Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          ST1yvHsedpfXJGroCwWqiNkqKRucQKkyGBKEqnTo3pc=
Subject key identifier:   15:31:88:9A:84:30:9A:D8:43:90:DD:50:80:73:F5:C8:9F:43:41:FD
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       019510C72B582CE650E1EF39892F14842619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          04F0
Signing time:             Sun 16 Feb 2025 22:00:42 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:42 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:42 +0000
Files and hashes:         1: 4kR89sLAqkPwhn_ralqMLx5vnmw.roa (hash: aW/S/miakzFOlENse9MXKWvU/sKShiO+PJNe9e/OxYg=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: o2aT8RdLvgGIczhqTYYZMT7cyw55jVpO9af18W0jWFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:2b:58:2c:e6:50:e1:ef:39:89:2f:14:84:26:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Feb 16 22:00:42 2025 GMT
            Not After : Feb 17 22:00:42 2025 GMT
        Subject: CN=1531889a84309ad84390dd508073f5c89f4341fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:8b:c8:67:18:2a:6e:47:cd:98:23:b9:d3:
                    a6:71:a8:5c:78:9d:ad:9b:af:f9:d2:e0:e0:e4:53:
                    d1:e9:8a:4b:30:de:1c:ff:3a:56:e4:2f:cf:ca:80:
                    a5:b4:dd:ae:82:52:38:02:91:dd:cf:38:f6:a7:61:
                    5c:e8:64:19:63:13:37:28:60:df:20:8a:7c:d8:00:
                    b7:92:65:68:35:76:ef:eb:21:0b:99:a1:c4:5b:fa:
                    3d:ed:f2:c6:85:b3:a6:1d:79:7b:e0:b5:20:38:76:
                    a0:65:1b:24:22:6e:23:d7:24:2d:a4:6f:19:e8:e2:
                    75:02:06:d7:a5:f8:a1:c0:bc:d5:df:68:07:dc:f4:
                    d2:10:c2:47:e0:c3:ae:17:47:8c:cc:56:99:4d:09:
                    63:2a:54:f0:67:df:d9:b7:b4:65:a1:78:05:86:c2:
                    1c:8f:d0:74:2b:48:14:4f:ad:6a:87:12:cf:2a:0e:
                    b3:bc:15:5f:4a:c8:1a:f8:21:1e:f6:67:6c:55:55:
                    66:eb:90:19:ad:69:80:e9:52:95:05:34:bb:ac:3b:
                    02:69:fa:90:0a:f5:29:6b:44:1c:2a:0b:a1:91:0c:
                    4d:0e:e3:4f:51:75:68:e6:25:e2:9f:22:38:c5:65:
                    71:f0:1b:1a:c0:0f:4c:4b:38:ad:3f:78:96:6b:3d:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:88:9A:84:30:9A:D8:43:90:DD:50:80:73:F5:C8:9F:43:41:FD
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:9c:08:59:a7:bc:02:6f:04:cf:10:6d:d0:39:d3:83:c4:
         19:c9:23:8c:91:2b:fd:e3:b9:25:ee:1b:3d:3e:a4:61:fb:50:
         47:d7:eb:35:18:23:9e:46:78:c7:0f:f9:cd:59:b6:bb:6a:91:
         50:bf:c8:00:e3:77:e0:e1:aa:2a:f1:23:3f:65:17:17:02:e7:
         fe:46:4a:0c:b5:05:6a:54:30:9a:b8:37:06:7e:3f:b0:f3:ec:
         54:d7:0e:41:8e:b9:d5:18:b9:ea:83:6b:72:45:ff:0f:36:4e:
         b8:79:a8:22:bf:c3:50:3a:84:9a:ac:72:32:b1:9b:82:09:96:
         73:fd:45:b9:bf:a3:91:59:ba:b7:5a:ce:18:ed:73:ca:33:dd:
         68:c3:1a:29:a4:f5:d2:59:bf:01:68:60:d6:76:14:7a:3b:ff:
         a5:79:5f:f1:91:c4:9c:9f:e5:a0:8f:e2:c8:16:0f:74:45:b5:
         c1:8e:b9:ff:6d:95:92:cb:92:9b:60:ac:82:8f:2b:b4:a0:6a:
         86:ff:aa:ae:6f:a9:e0:a1:eb:82:4d:c3:d9:09:83:29:18:97:
         a9:eb:ce:d3:20:8a:03:d4:67:36:31:9a:77:a8:ce:55:b4:da:
         6d:78:af:65:39:6b:74:0b:d5:a1:09:fc:e8:91:d9:91:3e:dc:
         ec:9b:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:41 2025 by rpki-client