Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File:                     5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier:          j5T/j92X93ZJ6VL7cOOQS9N8Mg+9vQ6i3/R8rcO07Qk=
Subject key identifier:   01:F9:30:24:D3:F3:C1:9B:D7:87:26:A8:66:81:A4:25:51:AE:7D:EB
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer:       /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial:       0197C2A506D3062414F7C8C2C48157BBE1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number:          0FB5
Signing time:             Mon 30 Jun 2025 21:01:24 +0000
Manifest this update:     Mon 30 Jun 2025 21:01:24 +0000
Manifest next update:     Tue 01 Jul 2025 21:01:24 +0000
Files and hashes:         1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: rhmUFAP+xhon928A3SjOQZS5/M5zsH0ACvatz1pCV/U=)
                          2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c2:a5:06:d3:06:24:14:f7:c8:c2:c4:81:57:bb:e1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
        Validity
            Not Before: Jun 30 21:01:24 2025 GMT
            Not After : Jul  1 21:01:24 2025 GMT
        Subject: CN=01f93024d3f3c19bd78726a86681a42551ae7deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:85:5c:2e:af:b0:7e:ea:32:94:51:9b:bb:
                    39:49:e9:b8:4e:d1:f1:41:46:55:aa:2c:a9:80:34:
                    52:63:a1:48:3e:c8:93:dd:50:55:fc:fd:4b:c5:8c:
                    21:5e:5a:b3:ff:42:74:7e:95:29:14:97:9b:07:44:
                    cd:6c:40:50:f5:45:23:2b:80:98:64:da:7a:69:9a:
                    3b:5a:ed:df:8b:1d:f2:52:6c:73:1c:28:ce:85:56:
                    87:ac:1a:b2:20:bf:f8:68:91:8b:a4:c8:0f:f5:16:
                    cf:e8:1e:a3:4a:42:e6:df:49:07:53:97:43:b6:47:
                    84:77:df:fa:04:d4:8f:43:d2:b3:d5:d2:8e:82:80:
                    a1:aa:f8:05:bb:60:a1:fc:2d:8c:24:c8:53:fd:70:
                    dc:c3:8f:56:9a:19:a6:36:26:fb:ca:14:44:d8:3e:
                    e1:36:2c:22:f5:33:d9:3a:3b:bd:ad:ae:f4:7c:6f:
                    3f:58:85:87:8b:e3:ca:32:56:02:3d:d0:f7:e3:5d:
                    5d:b5:ea:12:b0:69:8d:37:32:1e:74:1a:76:15:54:
                    6a:b8:77:c1:2b:a8:69:9d:a3:cd:ce:75:74:78:d0:
                    da:0d:70:45:01:9e:cd:eb:a1:03:ec:51:bd:01:78:
                    7a:b6:48:62:87:b8:bb:b8:63:59:ec:9b:a1:53:63:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:30:24:D3:F3:C1:9B:D7:87:26:A8:66:81:A4:25:51:AE:7D:EB
            X509v3 Authority Key Identifier:
                keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:0b:cf:62:f2:5a:e7:0f:c0:63:fd:99:df:15:c9:ca:93:
         1a:3c:9a:88:cb:37:0a:b8:ef:f2:b2:c1:40:ed:7b:f0:6d:4e:
         23:53:7f:55:b6:6f:08:31:05:d6:03:7c:81:46:f4:34:f2:24:
         ca:dc:fa:10:6e:d9:aa:e6:42:a8:ae:97:a7:ea:02:9c:94:9f:
         9d:07:c6:ea:d6:85:a8:63:de:b5:7b:00:1b:b5:18:c2:1d:bb:
         3a:46:a0:3a:31:79:3c:75:86:a7:93:79:b1:75:7a:0f:5d:e7:
         03:e8:c4:33:4f:d3:19:10:03:3c:39:cc:06:75:81:1a:b4:39:
         8e:0b:45:bf:62:5e:f4:be:02:62:17:12:77:4b:20:86:7e:8f:
         a7:27:07:c3:6a:9c:ac:d2:d6:5c:10:a6:5c:9c:2c:04:45:ed:
         1e:88:f2:6f:9c:0d:bf:49:f6:2d:71:5a:5e:a1:61:4e:2c:e0:
         4d:e2:18:69:6a:10:3c:34:3d:95:77:ea:70:a2:93:73:ec:f6:
         d5:67:5e:cc:42:e4:ee:3f:6a:bb:31:c4:78:56:54:23:e7:b6:
         13:55:b8:e6:cc:4f:19:b9:79:ad:b0:96:da:ce:2a:74:e6:24:
         4f:a2:3a:3c:20:87:e6:17:de:6d:bc:58:0a:69:8b:fc:f8:6a:
         64:af:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:22:02 2025 by rpki-client