7e:41:8c:cc:6c:49:8c:fa:82:8f:0c:70:81:
                    16:2a:6b:a5:3c:72:dc:c5:86:00:80:92:cc:ce:9a:
                    e3:31:73:08:27:87:16:51:4b:3d:1d:dd:5a:fd:f0:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:98:44:ED:5E:7B:FB:E6:DB:2E:1D:25:66:0F:7D:37:08:9E:4B:88
            X509v3 Authority Key Identifier:
                keyid:13:97:0F:B9:46:DA:F9:B9:EF:E3:B6:09:F2:89:CA:E0:19:FC:61:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5cPuUba-bnv47YJ8onK4Bn8YYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/269285-5881-427c-acbc-37b61ec2c0d5/1/E5cPuUba-bnv47YJ8onK4Bn8YYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:42:19:01:76:1f:fc:88:ec:98:21:e2:4a:5c:01:45:63:b1:
         3b:16:f1:3e:3e:e8:99:a0:d7:c5:6a:6e:b0:ac:78:0d:09:4e:
         ab:66:57:c8:a1:fa:39:ce:df:8a:30:dd:dd:2d:f3:bb:24:03:
         99:17:ad:40:56:c4:c7:d6:b4:87:54:d7:dc:3b:d4:d8:10:b0:
         22:fb:ea:f6:66:e0:fb:34:4d:ea:e1:2d:6d:e0:3e:d0:cd:29:
         ca:95:07:dd:bb:4e:be:e5:4d:e6:12:00:17:b1:bd:c7:55:eb:
         2a:c6:ee:99:ce:a0:f8:ab:d4:e0:71:e3:80:ee:b2:bd:76:36:
         1d:ff:e0:da:f6:9b:a7:73:7d:de:52:48:1b:c9:45:ac:ec:3d:
         24:68:a4:37:a6:9d:f3:f0:4d:63:38:7a:64:b9:a5:6e:7f:db:
         ff:2a:60:85:43:2a:56:37:7e:73:dc:29:d8:9b:c5:fe:b5:f8:
         96:0e:de:ab:56:63:2a:3e:10:d2:a7:b3:6f:37:c7:56:f1:26:
         fa:ec:73:be:69:85:c9:9b:5b:65:26:a7:58:b3:f3:7b:b0:4d:
         37:aa:ad:9f:1a:51:f9:36:12:47:68:58:54:2d:6a:ff:26:bb:
         9d:3d:f4:95:17:6d:28:40:4c:b5:b1:42:0a:ce:2f:41:01:06:
         34:e8:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:36 2025 by rpki-client