Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File:                     5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier:          1aF7eBvMXkR8gzIN7sxGOGFkdSqazoN7Yf9J3ea10+E=
Subject key identifier:   E2:96:36:74:E3:5A:40:5A:B5:58:AA:1D:A8:56:88:C7:63:FD:D6:54
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer:       /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial:       01975DCB10AA502778624686752879219D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number:          0EAE
Signing time:             Wed 11 Jun 2025 07:01:18 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:18 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:18 +0000
Files and hashes:         1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: XcY6VNmv4Chk4aOCnzsGmmDvkkvR/jUCkotIso5QbFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:10:aa:50:27:78:62:46:86:75:28:79:21:9d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
        Validity
            Not Before: Jun 11 07:01:18 2025 GMT
            Not After : Jun 12 07:01:18 2025 GMT
        Subject: CN=e2963674e35a405ab558aa1da85688c763fdd654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:3b:f2:df:f7:78:58:9e:42:11:96:bd:f3:
                    57:3a:b1:de:0f:27:19:59:c6:49:10:77:8f:62:42:
                    9e:10:68:e6:ba:88:4e:30:c7:d3:b2:a7:39:03:85:
                    33:b5:48:7c:fe:db:23:b2:14:34:41:df:59:eb:62:
                    8f:30:58:b1:85:24:13:de:0f:f4:74:50:29:77:02:
                    03:bc:b0:77:16:a5:f3:75:f3:be:8a:9c:af:84:03:
                    52:21:32:57:52:a1:1c:8d:4b:be:42:10:0c:b2:a6:
                    df:d4:3f:57:68:03:9f:81:f7:5c:e3:71:a4:fe:37:
                    2b:84:32:f8:36:c2:20:8a:aa:c9:4a:31:2b:2a:5b:
                    9d:38:16:40:90:ca:4e:79:97:bc:81:37:6f:09:f9:
                    06:c5:b8:9e:3c:8f:4d:ef:1e:b9:bd:cc:60:85:c4:
                    00:8f:69:6b:1c:9b:d8:c2:7b:6b:fe:4d:f0:6c:05:
                    cc:7f:e7:03:dd:ed:27:ed:49:2d:9b:08:b9:38:c2:
                    4a:94:3f:86:21:56:2e:6e:83:fd:b5:24:81:dd:bf:
                    4c:16:fb:12:47:14:e1:5e:ef:58:17:e0:1c:fb:8b:
                    2f:4a:1c:42:09:38:b6:b7:9a:d4:1f:d5:9c:19:b2:
                    21:bb:b9:88:52:92:d4:2e:fc:28:1e:61:0c:cc:af:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:36:74:E3:5A:40:5A:B5:58:AA:1D:A8:56:88:C7:63:FD:D6:54
            X509v3 Authority Key Identifier:
                keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:6d:34:6e:44:2e:1b:d9:03:27:e2:e2:4f:9c:f1:2e:b1:
         d8:17:59:f7:80:7b:14:33:60:bf:95:89:b2:09:02:6b:53:54:
         f9:79:bd:5f:cc:33:a2:16:e9:07:40:cd:f0:a7:be:50:e9:8e:
         bd:a1:91:18:8c:16:85:bb:37:3a:0e:13:70:97:42:d3:ef:2a:
         60:ac:58:0b:0a:2a:ed:7b:e6:b6:d5:88:9c:77:55:29:62:57:
         e3:26:4b:d4:d5:0b:26:7f:97:02:dc:92:21:6a:53:be:f0:59:
         be:db:cd:16:4f:6d:b1:06:6b:51:18:30:02:c1:0f:ce:93:6c:
         50:a0:df:92:80:6e:e4:72:72:23:b7:7d:18:df:bb:29:1e:4f:
         7d:fe:0c:e7:eb:34:c6:fc:1e:32:99:66:bb:c3:82:29:30:6d:
         bc:a4:04:f6:87:59:a2:11:31:67:d0:6c:3a:90:86:60:4c:1e:
         48:cf:9f:6f:37:75:e2:0e:02:9c:2b:09:70:0e:b8:93:c3:e5:
         f7:0a:74:ab:3f:22:06:6d:ee:72:2e:d7:ce:b2:a5:66:d2:bd:
         b3:ad:4a:7e:6f:72:1d:d7:68:81:00:54:d6:78:10:85:58:31:
         5c:be:3a:01:b8:92:19:37:83:28:71:a9:be:15:bf:56:ee:17:
         bf:e4:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:52:27 2025 by rpki-client