Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          lkx/sbs2MCf0BtZJKCKjzvHOUjotc0zyr/G9s3MK2bA=
Subject key identifier:   DC:3D:B9:63:7E:C3:19:1E:07:35:1B:4C:F9:1B:45:24:4E:C0:53:AD
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       0196BB924407CFFEDF863A52CCE1917BC214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          116D
Signing time:             Sat 10 May 2025 19:00:47 +0000
Manifest this update:     Sat 10 May 2025 19:00:47 +0000
Manifest next update:     Sun 11 May 2025 19:00:47 +0000
Files and hashes:         1: 7McjxupphmUTIDMB5hb0zSdkKPU.roa (hash: EbiTg62JkmhMKsH+lFrkNiNAuLRjLLKFna7hKz3yDps=)
                          2: A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa (hash: 2Z2MMJPop83/eKqvvRjbHx9UxdjVWLlOnDA0QnBD8dM=)
                          3: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: RZ96DsEMi84evK11mawYr5y89yFu9fBiI8m/DKOrtZo=)
                          4: pjqTP4jfQfsNA8tjYi42Sc1-S88.roa (hash: H5/YZQfh0J/SWAF5xqrnL8j1DdrlYslU+4bEkRfwqM8=)
                          5: s9-7uzfILp_wqpuTQ6RY06M_vb0.roa (hash: Pd9QbCwquRy9rtMT/uczWDR3qfrQi3t7npfRPZFPtOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:44:07:cf:fe:df:86:3a:52:cc:e1:91:7b:c2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: May 10 19:00:47 2025 GMT
            Not After : May 11 19:00:47 2025 GMT
        Subject: CN=dc3db9637ec3191e07351b4cf91b45244ec053ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:84:3f:f6:c9:f5:ec:7d:cc:93:7d:cb:88:
                    2c:ec:61:7f:ee:dc:1e:2e:c7:fe:3a:0d:e8:40:e7:
                    6c:fc:1b:78:f2:ea:cb:2a:32:15:2b:64:79:76:ac:
                    07:bb:a4:7a:73:5c:ce:41:c1:c6:fb:94:cc:37:7e:
                    60:5b:35:cc:5f:80:46:be:e6:bf:dc:62:9c:e7:64:
                    39:00:43:42:9f:cf:b1:cb:6b:fa:f3:37:26:6a:25:
                    7b:92:5b:21:7c:be:71:f5:71:64:22:8b:d3:a7:e2:
                    86:d2:52:18:91:0e:3c:02:69:48:54:33:cf:c0:88:
                    cb:aa:d3:1f:84:76:53:f7:9d:68:32:50:6a:33:17:
                    cc:5a:5b:18:bd:e3:12:1a:ca:93:49:e6:3d:6c:38:
                    b6:db:5c:1d:56:0d:25:34:c9:93:91:96:8e:a3:47:
                    2f:dc:75:6b:53:59:7b:80:77:d8:63:ee:40:de:46:
                    98:15:53:84:da:09:76:24:3f:1c:41:9d:5d:b6:d4:
                    c9:e1:c1:81:12:83:a2:3e:34:42:5a:e8:f5:f2:b4:
                    6a:ea:6c:1f:f8:6f:1b:e4:55:a3:44:59:a8:6a:b4:
                    87:bf:44:0e:c8:21:0e:3e:2b:f2:fa:b3:35:7d:1d:
                    6c:eb:f3:a1:9c:bb:60:91:6a:6d:57:0a:cc:cb:dd:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3D:B9:63:7E:C3:19:1E:07:35:1B:4C:F9:1B:45:24:4E:C0:53:AD
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:44:8b:42:86:a9:b7:5f:b0:5d:1f:8f:2b:6b:59:16:c2:c5:
         a7:9d:23:4e:61:96:29:c0:17:31:bb:75:42:81:7a:b2:34:d0:
         c4:7c:7a:9a:a4:dc:37:66:19:6f:58:91:f2:f4:98:99:1d:90:
         e7:e9:3d:d9:b4:f3:94:5e:11:5f:2a:e5:6b:20:10:d6:d8:b1:
         1b:38:25:d4:19:f0:86:04:fa:3d:09:24:77:3f:94:fa:e2:3f:
         21:3d:18:26:41:6e:a8:d9:d5:35:c7:eb:16:78:63:d0:3e:32:
         99:ca:bc:a2:39:e7:47:66:f5:84:e9:e3:24:53:25:6b:7f:5c:
         1f:b1:22:20:3f:12:3f:a4:c5:e0:7c:b4:a6:d9:82:e3:ca:d7:
         29:29:65:44:33:7b:4a:7b:18:67:fd:08:8b:08:33:09:14:b2:
         98:4c:64:10:e4:4c:11:a0:be:fd:7f:7b:fd:b5:2c:a4:64:a1:
         a7:4a:63:6c:f0:e6:2c:5c:a1:bd:00:c7:3f:db:86:3b:7b:12:
         a9:af:22:85:68:1b:92:88:3f:88:6d:cf:a3:0c:bf:bd:85:7f:
         20:50:53:8e:24:fb:f2:2f:f1:d7:b5:be:41:b5:75:ad:c1:03:
         5c:32:7e:ed:95:18:3d:58:57:0f:fc:ae:38:a3:8d:4b:78:b0:
         c9:fa:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:53 2025 by rpki-client