Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          Z7a6/oP4JkNJKbGq9R+V3luSm8FrRzZVmtu+wHXdmMY=
Subject key identifier:   79:F1:80:30:4D:FB:DD:87:DF:5C:C1:70:C6:ED:C6:1F:B3:DE:29:69
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       0196BCDBC68DFB416ED915CA350F76C66632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          06F7
Signing time:             Sun 11 May 2025 01:00:41 +0000
Manifest this update:     Sun 11 May 2025 01:00:41 +0000
Manifest next update:     Mon 12 May 2025 01:00:41 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: zWk8Z6tTM88h6Nc/3BAnu1uUyzkAwa/rXpUZPoELrsA=)
                          2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:c6:8d:fb:41:6e:d9:15:ca:35:0f:76:c6:66:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: May 11 01:00:41 2025 GMT
            Not After : May 12 01:00:41 2025 GMT
        Subject: CN=79f180304dfbdd87df5cc170c6edc61fb3de2969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:c0:35:24:3a:e3:a9:db:da:e4:d4:d2:d5:
                    09:00:02:27:0c:a9:5a:19:0a:12:0b:34:dd:c7:6d:
                    57:74:e1:8a:e2:1c:56:e7:df:00:25:38:e2:d6:19:
                    ef:de:0c:6d:57:e7:c2:99:9b:42:60:cc:00:cb:bb:
                    a0:1b:5f:81:8a:95:ba:72:5a:59:9c:de:c4:76:c4:
                    9c:88:14:08:cc:5b:0b:60:b1:f1:72:81:57:f7:4a:
                    66:d5:a8:05:68:38:01:7c:f2:f4:ae:58:b1:4f:a9:
                    19:05:d8:98:56:dd:98:df:34:ca:68:60:df:83:7b:
                    ab:48:fd:8d:bd:85:7e:f2:44:fd:69:cd:0d:3b:95:
                    4e:db:c3:e4:ac:67:e4:04:0a:f9:f0:85:9e:de:71:
                    d0:ce:52:f1:f5:6b:33:80:20:74:1d:02:4d:89:39:
                    12:72:81:07:59:74:17:ff:9a:99:df:be:e7:55:8d:
                    a4:85:0e:ac:c2:0d:11:1d:e4:eb:49:ea:d9:62:0a:
                    05:5f:0d:d2:5c:37:80:3d:f6:c2:a8:89:08:f1:ed:
                    8d:20:82:34:c4:bb:6c:df:f0:46:5d:e5:88:e0:6c:
                    0b:a8:13:1f:0c:b4:21:d5:0e:fd:3b:db:ce:8e:c9:
                    8c:99:41:11:d3:f4:f9:68:b8:ea:e7:d5:8f:f4:d7:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:80:30:4D:FB:DD:87:DF:5C:C1:70:C6:ED:C6:1F:B3:DE:29:69
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fe:46:8e:ca:a4:bc:fc:78:ad:77:bd:51:f3:d3:97:7c:ca:
         8b:72:f7:6f:e2:31:54:33:41:22:14:86:eb:6a:8f:35:46:0c:
         8c:fd:27:5f:9c:88:89:b5:ee:81:f0:90:86:9b:76:7a:69:46:
         bd:27:fc:0d:d3:e3:d2:46:5b:ff:48:ae:36:2a:8e:83:88:03:
         fa:2a:41:dd:f7:6f:fd:4b:fd:2e:9a:53:ee:ca:ad:18:50:9f:
         db:2e:84:5e:06:a1:cf:4c:f8:73:4c:4d:2c:7a:47:ac:3b:92:
         63:b1:85:b0:ac:17:f6:d8:50:a4:4e:41:51:2f:64:fc:d7:42:
         e0:44:f6:12:cb:2f:33:04:d9:dd:a9:88:67:3b:1a:f9:9a:2b:
         9d:a4:b5:24:b4:52:29:4a:f5:71:e3:08:62:e9:a0:7f:1e:9d:
         e2:e5:f5:cb:ba:3a:d2:35:bf:dd:99:54:99:c8:37:97:46:dc:
         4f:b8:d3:17:d2:12:d9:46:56:32:22:d3:33:7f:26:7f:f4:b4:
         df:31:6c:37:57:2c:d5:7d:c3:98:86:f9:44:fa:a9:5f:a1:3b:
         d9:a1:e5:3c:7a:9f:4d:d8:46:45:35:bf:34:03:90:1f:dc:95:
         be:be:07:b3:f1:d0:25:12:58:ef:92:85:cb:63:c4:4e:13:df:
         3a:bb:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:47:35 2025 by rpki-client