Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File:                     5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier:          Okmi4dqJYa2VmOLvdLw0sfOc1dbQNHrHTjOKbgL0HgA=
Subject key identifier:   54:09:B9:CF:55:83:61:30:88:AB:7E:AA:C4:70:08:AC:05:90:8B:E5
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer:       /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial:       01964E910979EFFDD5E4389923FBE24600EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number:          0F6B
Signing time:             Sat 19 Apr 2025 15:00:50 +0000
Manifest this update:     Sat 19 Apr 2025 15:00:50 +0000
Manifest next update:     Sun 20 Apr 2025 15:00:50 +0000
Files and hashes:         1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: DGLA4r8Wb17YNbtDsQiGJntANR9bpIJWPOJictQpBzQ=)
                          2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:91:09:79:ef:fd:d5:e4:38:99:23:fb:e2:46:00:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
        Validity
            Not Before: Apr 19 15:00:50 2025 GMT
            Not After : Apr 20 15:00:50 2025 GMT
        Subject: CN=5409b9cf5583613088ab7eaac47008ac05908be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:c5:e3:19:07:b9:aa:81:47:02:72:70:5c:
                    d3:47:33:3a:92:30:8b:ac:b5:96:7e:0c:6b:f3:0c:
                    ee:f1:40:eb:98:05:d1:65:c7:2d:b6:b6:0c:76:21:
                    3d:eb:fd:7a:74:c1:af:a0:63:67:94:5f:99:a0:3e:
                    5d:70:16:53:7d:d0:6c:b2:be:b4:da:b4:97:68:a6:
                    01:1f:ee:05:6e:2b:cb:40:12:f2:34:58:42:fa:fd:
                    ae:96:64:65:58:e6:e6:69:29:10:38:db:22:d2:a2:
                    ea:79:1c:67:45:e7:48:8f:b6:d6:9f:35:cb:87:19:
                    d7:76:36:3d:34:ed:cd:74:27:65:d1:b1:83:cd:9f:
                    86:24:a6:c5:d0:da:37:e1:2e:40:0c:78:cc:17:43:
                    52:09:af:7c:ec:fe:c7:2f:ff:04:80:e6:d7:fc:ff:
                    2c:8a:d6:9a:83:e6:c1:05:14:48:df:93:28:a6:97:
                    dd:f3:35:79:14:dd:ef:04:a6:44:3d:c1:ed:27:68:
                    28:0c:86:4c:a1:96:69:5d:a3:d6:eb:fd:db:7b:2d:
                    b7:bb:78:0f:6e:a0:bc:0d:84:8c:41:b6:b9:5a:a1:
                    f4:6c:d6:98:98:22:3c:f6:a6:e2:75:fd:05:86:07:
                    f1:0c:f1:7c:a2:4e:e0:4e:c5:72:30:6a:78:68:14:
                    44:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:B9:CF:55:83:61:30:88:AB:7E:AA:C4:70:08:AC:05:90:8B:E5
            X509v3 Authority Key Identifier:
                keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:e5:c1:37:37:ba:77:b4:6f:36:20:6c:0a:a1:cb:87:57:
         89:82:6a:ac:9d:78:ad:b6:f6:a2:11:4d:f0:24:ad:26:62:92:
         72:9f:ad:b3:d2:1e:ec:e6:fd:25:bd:8f:2d:e5:d4:3a:de:f0:
         02:e0:87:82:57:72:69:d3:7d:44:e3:e8:3d:8c:15:33:6f:84:
         65:f2:59:9f:eb:32:d4:92:15:da:31:44:f9:6b:23:25:eb:6c:
         74:fc:e2:7e:e1:f9:01:96:06:ac:a0:c6:15:ca:2e:cd:3b:28:
         fe:e4:d7:10:91:48:ec:6a:1b:ed:0e:ee:bd:18:51:92:91:35:
         d7:91:8d:d1:74:b0:c6:a9:1d:63:10:e6:aa:f5:93:29:84:bf:
         72:9c:c5:bc:e5:cb:04:12:7c:c7:6f:32:30:fe:fb:9c:ad:8d:
         b5:7a:fa:74:2e:58:6e:85:4d:9f:7d:b4:a5:ab:69:81:20:e1:
         26:23:f9:91:d9:e1:dc:bd:79:5e:c7:3a:ec:81:17:c0:ff:67:
         a7:c2:89:ee:a4:22:c2:ad:0e:fb:b1:87:89:5f:84:ba:51:4f:
         c4:78:a5:dc:d8:a5:01:10:89:ce:60:23:ef:c6:34:bd:13:81:
         aa:62:c0:55:72:58:4e:30:1d:1a:fc:07:98:d6:3f:dd:fa:9d:
         b5:04:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:14 2025 by rpki-client