Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          67KCv/NV7HqStDW8/xdNRCnHh2zbdWv08s8slluNzBY=
Subject key identifier:   0A:9A:C6:51:D9:F2:47:E6:E5:18:45:FA:12:60:FA:6B:3E:C0:4A:71
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       01974BFB0BF37D166DE195F249E4FD630DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          0DF1
Signing time:             Sat 07 Jun 2025 20:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:32 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: 16zlEo7hHEIMlBKrAsw0nCCIh8ZjyL9P7icYPuCJhW8=)
                          2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:0b:f3:7d:16:6d:e1:95:f2:49:e4:fd:63:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Jun  7 20:00:32 2025 GMT
            Not After : Jun  8 20:00:32 2025 GMT
        Subject: CN=0a9ac651d9f247e6e51845fa1260fa6b3ec04a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:45:15:27:2e:5f:7a:3c:5d:e1:d4:2a:30:
                    31:17:ec:7c:a7:3e:4b:01:db:8d:b3:b1:e2:83:82:
                    18:25:fb:4c:40:5f:cf:bf:99:27:02:43:6b:76:e3:
                    b3:eb:e0:1f:66:f5:12:d8:90:3a:be:1c:14:58:fd:
                    01:a8:49:08:60:74:79:5b:ca:df:d7:4c:42:3f:c4:
                    59:75:26:27:eb:36:97:36:5e:3c:4a:9a:29:f0:8c:
                    69:02:6f:e9:70:2d:3c:ed:33:42:64:5d:9c:fa:97:
                    9e:ad:09:ab:3b:7b:6d:6a:22:0c:c5:cf:1b:97:58:
                    9b:93:70:6c:95:6d:ea:c3:13:0a:62:07:f0:f4:34:
                    b8:e0:30:e4:c5:05:8e:89:30:cc:7f:ff:98:fe:57:
                    70:8b:5c:cc:3b:51:66:5b:51:84:00:0e:fd:b6:c7:
                    0a:09:84:a5:f3:3c:aa:fd:90:49:2c:0d:91:61:1c:
                    c3:af:06:83:80:90:37:8c:ee:58:79:4e:71:8f:e5:
                    69:a2:bd:07:f6:13:3e:0e:39:67:7c:bb:d3:59:05:
                    21:d3:7d:b9:37:5b:79:e5:bb:5f:f4:31:6a:a7:74:
                    fc:0e:3b:67:46:9d:9e:29:66:aa:15:b4:0a:d4:cd:
                    0f:37:0e:eb:89:7d:1c:eb:86:ad:28:8f:59:32:4a:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9A:C6:51:D9:F2:47:E6:E5:18:45:FA:12:60:FA:6B:3E:C0:4A:71
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:75:b7:b7:b7:6b:83:8c:09:0f:43:9a:fb:63:db:16:5b:
         cf:dc:94:62:1d:d9:e6:4f:9a:37:33:66:37:83:23:98:c6:ca:
         a7:a7:20:f6:30:09:37:79:79:a6:50:49:2d:d4:d6:f4:41:88:
         f0:b2:67:84:f6:13:ff:d3:9e:e4:f0:9d:c0:b2:51:22:e1:e2:
         cb:16:20:8f:81:48:64:ae:5b:c3:54:ea:02:39:2b:dc:8f:80:
         c1:e9:1e:3e:9d:88:ea:64:01:0c:7b:f7:c7:b3:7a:c9:d2:68:
         90:16:72:25:67:6e:e3:df:1b:9c:72:29:3e:a0:29:f3:97:5a:
         b2:20:0b:04:2a:75:5d:8d:08:a5:e5:cb:62:40:2f:74:ba:e4:
         72:46:85:47:29:f9:46:3e:a3:2c:50:d7:97:5e:9e:a5:3f:10:
         5c:e0:8d:56:19:17:75:a8:bd:32:a5:7f:8b:66:4c:e4:5a:4b:
         e9:3e:ce:ac:3a:9a:0a:74:55:74:e6:c2:58:2f:49:67:53:70:
         5d:b4:cd:85:3f:a3:70:4e:e3:55:35:c8:cc:bb:c5:8b:6d:9e:
         65:bf:c2:a9:9b:01:98:06:76:58:28:ce:76:55:c8:d4:e7:54:
         93:5b:41:9f:27:db:78:0a:2c:89:e8:ff:90:b1:0c:25:ec:f4:
         e7:1d:18:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:23 2025 by rpki-client