Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File:                     5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier:          AsYUa4bbyTGSPKTtjU87IM/hv6Tc0vkAUoGVw8iZj0g=
Subject key identifier:   E3:64:CE:E8:FF:E8:C8:5D:81:98:57:92:D9:43:82:F8:60:89:98:7E
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer:       /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial:       0197518F38267CC7DEA053CB66BCBA9AEB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number:          36
Signing time:             Sun 08 Jun 2025 22:00:29 +0000
Manifest this update:     Sun 08 Jun 2025 22:00:29 +0000
Manifest next update:     Mon 09 Jun 2025 22:00:29 +0000
Files and hashes:         1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: nT/rCvWlTom4qfaLrntg780ulkdPtCBFAN8wm/WRsi8=)
                          2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:38:26:7c:c7:de:a0:53:cb:66:bc:ba:9a:eb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
        Validity
            Not Before: Jun  8 22:00:29 2025 GMT
            Not After : Jun  9 22:00:29 2025 GMT
        Subject: CN=e364cee8ffe8c85d81985792d94382f86089987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:93:c2:cb:05:06:4a:b1:8c:6e:8e:b3:17:
                    cd:17:be:39:b3:9a:72:67:d0:34:11:54:fc:e3:5b:
                    4b:87:7e:40:50:4c:3e:b3:f8:0b:be:8c:28:af:21:
                    56:a6:01:1f:62:76:ff:4f:fd:16:8b:2c:d9:6d:c8:
                    c2:2d:23:ac:23:79:10:1d:7e:c3:7d:8c:80:e4:4c:
                    d4:f3:ac:e6:e8:d6:f7:71:ac:08:28:47:92:ba:60:
                    95:41:70:e1:06:3e:8c:c2:da:5c:30:ca:f0:78:8e:
                    e7:5a:6e:17:60:52:29:d4:d7:0c:46:8f:b1:87:8c:
                    0e:1e:0d:f2:99:df:2e:82:d2:76:ae:87:11:13:5d:
                    62:35:9f:b3:be:07:f6:d5:e9:76:cc:9d:35:1c:90:
                    fc:ae:88:1d:80:95:f7:14:9f:b8:f2:23:85:af:74:
                    4f:90:e8:c3:df:be:8d:95:73:10:e5:8f:37:2f:aa:
                    36:03:21:36:b7:d3:c3:31:8d:f6:9b:92:43:34:67:
                    87:7a:9f:46:f7:d6:65:67:69:57:f4:7b:14:bd:fd:
                    6b:0b:1e:27:f7:f0:5f:a0:b2:42:c5:fd:00:4e:18:
                    ba:4a:26:0c:4f:38:fe:80:28:97:cf:0f:8b:7f:36:
                    57:51:cf:09:a4:d0:38:22:ee:5f:23:c6:b1:e1:0f:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:64:CE:E8:FF:E8:C8:5D:81:98:57:92:D9:43:82:F8:60:89:98:7E
            X509v3 Authority Key Identifier:
                keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:09:87:39:bd:b1:ce:91:77:86:a5:bb:93:d7:88:de:c7:0d:
         16:ef:66:06:84:c0:9e:f8:f7:51:78:6e:33:bc:55:88:8f:60:
         d9:bb:cc:ae:a7:2f:1e:59:b0:3f:03:ab:8a:ad:a0:56:64:72:
         79:c9:08:1a:9c:34:5b:19:81:4d:23:9c:a3:bb:95:88:6f:72:
         ea:b7:e8:a3:42:7d:a1:7f:dc:44:c7:ef:3e:1c:10:00:37:aa:
         e6:54:47:8f:f6:cf:68:1b:c3:58:39:84:b2:4d:f5:51:3e:4f:
         75:1c:eb:4a:70:13:0c:48:5e:ac:8c:8e:15:d9:63:75:45:4e:
         3f:3d:91:81:f3:ab:eb:1b:2c:77:3f:43:64:01:54:6c:e3:72:
         ec:fa:a9:53:03:b0:a7:df:aa:c5:e9:7d:cf:44:70:8b:47:14:
         c5:dd:a7:b3:8c:99:07:6c:cd:31:e5:89:06:f6:52:ef:e1:04:
         4b:01:95:e0:d8:b0:a1:4f:98:86:60:cc:f0:91:68:76:73:7d:
         16:ff:70:a6:32:1d:fd:0f:01:51:54:3f:c9:61:b3:77:e2:2b:
         19:40:9d:0b:16:e1:a1:c8:27:b2:ec:85:e2:58:76:95:6f:b3:
         cf:12:1b:2b:70:d5:7b:d2:1c:b3:a7:0f:d1:50:9e:a9:43:65:
         9e:bc:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:43:15 2025 by rpki-client