Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
File:                     J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft (raw, json)
Hash identifier:          Yy+u0p/6QiLdWzI587tSWhVT9Gz4B8TSfHyE4C3QjVk=
Subject key identifier:   33:97:5A:25:D7:D0:F6:26:F2:06:CA:E1:84:74:4D:58:51:24:E9:49
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Certificate issuer:       /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial:       0197518FC26685E9CDEA3C8B213CC1E77EE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
Manifest number:          0546
Signing time:             Sun 08 Jun 2025 22:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 22:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 22:01:05 +0000
Files and hashes:         1: 7DATkiQgD99Q8Hj025MMR2TwrCQ.roa (hash: obBiPPq2wWQ7VYgIzH2jHJNBrijP0sZ5WmBF7e1oncI=)
                          2: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl (hash: 46cBBicboZpAnRy9tncRnATxUkITr73fs6IerB+bMNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:c2:66:85:e9:cd:ea:3c:8b:21:3c:c1:e7:7e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
        Validity
            Not Before: Jun  8 22:01:05 2025 GMT
            Not After : Jun  9 22:01:05 2025 GMT
        Subject: CN=33975a25d7d0f626f206cae184744d585124e949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:ce:21:f5:43:68:e0:5c:c4:dd:68:48:66:
                    14:72:63:b1:a2:11:d9:86:cd:9f:a7:37:b4:b2:7d:
                    10:84:81:5a:19:e9:d3:dc:17:eb:7e:59:08:09:5f:
                    7c:cd:f9:f1:99:b2:31:a8:a4:24:5c:42:4c:86:40:
                    bb:c8:93:cc:e3:2a:a7:fe:a9:20:b8:36:47:74:37:
                    09:76:78:ae:24:05:81:cc:cd:a0:82:a3:d8:03:f8:
                    b5:4c:14:92:36:13:0e:81:c5:f2:57:41:af:f9:79:
                    ed:f4:bb:3f:83:36:87:d2:33:97:96:6c:c9:9b:ba:
                    13:d1:f3:ad:3e:ca:74:d3:10:26:3f:5e:26:3b:c7:
                    a2:45:72:34:f1:22:c0:b9:fe:16:5a:41:9a:0d:87:
                    58:37:5b:a2:05:0c:1f:94:5a:50:b5:fb:b2:f7:46:
                    e9:b0:46:de:67:6f:4a:15:7e:83:18:46:d6:3e:0e:
                    a1:7a:82:17:8b:99:18:a4:98:3e:19:ca:a8:f6:c9:
                    71:91:cf:86:19:73:6b:ea:c9:90:c3:fa:af:36:9d:
                    e0:dc:71:21:7f:99:7c:69:ba:bf:31:1a:46:e3:e6:
                    dc:e2:f2:16:12:50:ef:ba:8a:59:08:0b:d1:f5:86:
                    83:54:c7:01:24:67:68:0e:43:c2:0b:79:12:cf:b5:
                    92:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:5A:25:D7:D0:F6:26:F2:06:CA:E1:84:74:4D:58:51:24:E9:49
            X509v3 Authority Key Identifier:
                keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:47:db:c5:23:a5:6b:00:c5:00:cc:69:93:07:0d:3b:2d:
         02:05:32:63:d7:92:24:60:cc:80:9a:19:3d:ac:8b:c7:f7:80:
         06:44:2b:97:c7:09:d5:dd:c0:2f:08:a5:ab:e3:14:8e:e2:dc:
         87:ee:e6:b6:59:c4:0c:91:3c:bf:2a:e0:aa:96:2c:c3:67:82:
         8f:61:b8:04:18:e9:68:74:ca:75:62:78:91:1f:8e:bc:e9:e1:
         96:76:2c:82:18:da:11:b8:1f:fe:11:ca:52:32:f7:72:a8:b7:
         6d:34:c1:27:18:43:6a:01:a4:01:b9:b8:ec:ab:60:18:0d:ce:
         61:8a:d9:a9:38:42:d7:bc:af:5c:75:51:da:e3:ac:3c:41:ab:
         e5:0e:66:0b:cd:af:af:b9:f6:a1:73:eb:c8:c0:8f:c5:e6:08:
         93:a6:5b:83:8c:f6:a6:9a:98:ea:46:1c:d5:44:02:99:e5:68:
         df:49:7d:de:96:f2:3d:ef:1d:d1:32:59:51:ac:93:b4:0b:36:
         52:33:43:66:bc:0b:bf:17:fc:b1:83:6b:92:d0:a8:2e:0a:9d:
         f5:69:8e:df:db:16:38:2f:b1:97:af:ee:ec:75:50:1c:cd:c6:
         49:d5:05:7d:ed:51:09:a6:3a:55:ca:37:35:96:f5:3d:47:db:
         90:a5:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:57:07 2025 by rpki-client