Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File:                     5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier:          GxWiRiGYMMIrHNgSkags8TYJFYQjoCg5+jLaHQbHEaQ=
Subject key identifier:   21:99:88:8E:DE:18:97:20:60:E6:B9:7C:00:6F:A2:D8:D3:A6:F1:86
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer:       /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial:       0197722CEC85894A0F105E05A72BBEF360CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number:          1016
Signing time:             Sun 15 Jun 2025 06:00:36 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:36 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:36 +0000
Files and hashes:         1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: vOx9McTg+bEw0uvD994z46myhxSx5gtKn4185x1ekt4=)
                          2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
                          3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:ec:85:89:4a:0f:10:5e:05:a7:2b:be:f3:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
        Validity
            Not Before: Jun 15 06:00:36 2025 GMT
            Not After : Jun 16 06:00:36 2025 GMT
        Subject: CN=2199888ede18972060e6b97c006fa2d8d3a6f186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:6d:f2:f6:b8:ca:d8:3b:7f:2d:7d:2a:8d:
                    b5:18:1e:59:84:28:0f:34:08:bc:94:36:e8:6d:3b:
                    2c:75:04:91:44:83:3e:ab:48:4e:bd:b3:9b:91:8a:
                    ea:6c:55:16:6d:76:36:77:d4:c6:6a:51:98:f5:95:
                    25:8e:33:78:ad:35:94:c9:7c:ea:ae:60:5c:3d:39:
                    bf:5d:d0:ef:34:f3:28:c0:83:da:0a:a7:91:8f:93:
                    f0:ca:07:ab:d1:3f:36:8b:66:5f:c5:4f:c1:92:fe:
                    f7:b3:84:4a:9a:33:6b:24:14:12:c8:9b:17:a8:97:
                    1d:f1:bc:14:87:1d:ad:8e:98:50:9a:62:93:60:b0:
                    de:1a:c1:1e:96:be:86:63:11:be:7a:ac:1e:3c:b0:
                    f4:cd:6e:a7:12:02:e3:38:c9:9f:ed:0b:98:a4:39:
                    66:17:26:85:f7:f0:f1:56:e9:af:da:b2:4d:67:04:
                    53:d9:92:02:e4:2f:85:c6:82:dd:a4:4f:34:6d:5f:
                    5b:35:5d:db:06:4d:9b:6d:81:f2:b8:46:df:c9:e6:
                    99:20:31:d8:3d:2e:6b:ce:db:8f:39:7a:08:89:68:
                    92:f0:00:6a:b4:cb:59:57:27:ff:0e:77:73:d4:b9:
                    3f:3d:2c:ed:c4:5c:c7:89:cf:13:ab:73:45:57:25:
                    b9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:99:88:8E:DE:18:97:20:60:E6:B9:7C:00:6F:A2:D8:D3:A6:F1:86
            X509v3 Authority Key Identifier:
                keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9d:4b:b1:87:46:44:da:dd:b0:c2:92:8d:bc:37:5f:77:a4:
         fa:a7:d2:ba:a2:77:2b:f9:99:54:6c:b0:2b:90:8e:62:1c:9b:
         0e:27:4b:49:62:7c:69:5a:9d:b7:48:b1:ac:ed:d5:b7:74:88:
         7e:4c:39:aa:08:67:00:2a:62:15:b3:d0:b5:f5:78:8a:a6:d0:
         08:b7:4a:f3:d9:02:f4:40:ab:3f:7c:67:84:35:bb:b6:da:32:
         0b:05:4f:23:e3:86:d6:fe:8e:11:43:03:5b:0c:28:df:d1:3b:
         05:8f:5a:fd:29:3c:66:74:b0:db:66:b8:ad:db:f2:68:64:6e:
         60:b6:78:77:70:c5:12:01:ec:08:49:c0:6e:1e:9c:80:ad:4a:
         0b:8c:b2:6b:fc:2d:a8:c8:7c:12:0d:30:b9:26:f7:3f:b0:ee:
         d7:36:64:dd:49:d5:d6:3d:5e:7a:a8:de:b7:26:ca:2f:18:d1:
         46:a9:44:a4:4a:7d:a3:8d:0c:76:bb:fa:28:a7:b5:e4:bb:0e:
         22:44:5d:eb:c7:50:01:24:44:8e:4e:88:9a:1f:e0:04:3a:e0:
         33:28:fc:67:29:9e:8a:11:54:8a:02:7e:85:e3:c6:49:7c:74:
         fc:32:59:fd:e7:60:5e:e9:be:ef:33:ff:b3:98:05:99:28:ae:
         d6:a7:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:57 2025 by rpki-client