Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          p5Lx5ZT//ZfiHjVduiyBXRiVfcTTRDS/GqcMgJD9MSg=
Subject key identifier:   30:B9:10:5C:EB:16:78:38:C6:D2:0B:0C:1F:6F:E3:3C:C4:09:AA:33
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       0196BAED7D95A7DFFAE87F95BD314CB743C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          05CD
Signing time:             Sat 10 May 2025 16:00:48 +0000
Manifest this update:     Sat 10 May 2025 16:00:48 +0000
Manifest next update:     Sun 11 May 2025 16:00:48 +0000
Files and hashes:         1: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: 5dCbn4HDROaa6Bgwb/OOOeOTHBFX7p2OBlZOjXI5K7Y=)
                          2: oJLE-2_94_c-xo-RAtTN4rr9WQ0.roa (hash: isC+c/rku78c9EvyyONTsf6U7PEYgH7eykKDngVLyP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:7d:95:a7:df:fa:e8:7f:95:bd:31:4c:b7:43:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: May 10 16:00:48 2025 GMT
            Not After : May 11 16:00:48 2025 GMT
        Subject: CN=30b9105ceb167838c6d20b0c1f6fe33cc409aa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:2c:e7:66:40:cc:05:ba:3a:f0:e8:14:5f:
                    b7:c2:cb:7e:f5:cc:4f:da:ec:af:0e:40:8c:14:78:
                    a0:4f:4d:69:c4:f3:75:e1:a0:b1:ee:4a:4e:8e:1a:
                    20:b6:ab:42:4b:8b:ad:a7:72:59:c4:6f:3a:62:1a:
                    e9:43:46:13:b4:95:bb:9c:65:d3:94:4f:b0:3c:7f:
                    12:f6:86:59:2c:44:2c:b9:26:04:86:fd:ed:03:4a:
                    4b:62:3d:9a:70:19:f7:3a:8d:aa:1e:aa:e0:62:42:
                    2c:88:df:0b:d2:47:c8:f6:87:8f:8d:04:05:4a:2e:
                    70:26:82:58:f4:9c:6a:e9:d1:ac:af:10:47:43:ae:
                    3a:f6:52:03:c8:6c:da:57:60:39:7e:dc:12:9e:59:
                    79:71:39:9d:9d:b9:c4:b1:c9:5e:70:f3:bb:1c:ae:
                    18:b1:af:df:78:30:2a:5d:69:62:85:b0:6f:a0:3b:
                    d7:e2:9f:f2:11:7b:08:3d:6a:9e:86:97:ed:1a:f2:
                    0b:db:3c:e7:db:6e:6f:c9:98:33:c0:1a:10:7e:6e:
                    f6:93:09:42:1d:96:a2:4a:2c:c5:cf:4a:22:65:12:
                    dd:f5:32:1d:ff:49:ba:9a:4e:f5:21:f5:dd:01:99:
                    9e:82:eb:aa:62:ab:1b:37:f7:bd:b5:07:c3:9d:e7:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:10:5C:EB:16:78:38:C6:D2:0B:0C:1F:6F:E3:3C:C4:09:AA:33
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:0f:dd:3c:28:79:f3:18:17:d4:76:c5:75:08:72:ae:6e:
         83:fe:9c:73:8a:93:0d:8b:5d:c8:af:6a:51:35:e2:2e:0d:62:
         1f:3a:c6:d2:a6:fc:18:6f:c9:65:46:2c:0f:d3:8e:bb:49:f4:
         d4:eb:ba:90:26:e7:e6:e2:59:dd:16:ac:c1:eb:39:4c:b2:89:
         3c:62:58:49:65:9e:e5:29:c9:c2:49:d7:78:21:e9:8b:ef:e8:
         f2:8b:c9:c9:1d:6a:2a:0d:4e:3d:f9:fd:94:d6:e1:74:57:91:
         bf:12:9f:69:4a:bf:a4:a1:42:c2:13:39:1b:ac:76:b5:06:c8:
         59:95:81:3d:e2:5b:6f:a1:1f:a3:18:b9:0e:83:d8:56:8b:02:
         05:45:7f:54:7e:f6:3d:23:30:02:70:25:60:a7:96:67:65:d0:
         de:00:2a:78:fc:4c:d1:be:d5:c6:1a:a5:23:b9:0d:b6:97:b2:
         9a:7b:39:b5:6a:c7:f6:86:a5:16:39:e5:8f:a1:45:35:74:a3:
         35:d6:3f:d7:d7:f4:02:50:8e:58:4d:0d:55:e0:ec:a9:e4:c3:
         75:2e:9e:3b:8e:20:39:5f:54:b3:f0:e3:9c:cc:e7:47:49:13:
         92:0b:41:67:0b:d8:e9:59:ed:70:a1:1a:bf:f9:85:f3:48:8f:
         86:b0:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:43:12 2025 by rpki-client