Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          P9qL3CA6NlY8pr16r2LUK2I5tRWwiJ8OR/bEtSlnm4I=
Subject key identifier:   11:24:93:9B:01:8A:E5:3D:4F:BC:40:B4:6C:E0:16:19:21:19:CD:46
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       0197597FA72EED0B5C0C88AF21565F43D873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          0FBA
Signing time:             Tue 10 Jun 2025 11:00:27 +0000
Manifest this update:     Tue 10 Jun 2025 11:00:27 +0000
Manifest next update:     Wed 11 Jun 2025 11:00:27 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: 7vTcAfadwAInevIjvWcrfPvIVZ+m2vDF7nHNFSYCXRo=)
                          2: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (hash: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:7f:a7:2e:ed:0b:5c:0c:88:af:21:56:5f:43:d8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Jun 10 11:00:27 2025 GMT
            Not After : Jun 11 11:00:27 2025 GMT
        Subject: CN=1124939b018ae53d4fbc40b46ce016192119cd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:ef:eb:cc:1e:53:4c:9d:d4:af:86:5e:65:
                    78:cf:16:af:38:1e:f9:72:fc:88:66:13:46:43:9e:
                    a5:1a:33:02:4f:13:2d:ef:df:3a:38:22:2c:0d:01:
                    2a:8f:6d:76:88:71:51:81:2e:ff:01:5b:7a:7b:1e:
                    1f:fc:23:44:2a:7f:53:b2:fa:d0:2f:75:4e:26:85:
                    21:3c:04:d5:76:44:57:2c:ac:c3:3b:8c:d8:a3:75:
                    cc:d8:8b:13:9f:df:60:cb:fc:95:6e:73:5f:e2:f6:
                    66:4f:e5:b9:ce:6d:f0:f0:bd:4f:46:fb:37:58:7b:
                    99:77:2f:77:b4:0d:9a:90:eb:f9:dd:a8:3d:23:c7:
                    e0:04:ae:8b:af:d3:33:fc:79:04:fe:64:46:54:77:
                    3c:5b:a0:da:31:8b:53:78:97:a2:96:7d:27:29:90:
                    6d:cc:a2:a2:8d:20:32:09:69:0b:14:fa:7f:e1:1e:
                    f1:a4:e0:7d:20:9e:4d:52:36:61:6d:0e:75:41:c4:
                    a9:37:f4:dd:cc:28:d6:63:f1:15:5b:62:ee:7d:0d:
                    7d:d5:59:ba:c1:a9:e7:ac:3f:3d:17:bc:dd:85:2c:
                    9d:a8:96:e9:c2:ed:c9:e9:2a:1c:3b:b4:a0:e0:eb:
                    ea:43:7f:ba:46:54:8e:a8:a4:7c:ed:b9:ea:f7:c2:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:93:9B:01:8A:E5:3D:4F:BC:40:B4:6C:E0:16:19:21:19:CD:46
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f4:7f:d0:f5:2e:7c:88:d4:6c:7b:05:c8:f1:f9:a0:32:e8:
         51:38:a6:58:65:33:db:36:89:91:76:dc:b7:23:fa:5f:62:0d:
         70:4d:f0:02:b7:a9:38:ed:99:c9:a9:6d:60:d2:c6:84:c6:ae:
         44:5f:e6:24:20:52:6b:5a:a1:6c:71:f3:17:6f:96:91:ac:7e:
         12:11:53:66:c7:a0:55:42:43:3a:c4:41:8d:ee:44:a5:18:a8:
         fa:e9:0a:32:1b:13:c7:ea:bf:76:f6:91:56:a2:d5:58:8b:f1:
         74:49:90:d3:25:5e:8b:66:39:c1:8a:b9:28:2e:da:99:a8:dd:
         eb:ab:b4:a3:8f:64:6f:e6:99:77:d2:cf:8e:32:88:1d:55:0b:
         39:17:e1:8c:d9:34:38:ec:40:8c:de:03:df:7d:a6:f3:96:3c:
         57:5b:39:1f:3b:c8:92:12:5b:97:77:30:23:4c:c5:d9:bb:e9:
         a9:a7:29:53:c4:65:c5:69:3a:41:57:b2:1d:60:26:29:24:a9:
         59:4d:7d:1f:35:36:b3:85:a3:e3:96:c9:58:18:8c:f2:f3:39:
         65:59:80:ac:41:23:07:d3:41:5c:cd:3d:88:59:f4:85:8e:4f:
         77:f8:ed:ed:60:aa:46:5e:a5:3c:d9:e3:9b:d7:ca:55:ab:a5:
         bf:e5:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:40 2025 by rpki-client