Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          Fl6AJbqHI2EdMzhRJmG6z//5HfCOTQq7jf6PmLCydI8=
Subject key identifier:   0B:D3:0A:C5:CD:4F:BC:13:8A:A6:6C:DE:09:E1:B8:E5:BE:DF:88:4D
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019753B4743C0649A35079B2F90236F9BEE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          0FB7
Signing time:             Mon 09 Jun 2025 08:00:24 +0000
Manifest this update:     Mon 09 Jun 2025 08:00:24 +0000
Manifest next update:     Tue 10 Jun 2025 08:00:24 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: HceYvrj8Kulog2bfSs0M0dQqzu7ScNOg7ozqSdzhKAA=)
                          2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:b4:74:3c:06:49:a3:50:79:b2:f9:02:36:f9:be:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Jun  9 08:00:24 2025 GMT
            Not After : Jun 10 08:00:24 2025 GMT
        Subject: CN=0bd30ac5cd4fbc138aa66cde09e1b8e5bedf884d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:b6:fb:60:72:72:f6:c4:ed:f6:44:75:12:
                    65:81:da:61:f6:eb:ce:60:6b:43:e9:52:b6:8f:1e:
                    b2:d8:ce:cc:02:0d:26:ca:6c:9f:05:20:07:b2:5a:
                    23:6f:d6:1c:08:b9:47:38:1f:32:ee:d9:8a:bf:16:
                    40:61:12:ff:f4:6b:e7:f7:51:df:5b:09:c2:8f:fb:
                    fb:6d:28:47:4e:19:e3:f4:b3:e7:5c:74:f5:69:27:
                    4e:5e:28:c6:b8:4c:38:a9:47:82:12:57:1f:c4:b8:
                    3e:20:06:84:23:fc:80:a4:15:b4:37:7c:12:35:ac:
                    d6:72:80:85:a1:87:08:a6:4d:83:8b:f8:87:ad:90:
                    4c:56:5d:85:6c:31:32:64:66:bc:76:90:bc:5f:e7:
                    ed:1e:2b:c7:29:11:e1:17:62:16:48:d2:1b:ce:ee:
                    bc:84:9f:28:ed:79:20:c1:4f:e4:a2:e8:d6:af:8c:
                    df:0b:23:56:88:30:64:61:e2:1b:b3:45:b0:9b:30:
                    81:e6:13:7c:7f:80:52:72:01:86:51:bb:36:04:4a:
                    2b:20:30:6e:62:fe:79:47:8d:a0:ff:1a:88:c4:28:
                    95:df:8f:cf:c0:cd:93:85:a2:a5:01:bd:3e:a0:cc:
                    60:b8:ef:20:2b:46:95:5d:8c:36:41:67:7f:8e:1d:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D3:0A:C5:CD:4F:BC:13:8A:A6:6C:DE:09:E1:B8:E5:BE:DF:88:4D
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:ce:7f:c2:c2:25:83:8a:fe:ee:78:93:e0:c5:8f:ce:2b:
         55:a2:7f:53:4c:1e:ce:9f:91:c5:26:6f:2a:f0:af:34:a2:19:
         82:46:2b:fa:b9:37:6b:0c:21:0b:60:49:a6:ec:25:a0:5c:4c:
         1f:70:d9:4f:56:ac:08:5f:fb:f7:07:74:61:91:fe:c5:59:5e:
         fc:0f:32:4c:80:48:60:88:c5:90:07:0c:46:67:7a:77:d1:ff:
         76:37:3d:97:c1:ee:c8:4a:25:67:f1:53:40:4f:4b:3b:d9:3b:
         9f:56:b1:69:e9:b6:41:f6:f5:64:0f:92:06:5b:67:17:24:54:
         18:19:a4:61:82:c5:ef:cf:95:d3:7e:c0:b0:34:61:84:0e:de:
         74:39:c6:c1:05:c6:65:24:50:67:09:d3:db:cb:5f:02:f4:0f:
         19:79:9c:7b:2f:e6:f9:71:a9:68:4c:d1:e3:2f:27:50:d8:ae:
         81:2e:ae:de:3e:39:17:b6:bb:48:a7:98:f2:6a:8a:36:70:6c:
         ef:79:a8:a8:75:62:bf:f9:16:8f:16:57:60:a8:8d:fb:81:66:
         80:9b:7e:1d:ef:a2:db:66:56:f2:40:90:89:38:a4:c6:fe:16:
         28:ac:f1:ac:b9:7c:7a:52:b1:b7:9a:11:f3:93:f4:84:2b:1b:
         8c:c8:d5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:48:37 2025 by rpki-client