Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
File:                     5_moojloMmPnVeEsl9LXpDLQs3c.mft (raw, json)
Hash identifier:          3fR4sJge5VcdVNwRNjc0OO4pwjLcL3ylE7R5gq2wcmY=
Subject key identifier:   01:2C:06:D4:C8:73:5D:F1:3C:07:60:79:F4:C9:C5:13:09:F5:56:9D
Authority key identifier: E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
Certificate issuer:       /CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
Certificate serial:       019749D5E15A98A5F57FC0178F332B14476D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 10:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:42 +0000
Files and hashes:         1: 5_moojloMmPnVeEsl9LXpDLQs3c.crl (hash: otMZgbROf+G3xdCjgfb5k7J/l+zUMP2RjhOprjxMyI4=)
                          2: Pe3pszkM2CU3Aqq2LsSWnRdpMXY.roa (hash: 7KOR6sFk9qGqJSuGUx84Vcqp+ySqoAEsvIAFZWSMqGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:e1:5a:98:a5:f5:7f:c0:17:8f:33:2b:14:47:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
        Validity
            Not Before: Jun  7 10:00:42 2025 GMT
            Not After : Jun  8 10:00:42 2025 GMT
        Subject: CN=012c06d4c8735df13c076079f4c9c51309f5569d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:db:11:2e:fe:1e:ca:43:68:da:9b:40:df:
                    ca:66:f2:45:bd:22:f9:db:36:c9:b5:b5:86:c8:78:
                    ce:d7:1f:9f:34:23:70:24:d3:e0:55:e2:6d:55:91:
                    d8:a7:b8:a2:b7:07:b5:b2:5e:04:57:ae:f2:c3:b5:
                    c3:3d:1c:59:0c:2e:10:7a:1f:33:bb:e4:fa:c5:25:
                    5c:eb:c7:38:9b:b6:aa:3d:fe:27:80:da:45:ea:ef:
                    83:29:d0:8a:00:18:0c:78:ac:5c:41:e4:00:bb:c4:
                    c5:fe:70:6d:d8:cf:0b:9a:db:64:f0:3a:8d:3b:9c:
                    47:c9:9f:01:67:5d:87:9f:0b:1b:7a:f7:0d:0b:ca:
                    f9:64:c4:91:7d:54:0c:50:bf:d5:4c:5a:9e:79:7f:
                    68:5a:03:2d:67:16:71:dd:24:21:cd:c9:c0:e1:78:
                    1e:e0:c3:b1:05:3f:0a:6f:e2:a3:25:dd:b8:23:3d:
                    a9:17:a0:06:06:86:92:00:fc:3d:af:54:10:9b:08:
                    06:2b:05:15:ce:2a:74:2d:61:51:8c:b5:86:99:7a:
                    bb:14:68:72:fc:75:46:ca:24:91:40:38:3c:0e:c8:
                    22:59:f7:07:97:de:f8:81:b4:a5:9d:34:58:a4:66:
                    da:22:fc:22:69:83:90:bd:f1:34:92:50:40:d2:f1:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2C:06:D4:C8:73:5D:F1:3C:07:60:79:F4:C9:C5:13:09:F5:56:9D
            X509v3 Authority Key Identifier:
                keyid:E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:00:3a:ab:2a:8f:ab:c5:32:98:38:e2:b0:a6:c2:2f:0f:0e:
         94:28:59:ff:ba:2f:21:23:30:10:95:0c:1c:ff:90:b5:de:ad:
         2e:6f:63:fb:51:99:29:1e:27:22:5c:7e:0b:89:65:09:f4:77:
         d7:03:c6:71:c1:b3:92:73:f7:97:7b:1b:60:22:a8:13:2d:ae:
         2d:f4:87:d0:59:70:f8:c0:ef:f7:ee:d0:7f:ec:4a:34:31:fa:
         37:a5:c5:47:2a:77:a5:61:b3:fb:87:d9:83:58:a9:a9:f4:c9:
         83:65:3f:48:76:51:74:d9:a5:f9:40:a5:ae:79:57:64:94:b6:
         7c:c3:5a:3e:8d:81:15:3c:58:3e:05:9a:24:d9:a6:b6:93:26:
         bf:76:bc:24:ca:b7:25:c3:09:6f:24:2a:a9:cd:25:41:f8:0b:
         0e:b8:59:8b:fd:c9:32:3c:49:89:9c:94:40:77:10:48:92:8c:
         66:b6:63:ab:46:37:59:8e:76:98:12:e1:58:b5:2f:31:a8:6d:
         ad:f6:05:8f:cc:f2:8c:68:f5:31:ea:19:f9:fd:1b:f9:82:94:
         11:8b:e4:4b:86:58:89:16:b2:b0:96:91:31:4e:6a:ad:2a:45:
         e0:70:84:29:eb:22:5d:ff:61:cc:a8:63:62:3f:36:48:9f:57:
         00:a9:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:20:11 2025 by rpki-client