Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          4lveVonqdJbl7GiYRRL8F5WGcEdK3toZWRHfDjNtXaY=
Subject key identifier:   9B:B8:95:02:85:5A:5F:F9:0D:9D:EE:59:F8:88:78:CE:27:2B:72:CE
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       019770082901E836F443050D0C364C9C9F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0DAE
Signing time:             Sat 14 Jun 2025 20:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:12 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: mCha+rKpYjcGDllF1hYLQL+BMmKM2993W0bSRYVgavA=)
                          2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:29:01:e8:36:f4:43:05:0d:0c:36:4c:9c:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Jun 14 20:01:12 2025 GMT
            Not After : Jun 15 20:01:12 2025 GMT
        Subject: CN=9bb89502855a5ff90d9dee59f88878ce272b72ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:11:6e:a2:7b:5b:db:12:15:e1:7d:33:b7:
                    1d:f8:b8:7c:a7:f1:58:f3:a0:f7:e4:62:65:24:6c:
                    d3:ec:aa:36:a4:51:de:90:a2:61:0c:d0:19:04:15:
                    17:62:51:e2:63:7d:5b:7b:84:ad:34:43:6f:93:fc:
                    27:ad:16:db:ed:81:fd:81:f7:29:cc:8f:62:be:d4:
                    dd:1e:0e:0a:ab:c6:c0:ba:02:66:b6:91:05:88:35:
                    50:f0:8a:40:a2:4b:b1:71:6d:5f:76:df:02:44:6c:
                    89:15:a6:54:59:02:ec:88:e9:29:6c:63:6d:95:68:
                    46:37:de:18:2c:54:ec:b4:7f:db:d3:89:df:10:80:
                    b1:bd:fa:b9:9e:c2:73:81:e2:a1:fa:ad:b9:32:8c:
                    b9:f2:89:3f:27:b1:20:00:90:c2:eb:03:bf:3d:cd:
                    b0:05:4b:63:5a:51:db:fa:07:a5:11:2c:ef:2f:6f:
                    28:60:22:fd:51:93:b9:90:6b:43:60:05:0d:ac:58:
                    b3:89:0f:b4:ed:12:44:d0:e6:4c:6b:43:96:a2:51:
                    15:94:7c:7c:42:40:07:e9:15:6d:99:88:3b:71:fa:
                    03:c3:50:eb:a5:5c:14:31:24:d0:20:01:35:0a:48:
                    97:93:84:6d:9c:6c:1b:6c:1a:9f:a8:a4:f4:b0:29:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B8:95:02:85:5A:5F:F9:0D:9D:EE:59:F8:88:78:CE:27:2B:72:CE
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:73:ea:a6:33:6e:d1:ef:ea:48:2a:1d:dc:dd:ad:57:03:
         db:f4:d2:13:e6:09:f2:bd:51:81:37:42:2d:bc:8b:27:3c:2e:
         6c:5b:01:c6:e5:c0:a1:bc:7c:49:26:cd:ad:72:d4:50:49:b9:
         e5:af:ff:d7:6b:fa:31:da:6c:2c:2c:e0:76:4f:b9:ed:a1:ee:
         ef:83:be:3b:51:1e:f0:16:7e:1d:88:04:46:f6:e1:d1:c0:01:
         76:6b:b3:9e:9b:9c:89:4e:da:cf:54:e5:ce:bf:5a:ca:5f:9c:
         e1:56:bc:33:23:f3:fb:8a:ee:f5:4d:ba:a7:1e:4e:d4:27:7a:
         d4:16:d5:49:2f:77:3c:b5:37:21:a9:7c:d4:9d:06:7b:c1:81:
         08:3f:a2:7f:f4:22:cc:97:2a:1f:9a:44:c9:9c:31:62:d5:1f:
         4f:c5:26:f3:ed:a1:64:28:3b:b6:a4:4c:4b:b4:f7:80:3f:1d:
         72:99:64:21:92:e4:6d:68:b8:44:d7:3e:f8:a9:2b:e1:b6:a1:
         92:7a:96:88:77:c5:da:2b:99:56:8c:15:4b:e6:6f:a3:bd:be:
         7c:0d:38:f6:13:e9:6b:56:50:53:d0:d7:27:84:b1:c2:61:63:
         ab:be:85:34:c1:7c:16:00:5a:12:59:f7:14:f2:fa:a1:16:39:
         91:f9:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:04 2025 by rpki-client