Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          Oyi7nFAfhYYFE0wflDnVDSz7YNQ9rxq5X69BUO6qvlY=
Subject key identifier:   A9:82:1F:56:6F:5D:0F:ED:F6:C8:58:3D:6C:DF:2A:33:E7:34:BE:EF
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       019747794C33A0B593D10EEAA1B4E1C80226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0B91
Signing time:             Fri 06 Jun 2025 23:00:20 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:20 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:20 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: 4e1A+OnhqMrIG4PNC8ddqpd3/za3m1GFI8NyIvJKv34=)
                          2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:4c:33:a0:b5:93:d1:0e:ea:a1:b4:e1:c8:02:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Jun  6 23:00:20 2025 GMT
            Not After : Jun  7 23:00:20 2025 GMT
        Subject: CN=a9821f566f5d0fedf6c8583d6cdf2a33e734beef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:6d:ec:5f:89:b9:38:4d:ed:5d:d0:15:77:
                    82:80:93:88:ad:02:0f:11:3c:01:31:5b:b3:ef:b2:
                    60:f9:75:14:47:f6:81:7e:7f:45:59:96:40:32:d9:
                    43:43:b0:0d:53:71:6a:2a:c0:61:76:79:c4:da:36:
                    64:95:2a:53:00:02:1d:f5:7e:f7:a2:d5:6f:87:23:
                    14:4e:18:98:64:5e:d8:d6:07:0f:6a:44:7f:79:0e:
                    d6:68:e6:c5:c3:01:9c:eb:a8:21:16:b5:f6:b9:05:
                    00:4c:9f:fb:fd:e2:e7:17:9a:e4:a9:31:54:c6:f6:
                    32:cf:65:b4:0d:d3:cb:d3:91:78:45:29:8d:78:de:
                    9a:95:89:7e:79:1b:eb:88:02:75:4f:aa:95:0c:d9:
                    82:1d:f2:47:ec:82:d6:46:39:44:98:fd:ee:9c:dc:
                    56:7d:cb:b4:bf:2c:96:a0:d1:52:c4:10:5f:81:95:
                    db:c7:64:14:4e:df:6b:88:9f:87:af:19:11:63:0d:
                    fa:2d:34:4b:57:2c:0e:ee:3c:a4:2d:86:21:2c:b2:
                    1a:c1:92:39:52:78:a2:9e:c7:a5:a9:e9:0d:a6:b2:
                    8b:21:d0:a8:1e:54:71:1d:f7:d1:ab:4f:11:72:52:
                    43:65:14:a2:64:c1:00:8d:bb:c8:9a:37:02:a0:72:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:82:1F:56:6F:5D:0F:ED:F6:C8:58:3D:6C:DF:2A:33:E7:34:BE:EF
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:19:d2:11:87:09:80:49:70:3e:c0:cc:44:d7:d3:58:ba:20:
         62:10:f9:1f:4a:1e:56:98:35:12:dd:d5:59:b2:d3:43:76:33:
         cf:d0:6f:74:52:a9:a1:df:39:c9:22:fb:a0:79:fc:2c:cb:89:
         4f:93:d1:05:c6:e8:17:9a:73:91:20:5b:6f:e1:bc:1f:ef:8c:
         da:f5:29:5c:b4:8b:34:92:5d:32:4e:d6:e3:3a:60:63:4f:46:
         f4:e7:5d:7c:25:69:86:39:a3:c2:01:9b:cb:56:9b:fb:fe:2b:
         04:45:2a:1b:c3:93:a3:76:0d:8e:19:40:26:38:8a:25:b8:78:
         9c:cb:9c:aa:8b:90:9f:8e:c4:3b:82:df:19:c4:e8:49:af:61:
         b2:ce:fb:fb:e5:2a:81:78:cb:8a:da:3e:4d:73:b5:28:00:4b:
         bf:a4:74:9c:0a:06:79:83:c7:a0:11:27:4a:cb:03:e7:f1:90:
         0a:96:9c:6a:43:71:10:52:a9:5f:6a:ad:db:27:17:f8:42:6e:
         80:5b:bd:b1:38:b3:bd:1c:51:6a:fa:75:63:e1:8e:e7:32:3e:
         99:9d:a8:9b:72:e8:b7:79:25:88:b1:ab:d0:14:72:be:a6:31:
         c5:19:21:f0:bd:ab:5b:ed:15:04:50:fd:13:c3:98:01:51:3a:
         d9:93:48:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:30 2025 by rpki-client