Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File:                     5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier:          lDytSW+4/jyfK3qtaPOkmkmo2uLXmJdO5mvFAjmLuLc=
Subject key identifier:   78:B2:28:5E:B1:66:8D:75:82:39:87:13:CC:8B:40:01:7F:48:5C:35
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer:       /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial:       0197B5FC76161A343032760CB9EFA065460C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 10:01:50 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:50 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:50 +0000
Files and hashes:         1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: n1MoCMyY3Hm/siGKOvvwrQzivuscTvz9cr/Zc03i9Ew=)
                          2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:76:16:1a:34:30:32:76:0c:b9:ef:a0:65:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
        Validity
            Not Before: Jun 28 10:01:50 2025 GMT
            Not After : Jun 29 10:01:50 2025 GMT
        Subject: CN=78b2285eb1668d7582398713cc8b40017f485c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:13:af:90:ff:76:21:fc:e2:f2:a8:ec:57:
                    a0:7b:7f:50:f9:ca:97:2b:f1:73:ff:e6:5f:22:7b:
                    ac:42:7c:11:38:37:c3:ae:2d:33:1e:71:2d:b9:c1:
                    4a:4b:6b:67:80:6c:07:94:64:51:3d:d8:3f:17:d6:
                    2c:92:0a:e4:34:14:50:05:1b:82:eb:db:fd:4d:6e:
                    a8:18:63:56:65:2d:6e:81:29:1d:d6:d6:5b:87:a7:
                    90:86:cc:af:5b:ae:02:5e:d1:94:7d:46:e2:da:66:
                    eb:f1:af:c4:78:21:03:1b:ac:86:02:87:c6:a0:a4:
                    18:03:d0:85:6c:16:d4:3a:cd:fe:e9:35:fd:2a:be:
                    44:3e:c1:c2:51:55:85:e9:dc:05:06:6c:20:d1:fc:
                    e4:46:5f:0b:7f:80:b9:7a:b1:2f:83:7f:d9:d6:bc:
                    7b:48:de:ad:bc:8b:73:67:ca:65:d6:c4:2c:63:f7:
                    d8:dd:08:0e:37:63:f9:59:b2:51:ed:f9:aa:74:74:
                    a1:44:64:64:c6:f7:b6:13:4f:b0:52:96:d1:9e:e7:
                    24:4b:c2:aa:c8:f7:53:6b:66:cc:38:a5:15:62:6c:
                    3c:74:a2:0e:15:2e:13:d5:c2:fb:8c:8b:cb:02:59:
                    7f:c6:c1:1d:45:db:96:00:a5:18:e3:e0:9d:bf:7f:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:28:5E:B1:66:8D:75:82:39:87:13:CC:8B:40:01:7F:48:5C:35
            X509v3 Authority Key Identifier:
                keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:61:88:8b:93:30:91:a4:57:c1:d0:f8:5a:29:8a:a1:a3:3f:
         f9:9d:8b:70:85:24:f3:78:1f:8a:6f:1d:cc:22:97:94:65:5d:
         33:da:4a:68:26:27:d4:7d:9f:75:6e:ca:ff:49:29:83:33:72:
         23:10:a8:61:85:4f:1a:ef:55:89:e8:89:d6:be:bd:a8:2a:07:
         9c:cb:9e:69:95:0f:f1:04:b0:ab:77:c6:d9:4b:5a:60:59:76:
         3b:cd:91:b3:49:0c:db:d6:9d:35:42:23:60:1d:5c:71:29:24:
         88:5f:06:c7:59:23:7a:58:3d:af:d0:e6:fa:b1:17:3b:01:b4:
         7b:15:52:7a:a0:42:f0:18:64:27:c3:82:4e:c6:56:c5:4e:a7:
         b5:14:23:85:ec:37:6a:df:09:8a:e9:76:a9:dc:98:1b:ed:f9:
         6a:13:ac:3e:3a:42:4d:fe:43:ea:10:f6:01:d5:d8:a5:00:ba:
         77:02:1f:27:d4:3b:09:0f:0e:32:a8:73:0b:a1:f8:40:40:5e:
         68:39:5c:ad:84:8a:ab:c4:b8:de:f1:88:a0:f3:d1:a7:85:b4:
         7f:fe:ed:e9:fb:d9:c5:3a:41:fe:1a:2e:9b:20:fc:e0:60:49:
         b4:56:77:f8:80:7d:d3:18:c5:d9:e3:b6:6a:11:60:ee:90:d4:
         ae:9d:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:16 2025 by rpki-client