Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File:                     g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier:          OtOv7EZGhi/7TOEltO34lYJ4Xj3TxG/m0pG4kzdwoNs=
Subject key identifier:   BE:CE:00:8C:9C:5D:BA:9A:DA:7F:B4:ED:7E:DF:A9:D0:F9:D1:7D:4B
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer:       /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial:       0197C86FD56EE27C4144F0A7742EF9E6DECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number:          15DD
Signing time:             Wed 02 Jul 2025 00:01:01 +0000
Manifest this update:     Wed 02 Jul 2025 00:01:01 +0000
Manifest next update:     Thu 03 Jul 2025 00:01:01 +0000
Files and hashes:         1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=)
                          2: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=)
                          3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: PNKRjvKbP2mEBaJFUBIet2sERON1JpnUw9L+7h1Zdog=)
                          4: iItCjBu7NqQrWbQleZcs2InABtI.roa (hash: cxiVo1wViQ58OFWvWqbHd9qDUKA+J+hZBuev/y366W0=)
                          5: yjHXpxae4GvC2hVgF9lA84wEs5M.roa (hash: 4Bi95QC518DbFT+lc7i5bmvKADegBbbEtWKzYAy7Xo0=)
                          6: yvNRdoKPa6T74yCCtKA2QvJhdbs.roa (hash: gmVjs/E675HoTkgwked1IKQnLBzNPHHSFLe/DEwf98c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:6f:d5:6e:e2:7c:41:44:f0:a7:74:2e:f9:e6:de:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
        Validity
            Not Before: Jul  2 00:01:01 2025 GMT
            Not After : Jul  3 00:01:01 2025 GMT
        Subject: CN=bece008c9c5dba9ada7fb4ed7edfa9d0f9d17d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:f8:af:9c:82:ed:76:fa:6b:78:2b:70:1b:
                    97:a7:1e:d8:82:f7:b8:b9:6e:5b:b3:4e:15:8c:57:
                    79:04:3a:05:f1:e5:6d:8a:2e:ef:15:b2:d9:a4:96:
                    84:05:8f:40:69:6f:53:9c:8d:8c:75:bc:c0:ff:f6:
                    a0:a6:d7:34:27:44:f3:42:5e:11:71:c7:c1:75:c7:
                    7e:6c:f4:bd:5b:00:4c:bc:c1:c2:54:93:83:7f:80:
                    48:55:ab:a7:b3:3b:20:a7:af:c7:e4:47:c5:b5:4b:
                    a3:0d:cb:60:6e:75:b2:0f:0a:bc:5a:19:0e:32:2b:
                    cf:ce:80:ed:b7:95:32:be:5d:50:05:81:e0:17:d2:
                    57:71:eb:50:fe:f9:ba:af:53:af:0d:89:8a:33:7e:
                    a8:08:c9:4f:c7:94:d9:71:12:76:4a:40:d1:e9:3e:
                    30:8a:0c:3a:6d:db:92:0e:af:9e:3e:c7:e8:bb:e7:
                    94:58:0f:9c:17:94:1d:20:45:dd:9e:b9:75:58:07:
                    4f:52:1a:67:53:df:80:85:b3:78:e1:3b:02:d4:3d:
                    a4:f7:83:8f:a8:51:54:dc:e8:0f:0f:e8:18:29:27:
                    9c:91:3f:6f:64:5e:77:ee:10:72:e9:19:cb:20:3f:
                    5c:76:90:fc:ad:ae:bb:2c:f5:9d:bc:67:a4:39:af:
                    7a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CE:00:8C:9C:5D:BA:9A:DA:7F:B4:ED:7E:DF:A9:D0:F9:D1:7D:4B
            X509v3 Authority Key Identifier:
                keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c7:98:67:62:b2:aa:7b:bb:8b:21:8f:8a:34:e0:19:6f:99:
         3b:2d:05:76:28:0d:6a:8c:80:bd:f4:70:c2:64:59:40:52:6f:
         41:be:9e:8c:1a:53:a3:7f:f1:79:70:5c:2a:4c:14:47:e9:7b:
         fc:69:5b:3a:2f:d7:aa:58:e6:0a:cd:40:14:01:6f:2d:30:9b:
         9e:32:56:b3:0b:06:36:30:f6:ef:0b:21:83:b7:64:ad:0d:cb:
         df:d7:ec:44:97:ec:93:b2:00:3d:15:8e:e1:c1:96:0d:c2:54:
         0e:43:ec:4d:cc:78:ef:41:24:9f:ae:c9:3a:9e:0c:5a:c0:ab:
         5a:71:90:4a:5c:04:a4:58:2d:26:22:be:c0:2a:a6:e4:e2:2a:
         7a:79:8b:c4:43:fd:1f:0c:af:60:38:7a:42:f6:e4:03:9a:78:
         7a:73:0c:b7:c8:e4:3d:55:21:c9:1e:7a:93:d2:d4:6e:90:88:
         c6:3d:de:e6:65:86:a9:dc:86:76:34:f7:ea:ca:ae:bd:b6:bd:
         86:f3:09:d7:bc:da:8a:80:b3:11:2c:89:09:d5:78:c9:e7:9d:
         3b:d6:32:c3:30:e1:40:0d:47:b4:b5:8c:14:98:54:7a:65:7c:
         8e:0e:b5:14:ab:76:9d:79:fb:4b:93:c2:a6:9a:a6:94:6a:80:
         9e:b8:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:26:08 2025 by rpki-client