Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          HokVbdLwyurmYUkBBWTh/XILCDDP45onuZ5t8vQDAdg=
Subject key identifier:   03:1A:15:07:62:BD:AC:08:AD:C5:57:73:82:60:A2:0B:94:37:42:2B
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       0196586FCC2A759031C5F1F97587FCBFDB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          06C3
Signing time:             Mon 21 Apr 2025 13:00:43 +0000
Manifest this update:     Mon 21 Apr 2025 13:00:43 +0000
Manifest next update:     Tue 22 Apr 2025 13:00:43 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: A1WgObRj8LKYv8xKo8KxqBLlfqcYgr1n7o8agK2eCUU=)
                          2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:6f:cc:2a:75:90:31:c5:f1:f9:75:87:fc:bf:db:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Apr 21 13:00:43 2025 GMT
            Not After : Apr 22 13:00:43 2025 GMT
        Subject: CN=031a150762bdac08adc557738260a20b9437422b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:1a:55:f4:34:b3:a5:a8:66:0f:69:5e:aa:
                    9a:0e:f7:38:18:90:7f:8c:a1:87:0b:35:44:39:57:
                    51:fe:07:d5:2f:2f:ff:e0:5f:cc:9b:43:13:82:52:
                    da:72:e4:b2:b0:c4:5a:94:39:43:7e:6d:4f:fa:6d:
                    5a:20:11:be:05:b4:a6:e7:a0:13:97:d8:43:95:2c:
                    e9:c5:a8:db:33:b8:0b:9f:2f:b9:62:15:b4:aa:34:
                    61:fb:15:db:6d:e8:39:cd:3c:72:7f:0a:58:8e:2f:
                    84:53:78:32:9f:c1:a4:ec:18:85:a2:5f:ff:3a:15:
                    8e:bc:e2:a2:83:cd:ce:63:3b:6c:bd:4e:57:2e:6f:
                    67:7d:18:e5:8d:b2:cb:44:84:23:e7:60:27:3d:93:
                    1c:5d:da:93:6c:e4:27:a8:59:94:30:56:23:22:fd:
                    e3:a9:07:4f:c0:6f:be:ab:80:78:d7:20:84:d5:e8:
                    c5:84:e6:62:73:a3:c3:15:c5:54:d5:0d:32:0d:42:
                    01:b5:3c:f9:a3:4f:a6:ec:f6:7d:16:1f:3d:43:12:
                    e2:39:83:de:96:1f:e6:c5:7f:08:6d:87:e5:03:db:
                    0e:23:a6:30:9f:ea:63:79:c3:b6:bb:9e:dc:79:29:
                    e8:0d:1e:48:5c:7d:eb:90:34:04:4b:10:93:68:79:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:15:07:62:BD:AC:08:AD:C5:57:73:82:60:A2:0B:94:37:42:2B
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:d7:49:bc:a8:8f:5d:c0:bc:51:08:10:15:4b:ee:76:d5:27:
         7f:f8:4c:e3:52:14:d1:d9:c8:6d:fe:0e:96:84:15:4a:8f:c2:
         05:8f:26:76:46:77:82:b5:c4:41:e5:ce:92:80:e3:5b:d5:72:
         e6:55:ce:0f:03:36:16:52:81:81:c8:0f:87:3a:b0:fd:3b:df:
         df:e2:e2:4d:72:b7:86:38:9f:2a:c6:a4:af:d0:39:1c:08:ba:
         4e:1a:70:b2:5c:94:a7:cb:ef:a7:b6:e8:5e:c5:9b:6d:cb:24:
         f2:db:d3:49:24:c8:c1:a8:4f:58:39:eb:bb:cb:9b:b5:50:af:
         fe:fd:cd:da:54:49:88:8d:b1:7b:d0:10:9b:7f:d6:e8:1a:06:
         d5:46:35:2b:d5:27:d6:ac:d1:7b:3c:03:da:be:0e:64:6d:87:
         01:e3:06:4a:8a:41:77:c4:20:b0:33:c6:87:55:11:9d:f0:c2:
         c6:41:f9:76:59:09:5a:68:ef:c4:93:39:0d:93:f5:9a:a4:ce:
         b4:1d:05:89:21:6b:e5:26:a7:ab:5a:35:c6:d5:67:e2:86:3d:
         45:c2:2d:10:7b:ba:e6:50:a6:2b:52:e6:59:63:59:1c:17:67:
         81:a7:0e:6d:0d:49:aa:5b:ab:1f:f3:38:53:6e:14:cc:05:0c:
         2a:c0:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:06:50 2025 by rpki-client