Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          HbqzibbsBaoqNjpMJxvJyEzBhAwZG8ZPGrZxs3GsJB4=
Subject key identifier:   E9:61:F7:07:4F:F9:C3:B6:A4:34:60:55:7F:53:7B:94:D9:D6:9F:CB
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       01974EFC1C3093F395D86EAD57096596940C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 10:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:34 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: VlGE9kEhqFvaSI/Eg0wL37IhsLZ0x8bZYlQpTNAuPrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:1c:30:93:f3:95:d8:6e:ad:57:09:65:96:94:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Jun  8 10:00:34 2025 GMT
            Not After : Jun  9 10:00:34 2025 GMT
        Subject: CN=e961f7074ff9c3b6a43460557f537b94d9d69fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:46:39:3a:39:b4:95:22:68:8d:7d:7d:3e:
                    98:0c:32:c0:6a:cc:a9:a1:e4:c1:fc:f8:13:96:57:
                    4d:04:e8:19:24:7c:73:07:d3:56:0d:72:72:a0:31:
                    bc:0b:df:43:39:2a:3b:cd:7c:0e:25:6e:31:f7:04:
                    96:43:a0:d1:16:1a:ac:79:58:ec:f3:18:0c:66:c5:
                    cc:e6:9f:5d:ed:c0:2e:ee:5d:56:de:27:ba:a6:11:
                    c9:3f:ec:de:86:23:18:43:55:90:3f:ee:a8:91:bc:
                    53:01:2c:23:54:9f:d2:84:d6:a0:61:e2:89:08:42:
                    c2:e9:6a:26:d2:99:a5:6a:74:0d:af:5d:ac:67:64:
                    cf:7e:31:00:36:66:bb:76:45:0e:58:ab:3c:32:ff:
                    3c:a1:dc:78:75:95:42:1b:8a:5d:fe:1a:59:34:5b:
                    e3:87:5f:c8:64:de:84:a0:ac:55:e2:c9:52:7b:dc:
                    a1:a9:5f:d0:6f:ee:c8:8d:65:2b:1c:f5:09:84:ed:
                    72:1f:69:c0:ab:6e:54:d3:ef:07:87:11:65:85:e2:
                    c7:91:d5:32:e3:47:8d:92:02:74:51:ee:92:fb:7f:
                    be:71:51:88:7e:e2:f9:90:7d:67:82:1b:b4:72:6e:
                    53:1c:08:ce:89:81:7c:c6:84:6f:2d:58:c1:df:3a:
                    4d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:F7:07:4F:F9:C3:B6:A4:34:60:55:7F:53:7B:94:D9:D6:9F:CB
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:ae:c1:c3:1e:04:73:f3:15:8d:0f:98:73:7c:97:bb:12:
         5c:72:38:df:67:3e:dd:df:4a:ff:86:08:40:b3:df:5f:47:f3:
         2c:09:92:99:54:3f:b0:90:b5:40:2f:18:58:7d:fc:d3:dd:3a:
         a1:5d:ce:0e:d8:5c:90:e3:e2:3e:c5:fa:b9:61:e9:08:60:3b:
         fa:95:09:d9:2e:07:e8:0a:a8:34:a5:30:13:b4:a3:51:21:28:
         af:36:c5:99:64:a9:51:ef:4e:9d:bc:dc:20:b7:2d:7b:fd:d2:
         b4:42:af:f8:d3:c4:81:b7:30:a8:ab:02:27:e3:4a:7c:9e:ef:
         59:d4:c6:b5:4f:7b:08:dd:bb:fc:19:a8:3c:12:55:71:d1:85:
         55:86:3e:f2:d1:c0:ee:df:76:ba:82:66:72:63:4b:eb:e1:4f:
         73:31:87:08:ce:57:65:5c:44:2a:26:7c:c7:32:78:47:01:32:
         86:05:de:6a:e5:68:db:81:ef:ad:2e:a5:bb:6b:60:53:40:52:
         79:dd:a8:f7:8c:4b:f0:85:94:a0:47:6a:3b:7e:9b:08:39:6f:
         7c:be:99:36:23:9b:53:0e:49:af:fa:59:fb:c8:fc:35:38:25:
         ab:53:3d:39:31:2d:bb:ec:27:68:9f:26:38:2f:65:e6:df:33:
         3d:99:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:32:49 2025 by rpki-client