Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File:                     5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier:          4aukx8v15uPZMuEZv0J/jWI7aV0/CchVc36KAm9y5n8=
Subject key identifier:   33:BE:6C:74:BD:92:1E:37:9B:35:A0:6C:9C:8E:46:C5:7A:26:D9:B4
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer:       /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial:       0197499F0225B98DDE3F6734E66C62C7943B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number:          066E
Signing time:             Sat 07 Jun 2025 09:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:46 +0000
Files and hashes:         1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: tF7BtCyEMWJLg8miYahMvuj1wnKoD+DBjYB27HS6iTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:02:25:b9:8d:de:3f:67:34:e6:6c:62:c7:94:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
        Validity
            Not Before: Jun  7 09:00:46 2025 GMT
            Not After : Jun  8 09:00:46 2025 GMT
        Subject: CN=33be6c74bd921e379b35a06c9c8e46c57a26d9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:89:b0:09:2a:ec:f9:20:b5:67:5b:f1:3b:
                    30:7a:a0:36:7a:25:99:1e:99:45:a7:10:3c:e3:d4:
                    78:bb:66:21:d3:df:f2:de:df:0a:43:99:d7:58:0f:
                    b7:6b:89:07:26:4a:73:09:f5:2a:bc:f0:a9:72:d9:
                    a1:fe:e0:4c:15:c9:58:6e:19:04:bb:30:f7:e2:04:
                    7a:b5:a1:3e:c6:6d:60:28:bf:85:f8:46:c6:6a:a4:
                    da:63:50:af:48:4c:c9:46:9d:d0:09:66:a8:e8:e4:
                    5b:16:8a:11:01:a3:b9:16:79:d7:4b:ea:ed:df:c2:
                    2b:9e:27:d5:5b:58:71:0c:f4:1e:92:22:ac:96:f9:
                    99:da:45:56:b7:de:f5:42:af:6a:78:d9:c5:75:08:
                    9a:e1:52:1a:fd:bb:49:c8:53:74:d8:9d:dc:c9:8c:
                    92:71:4e:6a:d3:e0:a4:56:01:b2:d3:de:b5:9f:ad:
                    70:41:4f:f7:2a:61:6d:93:1b:cc:b4:af:e7:10:1c:
                    23:ad:65:8f:c1:8e:79:f5:2d:b1:cc:8a:06:cb:c6:
                    03:37:b5:47:f4:66:04:c0:3f:6f:a3:84:43:1d:50:
                    71:1d:b4:3e:11:d1:12:11:b9:09:39:be:28:67:4b:
                    e9:01:fd:d7:a7:1e:cd:16:17:39:da:2b:35:43:a1:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BE:6C:74:BD:92:1E:37:9B:35:A0:6C:9C:8E:46:C5:7A:26:D9:B4
            X509v3 Authority Key Identifier:
                keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:49:80:99:cf:6e:18:27:64:97:06:f9:fd:90:5d:80:56:
         52:e2:28:74:57:7d:ef:b2:aa:06:e5:b7:55:c1:7a:47:98:f3:
         5e:af:33:43:aa:f6:05:dc:fe:03:46:44:ec:fa:e2:8d:6a:80:
         24:2c:a4:dd:aa:ed:56:ee:cd:6a:ea:4a:2a:f8:a5:11:f9:8d:
         51:b6:98:1c:77:e5:a6:0c:82:55:3f:b3:c8:98:bc:de:f9:88:
         85:2d:89:c9:99:3e:80:12:a7:ba:f6:3d:fe:ac:b6:d2:b7:99:
         ed:ea:5a:5f:d9:40:af:96:2e:60:f0:a7:e3:22:64:b3:68:1b:
         94:0d:3a:5c:5f:3a:46:a3:49:29:c5:ff:63:34:15:97:c0:eb:
         7e:9d:b3:3b:2c:b3:94:39:62:0a:af:08:46:fc:56:ba:8c:91:
         c0:66:08:d4:5e:30:2a:53:12:19:29:70:40:14:df:f8:2a:fd:
         d5:04:a3:05:6c:f8:27:c4:22:c0:58:98:65:e0:85:27:c2:b5:
         0a:10:b1:4d:fc:ab:f4:a7:15:ed:0f:07:73:8b:a5:6f:be:1f:
         d4:f4:85:6f:dd:56:8e:78:56:5c:75:ca:fc:00:b0:cd:b3:cc:
         94:0c:aa:88:a0:fb:79:b8:04:04:e9:6a:68:cc:c3:b9:9b:64:
         2f:cb:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:04 2025 by rpki-client