Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File:                     RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier:          FNEr1L+nKq9KXvBFXT08u/qdXQ1dh6H8Y325AOB2LtI=
Subject key identifier:   6B:C7:9C:14:72:13:21:0A:81:D5:2E:A2:88:CE:2E:4F:42:74:86:D9
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer:       /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial:       019752A293B7FE2158F76045BB27BFF50B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number:          14D5
Signing time:             Mon 09 Jun 2025 03:01:15 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:15 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:15 +0000
Files and hashes:         1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
                          2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: hknByqG5Y3SoxY1uWABZPK288X+kngZ82Wk6jVejqu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:93:b7:fe:21:58:f7:60:45:bb:27:bf:f5:0b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
        Validity
            Not Before: Jun  9 03:01:15 2025 GMT
            Not After : Jun 10 03:01:15 2025 GMT
        Subject: CN=6bc79c147213210a81d52ea288ce2e4f427486d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:87:65:97:df:9e:af:5f:fa:eb:89:68:20:
                    dd:66:94:9f:c2:d4:07:e1:ae:31:51:15:96:d8:91:
                    db:da:e3:9b:c0:19:8a:8b:dc:23:76:c6:79:7d:8e:
                    c0:fc:23:c3:6f:61:08:da:51:43:bd:55:d8:db:ec:
                    48:7a:13:a1:3b:ea:2c:fb:96:99:31:3f:7b:6b:6b:
                    3a:44:ff:91:08:f5:70:b8:06:40:5f:70:b1:bd:38:
                    ae:27:4f:88:bc:1d:fc:0e:6d:0b:ca:3d:cf:78:84:
                    5c:74:84:d8:0b:2b:69:5c:f9:66:93:08:b6:fe:77:
                    64:43:bf:20:55:0a:fe:06:12:1a:00:86:46:98:5b:
                    63:32:e5:bc:0f:75:9f:0f:21:83:f0:db:c4:5a:0b:
                    31:12:97:d0:7e:68:20:b9:d7:97:22:15:9e:31:74:
                    98:dd:74:81:1a:49:33:29:30:81:36:fc:ff:34:44:
                    83:7e:5a:92:fc:2c:29:42:12:11:65:68:af:33:81:
                    e1:a1:8d:bd:cb:48:21:e6:1a:78:3f:1b:22:33:ec:
                    a5:b7:55:04:47:f4:77:c7:d7:5c:ce:b7:5a:10:5a:
                    a8:1a:fa:95:fb:58:8c:5e:21:12:49:b9:06:0b:c4:
                    bd:f9:b4:61:81:f4:93:8e:0e:87:46:05:f1:ca:35:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C7:9C:14:72:13:21:0A:81:D5:2E:A2:88:CE:2E:4F:42:74:86:D9
            X509v3 Authority Key Identifier:
                keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:b8:fc:6c:85:48:0d:40:3d:3b:bb:8f:c0:9a:cc:b4:af:
         7d:18:0b:0d:2c:b5:5a:54:1e:c7:2e:49:a0:7d:05:30:31:b4:
         67:2c:30:10:2f:bd:b1:53:e7:9b:24:15:55:d0:a6:2e:f2:4d:
         a2:72:b6:e8:3a:54:0c:f7:68:ec:87:3c:46:b2:4f:45:64:67:
         ba:a7:8e:07:11:c7:2d:87:ed:e2:2a:61:fb:58:19:9d:af:90:
         19:68:a7:1b:b0:b2:51:66:d8:1f:7f:13:38:f0:80:b6:81:a9:
         d9:fd:8d:1b:32:5b:97:37:16:7a:e6:9f:6e:b9:66:61:78:d4:
         4f:54:d7:e8:1e:d0:28:22:75:92:b4:1e:9a:fd:3f:45:c8:7b:
         fe:f9:0c:2d:3f:ef:11:e0:9b:7a:91:b3:5a:73:eb:74:4f:72:
         2e:60:d6:fc:16:73:1e:6a:6f:90:ff:23:80:72:32:c9:5a:01:
         77:4b:7d:ae:f8:7e:c1:1c:be:2e:c6:e3:50:44:6e:b1:36:4d:
         93:65:4f:e0:3b:0b:ee:52:0f:68:1a:2e:6c:4d:a7:08:4c:7e:
         40:28:4c:c7:2b:06:0f:89:72:c4:51:bb:7b:e6:46:b6:2a:ce:
         64:1d:e0:87:80:83:e4:58:30:31:df:a1:7c:9c:8d:f5:2d:25:
         ed:a6:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:27:41 2025 by rpki-client