Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File:                     5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier:          WBGSnRIf6Kdl1LJyAp5KzcQ2MuI0Nlqrih+FNmaQZV4=
Subject key identifier:   0B:FB:56:47:5E:B1:D1:D4:2F:3F:E4:15:3F:18:40:08:8C:D6:78:4C
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer:       /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial:       019759EE1E331B7B9B220B9B55BD64972E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number:          1584
Signing time:             Tue 10 Jun 2025 13:01:06 +0000
Manifest this update:     Tue 10 Jun 2025 13:01:06 +0000
Manifest next update:     Wed 11 Jun 2025 13:01:06 +0000
Files and hashes:         1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: 4we80mjfGYI7nKxhMrKss5cickEgIk7qVr4qLgHD5iI=)
                          2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:ee:1e:33:1b:7b:9b:22:0b:9b:55:bd:64:97:2e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
        Validity
            Not Before: Jun 10 13:01:06 2025 GMT
            Not After : Jun 11 13:01:06 2025 GMT
        Subject: CN=0bfb56475eb1d1d42f3fe4153f1840088cd6784c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:d1:eb:08:b7:60:43:b8:45:65:e6:51:1c:
                    d5:25:da:35:e3:89:1c:ea:a0:23:50:c0:57:8c:bf:
                    14:a5:bd:85:f8:01:46:53:e7:d6:74:d0:ed:c4:59:
                    83:5a:cf:33:cc:f3:3a:b1:40:eb:2c:bc:fd:bb:60:
                    ac:50:e0:fc:28:1a:8a:69:cc:59:45:84:03:3b:c9:
                    5c:63:16:84:f7:e6:c8:6f:99:66:5c:c5:0b:63:98:
                    ea:52:af:40:07:fe:d6:f1:1d:6c:78:45:45:b3:98:
                    26:74:86:e1:83:1c:43:32:c2:df:11:bc:a7:91:c0:
                    6e:78:1e:0a:2b:1f:d3:ed:6a:c5:0a:9c:13:b2:e0:
                    9b:fb:42:53:13:fc:81:dd:4b:52:e9:14:8b:65:b8:
                    db:56:56:2e:76:80:49:28:0c:e7:9e:c7:84:b7:45:
                    dd:31:92:cc:24:13:a8:c4:65:59:a0:09:97:26:25:
                    0b:9f:54:ea:7f:96:0f:eb:ac:06:cc:b9:c7:c9:41:
                    8d:36:62:1a:2f:ec:a7:67:88:aa:94:19:ea:e8:26:
                    20:f6:d5:13:08:b8:49:24:49:8e:f5:f6:85:30:85:
                    82:ed:c0:7d:b4:9d:c2:2c:ad:76:30:27:60:1e:c3:
                    d6:8f:38:54:b7:bc:50:ec:25:b2:b7:5f:20:da:6d:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:56:47:5E:B1:D1:D4:2F:3F:E4:15:3F:18:40:08:8C:D6:78:4C
            X509v3 Authority Key Identifier:
                keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:db:6a:08:c5:f0:93:88:de:2a:ce:28:3b:d4:af:cc:18:
         92:7a:28:96:c5:db:0f:44:91:c6:03:93:71:af:2f:eb:c7:0b:
         36:74:92:f1:e8:61:59:c6:6f:b9:15:07:0f:8e:27:45:22:e8:
         49:f6:64:3f:4a:5e:62:b4:ed:f4:86:f9:22:d1:a9:f8:08:12:
         5d:fb:8b:03:67:7a:6c:13:72:f7:c3:a5:d6:1c:ea:0e:ed:8a:
         f4:d8:38:ee:49:4e:98:7a:2d:b6:ce:62:0e:83:5d:70:ca:fd:
         e8:57:e8:06:15:e9:77:8b:10:11:d2:f7:a0:de:23:0b:ba:5f:
         b4:21:43:e9:74:0a:32:f9:f1:fe:02:06:a3:25:c0:ea:49:5e:
         84:79:74:80:46:7c:3a:c4:a6:b6:9b:a1:41:f0:f6:86:67:cf:
         72:2d:b3:82:c6:28:b7:07:73:da:ce:91:be:ab:76:c7:16:e6:
         85:1c:31:10:51:8a:92:60:f1:53:bf:ac:d3:09:64:06:f7:66:
         3d:9f:5e:dd:e0:54:e9:cc:7f:cb:a0:37:7d:6a:bb:c4:0d:73:
         ce:10:e5:65:bf:7b:1c:29:fd:ac:2a:82:93:2c:c0:d9:76:07:
         be:71:d1:ae:49:b6:97:f6:20:34:4a:97:a0:b2:34:33:24:b0:
         bb:d9:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:44:51 2025 by rpki-client