Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          cbZWCkmxyaLWj1vVcFA37EVWGXviEOBa0J/Xxn5n6xY=
Subject key identifier:   32:A5:04:FF:A4:25:5B:F4:9F:90:75:50:64:D4:74:A5:97:4E:F6:37
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       019758DB53C7D0736B2E3A07568783AB063F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0DA2
Signing time:             Tue 10 Jun 2025 08:00:57 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:57 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:57 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: U1IVQFzhuOEjmgliM+WRZdaDmojftF6/j42mtxDcUp4=)
                          2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:db:53:c7:d0:73:6b:2e:3a:07:56:87:83:ab:06:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Jun 10 08:00:57 2025 GMT
            Not After : Jun 11 08:00:57 2025 GMT
        Subject: CN=32a504ffa4255bf49f90755064d474a5974ef637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:33:55:ab:23:00:3a:c5:da:a8:61:49:19:
                    56:4d:45:d2:2b:70:c9:1c:53:0d:70:f8:d8:cd:86:
                    84:15:ef:51:01:38:34:e9:bf:c5:22:fe:28:b5:a2:
                    0b:78:d8:fe:0f:a8:f3:c1:9f:aa:9a:d4:fc:b9:b0:
                    a0:fe:89:bf:c8:9e:0d:35:ab:ea:45:9d:0e:17:0f:
                    37:e5:3d:38:a9:39:c8:3a:70:d8:08:30:4a:fb:d2:
                    69:bb:9f:8b:77:21:ee:cf:c9:3a:bf:07:e6:87:87:
                    02:72:fc:7a:af:32:d5:f8:5e:ae:53:8a:ca:99:4b:
                    cd:32:97:77:5a:11:64:3f:d4:bb:73:e1:0f:b3:20:
                    9d:9c:8c:5d:c3:7b:29:7e:79:a8:b5:4c:f5:69:d9:
                    a2:b4:f3:65:06:84:35:b6:1a:f7:36:c6:55:a7:00:
                    73:28:f0:b6:a4:aa:27:3d:94:f4:a2:69:43:05:13:
                    35:74:b7:52:63:38:68:eb:94:7b:df:94:25:c4:0f:
                    13:75:11:d0:49:7e:f7:fd:cc:5f:f7:90:c6:c2:be:
                    d1:e2:c9:96:43:13:b2:68:98:f0:3a:9d:6d:47:45:
                    11:a0:3f:87:27:9a:ea:e1:58:8c:67:3c:e3:6d:30:
                    8f:8b:5b:14:bb:41:78:a5:bf:64:77:6c:2f:8b:ef:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A5:04:FF:A4:25:5B:F4:9F:90:75:50:64:D4:74:A5:97:4E:F6:37
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:95:c8:42:c9:ca:1b:3f:f1:e5:99:b6:9a:98:c2:42:8f:
         d8:ca:d3:b6:e2:c4:84:35:af:ba:bc:a8:fc:75:e1:61:c2:f3:
         ab:2a:dd:53:49:21:d6:a5:c9:f4:e1:ce:29:93:0c:10:cc:c7:
         34:4c:2e:bb:38:7d:24:ab:ed:7b:b7:2a:49:89:ac:54:40:2b:
         ca:a4:bc:6e:1f:9a:ef:4c:2d:6b:9f:cc:87:ce:ca:fe:79:cd:
         63:b1:e1:cf:8c:5b:c4:89:2c:d0:56:8b:0d:f4:00:a8:b3:23:
         15:37:98:f2:3e:68:ba:50:48:f8:37:7b:8a:64:94:57:5c:fc:
         77:90:d3:3e:ab:51:2b:dd:1f:44:5e:59:ac:0e:83:17:71:dc:
         be:70:c6:36:60:fb:a9:98:ef:41:92:16:80:42:0d:11:ef:3c:
         93:d8:39:1f:18:20:13:cc:28:b8:be:11:91:49:ed:ce:53:a7:
         01:0e:d7:77:15:a4:27:28:8e:70:c0:7f:a8:6b:51:db:aa:2b:
         c0:e6:de:5a:cc:84:c7:7c:39:89:ea:62:84:86:33:e9:87:a9:
         c7:dd:d9:a3:01:43:cb:83:66:af:2e:8b:7d:01:69:d3:ad:76:
         0e:8a:20:f0:38:1c:60:31:2d:c7:88:cf:6f:d2:1d:e2:52:40:
         c5:5c:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:08:36 2025 by rpki-client