Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File:                     1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier:          GAuFWi3PqatQZpVjX8q+P9cVj68CWP7Pd1Vz9/RkhOc=
Subject key identifier:   24:F0:A8:1D:F5:14:6F:EC:D5:37:9E:B9:39:95:BF:99:FD:DB:39:AA
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer:       /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial:       01974DB27C5D5A3555F71FC2AB8CD4C2A582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number:          13F0
Signing time:             Sun 08 Jun 2025 04:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:32 +0000
Files and hashes:         1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
                          2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: BFeT8CuUOi1ONmICCn1eWX+O6EsispjZY+GvXI59Umw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:7c:5d:5a:35:55:f7:1f:c2:ab:8c:d4:c2:a5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
        Validity
            Not Before: Jun  8 04:00:32 2025 GMT
            Not After : Jun  9 04:00:32 2025 GMT
        Subject: CN=24f0a81df5146fecd5379eb93995bf99fddb39aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:fd:f0:5d:6b:43:14:43:d2:4f:3d:2a:a8:
                    68:42:c8:91:f4:ec:af:47:cf:a0:88:6b:04:10:0a:
                    54:a5:19:57:df:38:4f:ed:db:f3:4c:b9:e5:31:8c:
                    ff:31:92:d5:36:03:72:6b:9d:79:df:49:db:fc:05:
                    d6:77:39:57:7a:3e:4c:f9:95:e3:4a:0e:57:5d:0f:
                    82:a3:21:ee:c4:f3:b3:9d:b2:5f:b0:21:a7:a9:f2:
                    f0:dd:cf:46:9b:e3:1b:e5:4a:45:f4:cd:f6:3a:e9:
                    f0:01:73:b8:04:55:d9:1c:28:fa:3e:3b:59:a9:1a:
                    54:5c:8a:7d:1a:64:99:ea:75:7c:a0:59:e0:f7:32:
                    3b:92:7e:c6:c1:2b:cc:1e:ee:c9:89:ba:f6:10:48:
                    e5:95:41:d8:e7:b3:a3:e9:29:cd:9e:b4:30:e2:29:
                    9f:2e:db:52:53:a8:44:5b:1e:cf:96:ab:fd:84:1c:
                    6b:27:e5:86:a7:88:16:7d:5b:60:83:48:50:18:be:
                    40:80:41:c7:de:52:e5:b6:f7:ad:79:84:0e:5a:53:
                    1a:f8:8e:3e:d2:b3:49:8b:5a:84:91:73:07:54:7d:
                    08:4e:46:9b:dc:bb:a9:a6:21:39:fd:66:cc:e7:9d:
                    7f:1f:a6:28:b3:8b:ab:3e:5c:1d:27:cd:93:28:b8:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:A8:1D:F5:14:6F:EC:D5:37:9E:B9:39:95:BF:99:FD:DB:39:AA
            X509v3 Authority Key Identifier:
                keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f2:d0:0e:ee:e8:09:4f:f0:8a:e1:50:94:61:c6:63:18:09:
         6e:bf:67:87:a8:75:52:b0:df:41:ef:02:9a:24:76:e9:a4:61:
         32:db:45:1c:56:5c:6f:69:e7:d5:c6:82:48:33:70:96:f8:df:
         a5:79:ef:72:85:0e:37:3a:96:b8:c8:fa:f0:c2:fd:a4:28:88:
         90:60:24:4f:3a:b6:82:cd:cd:db:05:c9:62:b8:66:16:b6:3f:
         12:71:f1:9a:53:c6:a3:44:25:33:0b:0d:ae:21:db:91:df:48:
         2e:e8:49:38:e4:a7:68:bd:c0:0f:c0:27:37:2d:51:1c:e8:28:
         ec:5c:2f:d5:56:d1:26:1b:b0:ad:b9:70:01:6b:e9:e5:5d:73:
         a0:17:97:5c:14:f7:6a:39:d9:79:9e:34:ae:2a:a8:ad:e4:73:
         78:b5:bd:6f:39:a4:31:8b:bc:eb:ab:6a:e2:a4:f0:fc:e0:86:
         39:c3:65:f3:04:00:67:14:39:fb:db:1a:32:c7:53:13:d8:7d:
         2c:f9:71:a6:ee:a8:15:25:8b:e9:1d:8f:3c:4e:b4:ab:cd:16:
         03:f6:fb:12:18:52:ba:ad:e0:91:1d:d4:b3:1b:a7:e1:a2:02:
         f7:86:ef:63:66:18:9c:01:f9:ce:04:6d:a5:cf:d1:55:04:a1:
         3c:30:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:33 2025 by rpki-client