Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          WRR/19p83U5vBhyo7G/TA7tpN7eiq/YZqRBdTfOXUR4=
Subject key identifier:   AF:8F:78:53:DF:AD:58:80:8B:64:8B:8A:97:47:A6:D4:C7:F5:D4:C8
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       0197469E651723E7C358E26D0CFB899B05C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          15BD
Signing time:             Fri 06 Jun 2025 19:01:15 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:15 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:15 +0000
Files and hashes:         1: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: IoSl8BWaiMlUX01kP4OJS+M95c0AuzdXmTrsKYBFowE=)
                          2: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (hash: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=)
                          3: PcLN4OCrAYo7gp9-LrNRS28FuGA.roa (hash: 4PVTYuLNKNpIeRdCU1ysaHpHPoiG6A7KV2YGI8bMc1w=)
                          4: Rowc--7buNg_Ew_zrmynFHimxmQ.roa (hash: tRqjTRWW7K8WV4ruLRwNapxECkPe5ofBmkCYh5TfGtI=)
                          5: dHl1LQzEJUpKi2KNatIsOTvown8.roa (hash: iN9UZITbk8Ct82GnunVun5xdzK17nQf8SgPjAvRak5s=)
                          6: yWWoay0ayleQau0Xgx1nrUGIKj0.roa (hash: 5Hs7Smq+GKOGNzQZoeccE5rQAWaXTAj4CCluIzt4Tck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:65:17:23:e7:c3:58:e2:6d:0c:fb:89:9b:05:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Jun  6 19:01:15 2025 GMT
            Not After : Jun  7 19:01:15 2025 GMT
        Subject: CN=af8f7853dfad58808b648b8a9747a6d4c7f5d4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:7e:d1:3f:62:8c:01:3f:4e:56:88:bf:ed:
                    32:c4:b6:7f:53:b1:38:60:d2:1b:ac:d6:b7:63:5b:
                    80:6b:67:b6:a0:35:de:31:5f:24:31:58:9f:ac:ae:
                    9a:9e:3e:09:6f:5e:93:a8:5f:fa:98:14:8e:9e:47:
                    11:b5:5d:cb:73:2f:e9:b7:58:be:5a:b4:1b:2e:85:
                    24:c5:f8:50:72:01:9c:9a:80:ba:dc:25:47:5a:ec:
                    39:d3:3c:4c:99:ac:1e:4d:83:2c:e3:03:5f:a4:8c:
                    83:ab:84:73:5b:d1:15:77:2d:a5:96:db:e4:7b:e2:
                    35:63:8a:05:30:02:00:f8:2d:6d:1b:d8:2c:08:ed:
                    af:08:b1:e6:dc:f1:0c:d0:4a:a2:1f:1c:ea:69:47:
                    73:48:5a:7d:cc:ea:1d:14:c0:f4:71:da:78:97:f2:
                    d9:1e:07:9c:f4:23:d6:d5:f6:d7:ba:0d:f7:f4:bc:
                    58:bd:dc:c0:ee:87:1b:85:ae:99:f2:21:80:ca:b0:
                    f0:3d:a9:c7:25:61:1a:e2:5a:59:a4:4a:c4:1f:d9:
                    bb:6e:5f:99:4d:dc:f0:25:46:f1:2e:22:1c:60:83:
                    e2:95:f4:5d:e5:77:dc:e0:ae:2f:31:89:ab:21:93:
                    a9:a1:29:7e:dc:80:1f:a0:e6:1a:04:45:89:26:20:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:78:53:DF:AD:58:80:8B:64:8B:8A:97:47:A6:D4:C7:F5:D4:C8
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:55:2a:71:35:5b:12:5c:06:bd:b8:0b:3d:60:3d:12:23:
         16:62:36:26:e8:c9:d8:c7:52:d0:b1:2d:5f:86:30:45:ba:18:
         d7:b8:9b:ee:3c:f8:ef:09:87:a4:79:46:8b:19:58:4e:0b:17:
         dc:d8:35:03:c9:70:f5:5a:c7:7b:e4:b6:f7:6b:5a:3d:08:cc:
         66:39:06:cb:8b:58:1f:58:2e:fa:df:a4:9c:bd:1f:6d:8f:d9:
         52:69:29:67:5e:25:4b:b8:fc:c6:b8:e6:e2:94:95:c3:74:b5:
         5a:aa:6d:20:ce:9d:f5:86:5a:a5:d0:45:50:9e:b5:57:1a:ec:
         0f:ba:19:df:af:96:45:dc:09:84:26:5f:24:4b:2c:63:82:68:
         4e:33:8a:65:74:0f:d1:65:1e:44:02:8c:2d:72:cc:a8:49:74:
         80:37:68:e2:18:dd:f8:01:ee:b1:36:83:29:37:59:c0:53:2c:
         c2:2a:a7:e3:ed:69:8b:65:fb:5f:65:67:65:70:80:df:94:89:
         53:d4:0c:3a:c9:69:cb:1d:2f:88:70:98:6a:82:f4:9d:43:ae:
         19:be:7d:73:99:41:00:0e:f5:9d:b1:e5:bd:34:21:7d:97:d7:
         2a:a2:c4:dc:9b:26:72:47:1c:df:9c:b8:0e:b3:d2:60:bc:3e:
         d0:de:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:18:01 2025 by rpki-client