Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          vW90gdaW3etSL+c8hguxGz8CK2TFaNZf4dvrBZwa6p0=
Subject key identifier:   74:F8:B9:BB:B0:B7:4B:65:F0:1B:48:AB:9B:C8:0C:CF:08:88:D1:45
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       0197B7451A2B52E5676983B619B5897E669D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0EA4
Signing time:             Sat 28 Jun 2025 16:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:48 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: CSG5xGHzgu8NfYchB61bGimw9D5i7NnBQO4gFWYz6T4=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:1a:2b:52:e5:67:69:83:b6:19:b5:89:7e:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Jun 28 16:00:48 2025 GMT
            Not After : Jun 29 16:00:48 2025 GMT
        Subject: CN=74f8b9bbb0b74b65f01b48ab9bc80ccf0888d145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:15:cc:38:22:95:f5:b6:9e:61:d2:93:5f:
                    63:50:58:60:48:6a:e4:8b:cf:0c:0f:79:90:f8:42:
                    54:85:fd:42:74:e0:3e:51:b6:e6:21:c3:7c:46:cd:
                    6d:6e:5a:51:90:5b:59:1f:50:50:98:48:7e:a7:be:
                    ef:cc:bb:b1:9c:7e:23:db:96:dc:2c:0b:93:94:36:
                    a6:4c:68:24:42:87:e9:ce:73:dd:98:df:22:81:93:
                    4d:78:02:4c:fa:36:fd:33:3d:80:8c:37:ba:42:10:
                    d4:51:94:34:6f:87:f7:b6:c5:de:b0:99:3f:ba:9f:
                    5c:64:dd:d6:78:a8:5f:ea:f7:eb:5d:55:25:be:e9:
                    ad:66:97:aa:85:f4:f7:53:87:4c:2f:69:67:2e:6d:
                    41:ea:27:b3:89:d3:8e:6f:b9:8c:9e:a6:ee:bc:7c:
                    c0:7f:00:c1:aa:da:fb:0c:d0:21:02:ac:41:50:6d:
                    ca:08:e8:45:16:f1:b4:c2:1f:15:7c:b1:af:7a:df:
                    7a:3c:41:67:ed:d5:93:4b:96:f1:11:88:05:cf:fe:
                    08:4d:d4:e4:2f:0c:44:b9:2e:93:98:b5:d2:a9:27:
                    63:a2:62:5c:ac:a6:ff:4a:b2:23:75:b4:21:1f:00:
                    11:6a:78:11:76:a2:df:5f:c0:e9:49:89:fc:34:3c:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:B9:BB:B0:B7:4B:65:F0:1B:48:AB:9B:C8:0C:CF:08:88:D1:45
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:a7:44:9b:f1:97:ad:4c:98:d7:86:43:23:cc:23:cb:12:
         b3:d1:ea:19:db:58:65:b2:1a:48:88:6d:18:18:e6:54:89:02:
         d5:f4:ba:c6:67:5b:b1:d4:71:77:2e:3d:55:87:2f:7e:4d:2d:
         90:a7:72:26:f9:b4:b8:d8:f0:a8:bf:6d:6b:68:05:de:21:d0:
         36:f5:47:52:99:ed:96:a4:be:2f:f5:61:b5:cc:05:a1:fc:00:
         76:ea:6d:11:c6:1c:5a:15:29:e8:5f:6f:e4:85:97:b0:5f:78:
         9c:01:9b:20:99:9a:cd:67:54:42:0f:d2:37:f4:00:40:09:88:
         95:3b:43:07:49:84:b1:a0:76:ca:a6:07:86:53:b1:13:98:06:
         d3:9e:f6:45:a3:4f:3e:06:42:4b:5d:db:4a:23:e1:90:ea:b5:
         03:53:b5:78:49:65:9c:ba:ab:c5:44:d4:3a:e4:82:2f:db:ab:
         9a:a7:a5:32:44:90:81:f5:f0:2d:4a:4c:bb:29:a0:c7:6d:0d:
         e9:dd:13:85:43:ba:39:e9:ec:12:6a:b7:3e:af:04:f7:37:02:
         5e:c9:9e:4a:8b:45:7a:40:df:d0:28:7d:37:0a:ff:62:32:7b:
         0b:4a:43:aa:49:f1:18:84:97:62:24:35:bf:3a:8c:ea:69:ed:
         30:17:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:18 2025 by rpki-client