Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          QMWLxeDnCujEWV2F3MpawlYLrahjg+ab07Ofjy0I/EE=
Subject key identifier:   F9:A8:D1:EA:69:64:98:13:16:A6:93:10:C3:65:B3:D3:CE:3A:36:28
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019763276F0470F0D885BBBD0084567FC9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          0FBF
Signing time:             Thu 12 Jun 2025 08:00:18 +0000
Manifest this update:     Thu 12 Jun 2025 08:00:18 +0000
Manifest next update:     Fri 13 Jun 2025 08:00:18 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: +/JJFA2VbwyzGdo1QEk3p/5UNSeWSiCMkQrJnQjZOrk=)
                          2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:27:6f:04:70:f0:d8:85:bb:bd:00:84:56:7f:c9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Jun 12 08:00:18 2025 GMT
            Not After : Jun 13 08:00:18 2025 GMT
        Subject: CN=f9a8d1ea6964981316a69310c365b3d3ce3a3628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:ef:25:5e:c6:7f:a3:1c:c8:86:e9:86:0f:
                    9c:81:21:22:0e:39:cd:2d:0c:18:34:2e:9e:89:4c:
                    c6:0f:5b:0c:19:35:e4:27:cd:33:5d:40:b0:27:da:
                    6b:b9:3e:73:fa:62:ad:5f:ab:7c:b4:d9:61:32:29:
                    b5:dc:2e:a6:2a:57:92:f6:3f:51:f6:7f:49:e9:18:
                    49:dc:e5:93:4c:50:bc:13:b8:6d:0e:99:b7:66:ed:
                    92:a3:2b:fe:1c:cb:13:65:4c:98:70:64:09:bd:75:
                    61:86:19:40:cc:d0:8b:d4:89:b8:e6:6e:b1:8e:fd:
                    f2:2b:92:27:23:de:1f:0b:7a:ed:90:37:f1:5c:5f:
                    d4:95:8a:c5:57:e1:8f:7f:81:99:85:f4:e7:0a:dc:
                    b9:26:e2:0a:82:af:51:3d:2f:f9:43:ae:29:3e:ba:
                    be:08:16:ba:4f:21:a9:10:32:5e:a3:83:65:6c:9c:
                    11:39:5c:33:c1:1c:c2:ee:8d:66:ac:17:5b:dd:ef:
                    35:4a:6c:da:37:7f:f2:bc:80:5f:17:46:d4:1e:d2:
                    64:be:0a:28:40:d7:61:7f:8f:ca:81:3c:4c:e1:3f:
                    24:47:f5:6e:6e:87:a6:0a:0f:0c:a9:fb:7c:e0:c6:
                    7b:24:d1:2d:98:37:8d:8e:c5:62:aa:f3:76:a3:29:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A8:D1:EA:69:64:98:13:16:A6:93:10:C3:65:B3:D3:CE:3A:36:28
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:80:2a:14:38:75:68:5a:3f:6c:5a:f3:7c:63:84:f2:82:46:
         f0:aa:89:0c:31:44:c4:4d:de:31:ed:1f:98:ff:9e:da:88:0c:
         b5:be:88:07:32:30:11:8c:57:06:0e:50:fb:02:49:a9:82:7e:
         04:f2:7d:6b:4e:77:78:2c:37:ad:11:36:c2:78:f5:74:f2:9b:
         f3:20:f8:70:d9:99:fe:f9:4d:3c:c1:80:d7:ad:53:05:fc:07:
         e8:20:1d:dd:2e:77:1d:73:ce:20:8b:33:1c:f5:ce:4f:9b:07:
         10:2d:cd:b7:01:e5:60:da:74:ca:da:22:2f:c7:42:88:0d:37:
         07:7e:28:7b:25:68:39:4c:49:53:37:dd:89:0a:28:65:db:48:
         84:82:08:bc:54:59:63:3a:1a:f6:f3:4d:12:ca:2f:d3:b4:91:
         28:da:5f:dc:49:4c:57:c4:1d:56:5a:c3:bc:bb:be:0a:9b:83:
         f8:bd:8c:58:3f:c6:d6:81:d9:43:1a:7d:07:df:2d:31:95:86:
         a9:a4:bf:5a:31:eb:23:5b:26:65:61:04:9d:48:46:a0:dc:61:
         10:34:51:e6:89:d0:3d:53:26:83:6d:bf:c3:a6:5e:d0:77:ee:
         6c:af:30:e8:73:8c:e2:33:8f:ab:12:df:db:bb:0e:d5:92:1d:
         71:7c:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:48:33 2025 by rpki-client