Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          6nmcQvHusVWNtaqPBG2P2EzgjD5QlX24E/St/oFmAx8=
Subject key identifier:   AE:60:AC:EE:3D:F9:1D:99:47:03:2F:4D:33:21:A4:2A:1C:AC:C2:84
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       01976A3CD5F2E141B0A7EFC7B66F1085A695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0DAB
Signing time:             Fri 13 Jun 2025 17:01:01 +0000
Manifest this update:     Fri 13 Jun 2025 17:01:01 +0000
Manifest next update:     Sat 14 Jun 2025 17:01:01 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: IaLXAyKncdXrlc8boKE3jEa6gXk2xIgXza8gB8aqvW0=)
                          2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:d5:f2:e1:41:b0:a7:ef:c7:b6:6f:10:85:a6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Jun 13 17:01:01 2025 GMT
            Not After : Jun 14 17:01:01 2025 GMT
        Subject: CN=ae60acee3df91d9947032f4d3321a42a1cacc284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:1b:52:90:b2:da:34:18:6b:27:db:ac:36:
                    7a:15:76:8a:82:1d:61:45:a8:b8:d4:9f:fe:ca:f6:
                    b2:9a:a1:50:9a:55:4b:42:6a:c3:c8:d0:a9:7c:f4:
                    78:4a:2d:e4:8c:65:f6:ef:36:6d:da:78:09:43:2e:
                    12:f8:fe:9d:54:2f:ab:50:53:01:ba:08:3c:f4:80:
                    f4:20:14:f5:1f:42:e9:21:5f:f9:12:48:f4:fd:a2:
                    33:fb:de:9f:b5:b2:29:49:ae:12:48:75:9c:55:b3:
                    32:cb:d1:29:7d:2e:3d:07:81:81:9f:31:a2:41:00:
                    e4:a1:8d:db:67:01:e3:f8:4e:27:2e:85:c7:4d:13:
                    da:59:ca:aa:13:52:35:26:41:1a:7a:86:7a:15:fe:
                    82:96:d3:38:07:9b:9c:0d:1b:df:dc:65:72:6c:ab:
                    66:ab:4f:6c:0c:e9:ab:4a:a0:ae:87:ca:27:40:34:
                    f7:0b:b8:71:86:71:5e:85:3c:66:db:27:ee:a0:25:
                    0b:2a:cd:38:af:fa:26:0b:5a:0f:0e:cf:9b:20:20:
                    82:f5:4c:71:1f:7a:4c:d7:e4:17:5d:74:72:0f:a8:
                    e4:2c:bf:e7:4b:3b:73:71:97:1b:a5:82:a7:21:04:
                    aa:0f:99:13:bf:a9:b9:ec:64:0a:86:7e:38:34:97:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:60:AC:EE:3D:F9:1D:99:47:03:2F:4D:33:21:A4:2A:1C:AC:C2:84
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:de:ae:93:f3:b9:16:2c:f1:89:8a:34:45:4d:73:10:6c:
         88:de:64:2c:fd:30:b6:24:f0:4d:67:5f:17:7b:9c:4a:0b:d5:
         7f:7b:ba:90:c8:44:f8:3c:40:7b:a1:48:6e:f3:37:d7:e8:d5:
         cd:92:7d:43:31:26:9b:f2:cb:22:56:30:f2:d1:e2:62:c7:1c:
         10:1b:19:2f:f1:a9:73:5e:ab:7b:7c:6b:ed:1b:4a:95:da:01:
         31:ec:28:6f:64:fe:47:21:01:91:68:2b:bd:6a:01:c0:f1:8b:
         63:15:4c:d3:c0:f8:bb:53:65:ad:f5:cc:07:0a:6c:6f:02:f8:
         29:91:6c:e8:53:23:b1:2c:86:ec:d3:c4:2c:ea:71:27:4a:a3:
         66:4e:63:89:f9:62:1b:fe:35:22:27:65:05:2a:d5:a1:79:62:
         0d:0c:f1:9f:76:d6:46:c6:d3:b6:57:9f:35:bb:14:86:7f:08:
         89:17:24:9c:30:a4:85:7c:77:c0:24:70:e4:10:4b:3f:d4:8c:
         50:d6:a1:d0:b5:dc:bb:bf:f2:72:19:69:81:31:1e:4b:aa:f6:
         4a:d3:23:29:a4:1c:43:11:64:ce:d9:33:64:e3:bc:7d:49:d1:
         f1:0f:bd:56:56:b3:c1:8b:62:c9:7d:e9:f2:9e:8f:ea:24:f5:
         4d:fe:55:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPNXy4UGwp+/Htm8QhaaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFm
YmM4MGIwHhcNMjUwNjEzMTcwMTAxWhcNMjUwNjE0MTcwMTAxWjAzMTEwLwYDVQQD
EyhhZTYwYWNlZTNkZjkxZDk5NDcwMzJmNGQzMzIxYTQyYTFjYWNjMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+QbUpCy2jQYayfbrDZ6FXaKgh1h
Rai41J/+yvaymqFQmlVLQmrDyNCpfPR4Si3kjGX27zZt2ngJQy4S+P6dVC+rUFMB
ugg89ID0IBT1H0LpIV/5Ekj0/aIz+96ftbIpSa4SSHWcVbMyy9EpfS49B4GBnzGi
QQDkoY3bZwHj+E4nLoXHTRPaWcqqE1I1JkEaeoZ6Ff6CltM4B5ucDRvf3GVybKtm
q09sDOmrSqCuh8onQDT3C7hxhnFehTxm2yfuoCULKs04r/omC1oPDs+bICCC9Uxx
H3pM1+QXXXRyD6jkLL/nSztzcZcbpYKnIQSqD5kTv6m57GQKhn44NJcY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5grO49+R2ZRwMvTTMhpCocrMKEMB8GA1UdIwQY
MBaAFOUOZpLZco2oH1xPSeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgt
MDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1
LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGY3erpPz
uRYs8YmKNEVNcxBsiN5kLP0wtiTwTWdfF3ucSgvVf3u6kMhE+DxAe6FIbvM31+jV
zZJ9QzEmm/LLIlYw8tHiYsccEBsZL/Gpc16re3xr7RtKldoBMewob2T+RyEBkWgr
vWoBwPGLYxVM08D4u1NlrfXMBwpsbwL4KZFs6FMjsSyG7NPELOpxJ0qjZk5jifli
G/41IidlBSrVoXliDQzxn3bWRsbTtlefNbsUhn8IiRcknDCkhXx3wCRw5BBLP9SM
UNah0LXcu7/ychlpgTEeS6r2StMjKaQcQxFkztkzZOO8fUnR8Q+9VlazwYtiyX3p
8p6P6iT1Tf5V4w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 21:27:00 2025 by rpki-client