Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          BhxOWnORPd8b93xuQgxCUOZeb18U9Jsaf0fTWaLrp7E=
Subject key identifier:   48:F7:E6:1A:5B:03:53:A1:1D:F4:20:7F:F5:C4:07:EE:0C:58:E0:46
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       019759EDEDEB96111B1BC61F19E6645FA59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          0F58
Signing time:             Tue 10 Jun 2025 13:00:54 +0000
Manifest this update:     Tue 10 Jun 2025 13:00:54 +0000
Manifest next update:     Wed 11 Jun 2025 13:00:54 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: VJig52js8eocj33w5X3zIBP38N2/e66rFvILzHVsBwk=)
                          2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ed:ed:eb:96:11:1b:1b:c6:1f:19:e6:64:5f:a5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Jun 10 13:00:54 2025 GMT
            Not After : Jun 11 13:00:54 2025 GMT
        Subject: CN=48f7e61a5b0353a11df4207ff5c407ee0c58e046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:02:13:9b:de:71:1e:7a:f1:0e:1e:6f:03:
                    7f:39:94:98:c0:63:0e:e9:63:7c:f0:0c:9b:ac:bc:
                    23:a0:a2:82:6a:40:23:44:30:03:d9:99:d2:6d:17:
                    be:3d:0a:a5:e3:d3:0d:54:05:7b:c9:58:17:be:ef:
                    60:e1:3e:42:30:b3:ed:08:0f:f7:1f:26:9a:56:18:
                    d4:fd:2b:9f:76:22:a3:da:f2:55:09:86:de:44:18:
                    f3:19:7c:c0:a7:44:91:68:7b:94:03:de:2e:29:34:
                    1f:cf:cd:8b:34:84:a9:8d:9c:d9:3b:4d:67:90:75:
                    03:75:3d:c0:f7:ca:76:d2:b1:a2:ce:53:0a:50:a5:
                    76:fb:08:dc:5c:b2:77:23:20:b3:47:08:5f:9b:e9:
                    00:43:7c:a2:e7:80:12:a7:b3:36:4c:18:0d:2d:ae:
                    9e:99:b1:9c:ce:41:7b:a2:03:c7:47:35:ba:28:29:
                    a5:74:83:e8:49:c5:81:2f:75:6f:90:98:be:11:27:
                    41:dc:ca:2c:84:3f:58:7f:6f:4f:83:72:2c:cb:c4:
                    cf:23:a2:01:94:d6:1b:ba:a4:5a:5a:59:07:65:ad:
                    5c:52:86:3b:52:ce:f3:c3:24:18:d4:77:32:3a:8e:
                    78:17:11:7d:1a:a2:5b:30:8a:8d:4a:9d:ce:cd:76:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:E6:1A:5B:03:53:A1:1D:F4:20:7F:F5:C4:07:EE:0C:58:E0:46
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:b9:7d:75:a8:85:fb:4c:84:85:f7:59:ad:4d:dd:10:16:
         c8:84:32:b9:74:69:18:e7:41:d8:2c:9f:84:5e:87:34:ac:a8:
         b3:57:7c:28:65:b2:73:72:96:01:3e:b1:95:63:da:48:be:5f:
         40:01:b4:d6:e2:06:0d:cc:2b:c5:48:73:49:ad:62:7e:5f:ae:
         91:80:69:16:4e:ba:5b:31:67:64:1e:f5:0f:e0:f7:1c:79:06:
         f0:b7:ec:c6:3e:90:51:ba:7d:4b:17:f6:6c:21:8b:82:03:f7:
         58:1f:4b:7d:b3:d5:e1:4b:4c:91:fa:ed:e5:2e:88:e9:2a:d6:
         e8:54:a7:b4:76:a2:74:14:ea:d0:72:68:e3:f7:33:1a:86:84:
         1f:6d:07:27:12:f5:7e:96:1e:be:bd:35:12:e9:8e:62:91:00:
         df:7a:5f:bf:d1:d2:73:89:81:15:72:aa:77:bf:b4:8f:c0:62:
         40:01:ce:a4:4b:0a:ea:86:87:b0:b2:ac:40:a8:ce:96:82:6c:
         76:7d:26:e5:a4:49:54:29:c7:f7:3c:75:21:9b:29:c6:56:9c:
         01:fd:8f:98:ec:df:1a:7f:0d:87:1f:a9:d1:4a:82:5f:cd:98:
         de:dc:0f:23:54:f2:28:75:12:55:61:64:05:7b:26:86:41:7b:
         29:91:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:12:31 2025 by rpki-client