Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          LJ9qhK0cd0SdwGg3vpT5hc4ZKe5XhaUu4pVqXv1yE0M=
Subject key identifier:   F7:A0:5A:2F:E8:89:3F:B6:DC:76:C0:0A:E6:47:D4:47:9C:71:75:61
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       01974967F40DFBDC8B03EE53A8E7B36F203E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 08:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:38 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: Js+DOxAdNEvlLM2QUlxNTKT+jZPOabQkYEnBhziUsTU=)
                          2: GYQyoqa1Lcx9RJ4IYkOHPaDzsYs.roa (hash: 5OkYxXGX0IRpYv6mAWx2ijlmqd3siYfdidMZt5Qq9jo=)
                          3: PFBBA4lrKhNwCem9RKvfOnYfCDc.roa (hash: /EjlV3R/5VRkrIm2TPm8gVB2qkL97VXtQAiUN3hx+BU=)
                          4: i0nThbwdezW0AO7pmekkEJjld0U.roa (hash: A1bHJVolhok5D0oj17VJpul41EQExCRaiyi6t8ZnkFw=)
                          5: kZSXPr30NxG2Ec5X6u_UtIxYO9I.roa (hash: VIVKmXaG6PiMqZqJVIAC7mrs8dFjgOuKWeFhL3VLTU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:f4:0d:fb:dc:8b:03:ee:53:a8:e7:b3:6f:20:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Jun  7 08:00:38 2025 GMT
            Not After : Jun  8 08:00:38 2025 GMT
        Subject: CN=f7a05a2fe8893fb6dc76c00ae647d4479c717561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:57:6c:e1:c9:0d:2f:56:fd:4f:3d:0a:a1:
                    cd:0b:80:83:ec:0a:58:09:fb:4f:c7:3d:36:05:48:
                    c2:37:ec:60:95:be:4d:9f:bd:a5:1e:23:55:d3:8c:
                    6a:99:68:d2:80:ae:8c:7f:23:4e:e7:62:f4:b6:d0:
                    31:dc:4f:f3:f8:b9:b8:8b:db:d5:ec:6b:65:a2:6a:
                    67:56:89:a9:f1:c7:f1:5b:5a:45:26:42:63:9a:ca:
                    f0:68:75:26:44:0e:9f:dc:43:9d:8a:1c:f6:06:f6:
                    ac:54:91:cc:dc:18:72:8c:79:0e:90:7c:a0:5b:1d:
                    dc:57:0e:2d:ff:2b:b9:fe:9c:d9:91:36:03:c5:3c:
                    c6:79:3f:2b:e0:13:8a:00:2a:db:29:d5:72:bd:30:
                    c9:c8:d7:1e:9c:1c:6b:71:70:2c:36:bf:1d:14:35:
                    43:86:6f:16:5c:80:5f:5e:ab:55:48:7f:1d:04:4e:
                    5e:ca:43:91:d4:35:5d:3a:18:98:a6:e7:09:08:cd:
                    5e:53:fa:da:00:f8:d5:0e:b4:e5:6e:cd:43:c8:18:
                    40:b8:e8:a7:08:10:5d:ef:4d:47:74:3b:0f:55:f1:
                    37:06:f7:41:ce:1f:e8:2f:1a:b8:4c:c4:79:67:b4:
                    ca:9c:f6:70:f8:50:c1:47:ff:12:51:39:f8:4f:a7:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:5A:2F:E8:89:3F:B6:DC:76:C0:0A:E6:47:D4:47:9C:71:75:61
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:45:33:ba:39:8e:df:6a:23:5c:75:d9:f9:39:3e:dc:d5:41:
         44:fb:d9:4b:1a:2b:61:ad:d5:00:d7:04:d8:2e:c4:55:da:f6:
         d5:ad:96:50:35:08:9b:74:d5:84:a1:68:1e:35:ec:c6:cd:d7:
         99:45:90:27:ed:35:90:14:c5:dc:d2:97:31:2f:da:4b:b8:d4:
         74:fd:de:f4:d9:2a:77:e2:ab:ad:45:4a:2f:05:88:e3:f6:fd:
         ba:23:29:c5:4e:8f:a1:f6:e8:8f:f8:6d:20:f8:0d:96:d0:12:
         e9:03:97:3e:03:d1:42:7b:9c:d2:f4:ba:48:aa:4f:35:08:b9:
         e7:0a:58:df:9c:f0:00:af:aa:99:4b:01:65:67:32:21:f7:f3:
         c1:c6:91:44:76:8a:b4:7a:13:f0:ab:5c:e7:01:f7:63:6a:03:
         a1:f7:4c:96:2e:bf:91:f6:22:45:ff:5d:28:6c:20:19:de:4b:
         8f:23:df:ec:08:20:a0:6e:19:16:68:98:e5:39:b0:58:d0:be:
         71:38:d1:2c:04:5a:09:7b:0c:95:7a:b5:c0:29:b1:27:1e:2d:
         b3:e4:fe:35:93:97:1d:fb:20:92:f9:1b:47:bc:a4:07:2f:23:
         00:c4:42:eb:7d:7f:0d:66:f6:e0:09:21:a4:4d:ab:ad:d4:36:
         17:be:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:22 2025 by rpki-client