Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          fy+SYzNpwrI7gFjwEjeyQIPXvRVZF8vs7hmid7uf0Dc=
Subject key identifier:   B2:9A:4A:A8:EA:CC:0C:71:53:A5:D0:C1:1B:FA:C2:59:9F:35:33:2E
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       01974BC4768D758A677132ABE0F0233311EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 19:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:55 +0000
Files and hashes:         1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: mkGygGjJH88b+8djkdHSFOkJQ2TjEayBb8P5Hc7uXgg=)
                          2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:76:8d:75:8a:67:71:32:ab:e0:f0:23:33:11:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Jun  7 19:00:55 2025 GMT
            Not After : Jun  8 19:00:55 2025 GMT
        Subject: CN=b29a4aa8eacc0c7153a5d0c11bfac2599f35332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:01:46:1e:98:11:b2:2b:e9:78:8e:10:1d:5d:
                    5c:fc:56:44:dc:86:5c:19:79:ff:06:6b:ff:c8:7b:
                    2a:7d:cd:63:06:22:fb:7d:c9:a8:80:dc:ed:8f:bd:
                    b5:7f:84:02:7f:da:2e:e4:11:2a:4f:6f:a6:19:1a:
                    3f:9a:e0:43:b4:61:e5:20:79:a0:62:e7:36:93:da:
                    3b:d6:be:d6:fe:2f:cb:6a:dd:80:6b:e9:18:6d:1c:
                    9e:d7:3e:17:80:3c:89:a4:c1:e0:13:c7:99:99:68:
                    7d:3b:d0:74:27:e8:3a:42:18:33:d5:38:23:80:68:
                    9b:16:62:4d:c2:a5:69:77:95:8b:5a:22:a5:6a:64:
                    8d:55:80:ea:13:35:0d:5d:27:b1:b1:cd:ad:a3:d1:
                    1c:bf:44:33:56:71:5e:5d:6b:0f:bb:5b:8d:42:38:
                    c8:59:1f:b0:4a:a8:75:b1:f1:fc:cc:a3:d7:fb:af:
                    af:a2:04:e4:46:10:07:c7:2b:7c:db:03:10:fc:de:
                    4a:71:a5:cb:04:b9:9d:ac:cb:cf:fb:c2:9c:33:30:
                    48:bb:11:82:e6:49:41:34:a6:7c:d1:08:20:84:f1:
                    de:76:9e:ef:13:95:5c:9b:a6:d8:4e:ae:e1:01:16:
                    e9:91:db:88:ae:b3:22:25:fb:42:eb:70:f4:16:12:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:4A:A8:EA:CC:0C:71:53:A5:D0:C1:1B:FA:C2:59:9F:35:33:2E
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b2:fa:21:9a:a3:cb:49:ea:78:4a:fb:73:43:c7:6d:e7:73:
         e7:b6:d5:e0:aa:31:3b:ef:d3:65:36:cb:62:c0:42:d1:52:40:
         05:1b:2d:32:7a:24:22:2d:b3:2a:7e:e6:f7:43:39:e2:3b:03:
         24:cd:4c:14:b3:c9:d7:62:82:b3:2b:ee:44:b9:42:df:5a:a4:
         f4:19:39:bf:06:d3:2d:52:5b:47:7a:6c:18:dc:5c:e6:eb:1a:
         ea:d2:4b:0a:74:fe:a3:6a:09:8e:73:aa:57:5f:85:d5:88:4a:
         ff:b0:6f:0d:34:39:6d:78:0a:5b:3e:26:cb:31:f6:5f:c0:7f:
         f1:13:dc:1b:94:35:10:aa:d1:7e:67:12:56:ca:1a:85:e3:5a:
         21:cc:33:81:c9:2a:02:3c:0b:23:5a:47:3b:c6:40:a9:4e:ea:
         7b:98:37:69:8e:4d:26:cb:a6:59:9f:2a:79:e9:2a:e4:91:80:
         cf:76:b3:26:ed:ee:3e:de:c4:0f:c1:34:15:ea:d8:06:f0:21:
         85:4d:0c:3a:39:b1:c1:01:ac:5f:76:b9:d3:31:49:db:58:94:
         e2:63:c9:0c:84:39:e6:17:35:84:f5:df:79:8a:e1:b6:11:33:
         b7:dd:32:e5:d6:6f:9b:9c:cd:6b:6c:b2:71:32:e8:35:b4:9b:
         1e:de:9f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:15 2025 by rpki-client