Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File:                     1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier:          hGZf7/O0WY3pJosDLS8iAZglLP3SdEde7Av+xKONkHU=
Subject key identifier:   6A:34:53:20:72:32:72:03:11:94:FA:1D:7B:69:8C:EE:03:2C:FA:8D
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer:       /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial:       019746D50BB774A7BA3087EBC98DEA24971E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number:          05E0
Signing time:             Fri 06 Jun 2025 20:00:56 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:56 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:56 +0000
Files and hashes:         1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: 5aOXSnxTglDeN1osYhVIjv2eayUHJQ4TxwEN4HqdKgE=)
                          2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
                          3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d5:0b:b7:74:a7:ba:30:87:eb:c9:8d:ea:24:97:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
        Validity
            Not Before: Jun  6 20:00:56 2025 GMT
            Not After : Jun  7 20:00:56 2025 GMT
        Subject: CN=6a345320723272031194fa1d7b698cee032cfa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:fe:a6:d4:23:e9:39:a3:81:f0:5a:3a:cd:
                    69:93:34:e7:62:83:71:a8:7c:94:e8:e1:fe:ed:60:
                    b3:25:b2:f8:5a:82:d4:e2:cc:85:25:f3:97:73:66:
                    d1:47:3b:2e:35:19:08:20:64:d2:c8:ae:6d:f0:f9:
                    94:02:f7:18:0f:f9:bd:d3:db:b3:c4:1d:85:1f:cf:
                    c8:43:14:3a:8e:e8:22:75:df:39:75:cc:8f:d3:63:
                    fa:53:af:ce:89:d6:a3:e5:de:8b:6e:c9:03:d1:e1:
                    6c:5b:ea:af:7a:8f:97:d9:3d:f1:f9:fd:5a:86:74:
                    84:cd:2f:e6:d1:57:44:75:52:57:17:84:e6:bd:79:
                    1e:ad:8d:e6:87:6a:6e:dd:c9:1b:25:ab:ee:39:00:
                    ba:64:bd:97:9b:f2:22:4b:4b:26:eb:39:48:84:84:
                    ae:27:e9:d6:77:1c:37:96:70:b2:bb:37:01:74:f5:
                    93:63:f0:53:22:39:41:6a:90:7c:bc:d8:d4:46:66:
                    ba:dc:a4:2c:1c:8c:a7:95:9d:e9:b0:57:3d:ac:bf:
                    27:46:6c:bc:1a:c3:fb:2d:23:e7:37:7e:1f:4e:ad:
                    6a:c1:61:c6:97:24:df:21:ee:3a:3a:8e:cc:d4:65:
                    6a:77:e5:67:db:b9:37:35:f9:2e:dd:22:79:5a:25:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:34:53:20:72:32:72:03:11:94:FA:1D:7B:69:8C:EE:03:2C:FA:8D
            X509v3 Authority Key Identifier:
                keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:bd:b5:6f:b3:47:8f:b6:c7:63:45:68:f5:ab:ab:3f:27:
         4e:6a:4f:4f:a5:bb:78:4e:75:2e:07:07:88:51:65:81:4a:58:
         30:8e:ec:32:85:17:2d:f2:86:5a:90:96:f4:82:0c:aa:b8:5f:
         c5:ca:d1:6c:06:65:b0:12:c9:cc:64:90:ec:60:51:c4:ca:b7:
         88:21:cb:36:a1:75:59:30:f8:00:05:76:49:7b:b0:50:af:6f:
         7a:c3:3c:0c:d5:9d:15:35:6c:5b:28:bd:51:74:5a:60:ef:80:
         5d:4a:5c:2e:cb:67:ed:b3:5b:14:16:1d:26:0c:58:82:8f:1e:
         10:f0:ac:d3:35:7d:12:c0:2e:1a:47:b5:4b:ed:15:28:a6:85:
         09:0e:a8:21:03:54:40:61:4f:54:a8:ac:5f:6a:7f:bc:b3:2b:
         a3:a7:ae:ad:5f:ea:14:03:ef:47:74:1c:7e:6c:56:e5:57:6c:
         13:83:5f:ef:93:e0:e5:25:c7:e3:e3:79:ab:55:c3:17:36:7a:
         90:5c:e6:2f:76:0f:56:c3:dd:4d:9f:ef:34:15:0d:6e:0d:30:
         68:a7:7e:c0:5e:58:fb:bd:04:e6:0c:4f:3b:8b:a2:6d:80:04:
         7c:4e:50:ad:30:d4:9c:67:88:a2:15:a3:de:8c:80:82:2c:2b:
         52:4f:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:31 2025 by rpki-client