Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File:                     N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier:          +loIyfMKOOxlgnhks7aGVJmIWJHSa5k81YepNla228w=
Subject key identifier:   45:20:5B:25:AF:B7:47:DC:A3:17:14:3F:0B:0E:A6:8F:56:21:E7:6D
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       0197470BECA1A3068A71589F135D295EA287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number:          155E
Signing time:             Fri 06 Jun 2025 21:00:53 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:53 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:53 +0000
Files and hashes:         1: 4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa (hash: sibDBbjHGj/0cV6Q2SgY8FXb2d2DZJUAVvA8r4si5j0=)
                          2: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: J8YSuWdLsWwSQQ35/BPq6PLEnxD4Zar3eEqCQvrfzgk=)
                          3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:ec:a1:a3:06:8a:71:58:9f:13:5d:29:5e:a2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Jun  6 21:00:53 2025 GMT
            Not After : Jun  7 21:00:53 2025 GMT
        Subject: CN=45205b25afb747dca317143f0b0ea68f5621e76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:2f:a9:38:15:a0:81:c9:f3:80:7d:88:c9:
                    e0:54:7c:3c:1e:c4:2a:1b:b7:7b:7c:bb:b8:c1:9c:
                    ea:82:cb:0c:1d:bb:24:98:b2:cd:a7:b9:8a:1e:32:
                    91:f9:1d:73:30:bf:a4:18:a7:ab:63:66:e7:15:cf:
                    eb:f1:61:b7:32:b3:58:72:c1:1c:06:eb:34:68:0c:
                    f2:4e:7f:1c:7c:34:dc:1f:46:47:ed:c3:e7:91:e4:
                    1c:0f:a9:22:55:4c:a0:0f:b3:ef:56:9e:c4:41:14:
                    0f:06:b3:2f:64:7d:41:9f:9e:1b:72:f4:aa:bc:3f:
                    c9:aa:f2:c0:bd:da:b1:73:08:f6:06:1b:34:45:d8:
                    17:ed:d6:a3:f4:3b:55:90:d6:01:d7:44:18:59:9e:
                    1c:77:01:7a:0d:93:78:8a:d4:44:01:7f:d6:68:5c:
                    48:ee:de:b1:6c:48:ba:b6:d4:27:20:16:9a:1d:d5:
                    bf:2e:b5:e2:c6:1a:61:34:6a:47:1f:b7:d2:77:f6:
                    71:09:01:86:f8:19:80:5c:16:92:07:40:90:4d:c2:
                    53:c8:88:8e:d6:23:02:57:8e:58:03:36:f4:9a:eb:
                    f0:4b:36:4f:ec:84:43:a3:89:8e:9d:05:ff:b5:6a:
                    a4:f3:ea:91:90:88:07:36:ab:57:3b:60:10:11:5a:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:5B:25:AF:B7:47:DC:A3:17:14:3F:0B:0E:A6:8F:56:21:E7:6D
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:52:b7:98:a1:53:9a:b9:6b:f5:f8:51:2c:69:d9:ea:34:
         e9:5e:83:5a:a0:9d:03:67:8b:99:cb:70:f4:68:d0:6b:5d:9e:
         a4:85:f6:21:e0:f0:a6:40:77:0b:1e:0b:e5:36:d1:08:86:d5:
         25:7d:c3:e0:9e:72:bb:0f:6e:c6:72:45:77:ea:31:74:34:fb:
         94:d6:f8:81:0e:99:1d:a0:8e:24:77:79:7b:7b:19:21:69:3e:
         91:30:e0:a2:52:49:7b:54:2d:41:40:b6:43:ba:78:48:a5:8c:
         19:00:00:f8:9f:a4:f0:69:4c:64:ff:9a:aa:da:3d:f4:6c:34:
         45:11:ad:4f:58:1a:e5:3e:04:30:c2:da:d7:52:3c:46:6e:79:
         74:44:d0:cf:db:e6:75:81:74:5f:1e:44:0a:ad:76:8c:ed:68:
         05:46:5a:ed:88:c9:91:b8:34:5f:7f:bb:5c:78:b1:fd:b0:64:
         d2:c5:62:92:46:2b:5b:ad:45:cb:4e:bf:a7:96:6d:08:fa:2e:
         f0:23:d4:71:63:19:01:7b:1d:61:c3:57:5b:df:27:a9:3f:bb:
         3a:4f:51:de:44:39:ee:1f:ca:f1:1e:5b:dc:9d:d4:f3:fc:54:
         b3:65:3d:da:6c:15:51:db:b9:1b:2b:4f:00:96:10:6f:2b:10:
         2e:8f:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:27 2025 by rpki-client