Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File:                     5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier:          cEHwY/mQv6l4N6/D+8SFegrM/3w4xSfA2SE8bdnISRE=
Subject key identifier:   EC:91:01:B3:BA:5D:A2:ED:CD:9E:20:3B:1B:98:E2:69:BD:66:D6:D6
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer:       /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial:       0197B820D560788CA30ED4DEBBFFD30EBEAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number:          1545
Signing time:             Sat 28 Jun 2025 20:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:48 +0000
Files and hashes:         1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: t1xRMVefjclo0E/1CBnZc4wrRSLX4LB9RkDPTWKQ2ys=)
                          2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:d5:60:78:8c:a3:0e:d4:de:bb:ff:d3:0e:be:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
        Validity
            Not Before: Jun 28 20:00:48 2025 GMT
            Not After : Jun 29 20:00:48 2025 GMT
        Subject: CN=ec9101b3ba5da2edcd9e203b1b98e269bd66d6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:1f:86:4f:29:ee:ae:19:86:37:3f:b1:59:
                    b5:e4:46:87:7e:d2:cd:84:a5:3b:0a:73:3f:04:5c:
                    1a:cf:8d:56:6b:2a:a9:d6:78:18:95:69:bb:2f:2f:
                    eb:c0:e4:cc:e5:8b:d3:ad:cb:c1:07:b0:49:6b:76:
                    b3:12:62:68:85:49:c1:5e:fa:5d:d3:f6:28:76:58:
                    e7:3a:89:71:46:9d:05:b7:77:4f:e5:c8:de:f6:5f:
                    61:2b:05:93:34:d6:f3:68:73:88:30:f7:5d:88:03:
                    9a:6e:d5:05:a3:45:19:3c:71:b4:b2:ec:72:28:10:
                    c6:f5:88:83:2b:7d:3f:0c:fc:61:20:6f:b2:95:34:
                    dc:42:d2:f0:51:08:ec:dd:12:c4:43:3f:eb:99:ee:
                    83:85:7f:5b:17:60:1e:91:96:e4:13:f5:c2:ac:0c:
                    d0:da:14:e7:07:e6:f0:96:db:14:23:d8:83:72:8d:
                    5d:04:c0:27:f1:39:c1:4c:80:0f:2a:0c:ce:5e:77:
                    eb:3e:53:a7:ff:e4:6d:72:1a:a5:eb:9c:4c:7f:a5:
                    cd:90:d4:77:34:e5:1f:dc:7a:ee:c2:73:2b:3e:f6:
                    1f:18:d0:7f:e2:38:3b:72:60:7b:87:25:eb:2c:90:
                    52:bd:be:10:ec:25:e6:79:35:cc:b0:4d:03:a6:50:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:91:01:B3:BA:5D:A2:ED:CD:9E:20:3B:1B:98:E2:69:BD:66:D6:D6
            X509v3 Authority Key Identifier:
                keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:10:61:85:35:f2:f4:e6:fb:e5:4f:54:ca:da:48:21:6d:5a:
         18:d7:99:80:47:17:8e:a5:c1:70:c4:3e:1e:7b:04:7a:cc:e8:
         3a:f9:6f:f0:f6:48:d5:4f:29:fd:89:c0:32:2f:c5:94:3b:92:
         f0:82:3e:e5:0d:e6:38:6f:40:23:27:62:d7:f2:f6:3c:c2:f6:
         e1:99:a1:96:67:58:50:91:95:9e:c4:69:2c:b7:bb:f4:05:d8:
         b8:9b:1c:66:8f:de:ce:e6:ac:3d:59:24:a2:4d:b9:c4:f1:b8:
         b7:fb:04:b7:dc:26:fb:f9:e5:f0:76:76:b8:dc:3b:9c:76:85:
         a6:8d:5f:43:44:b1:78:b6:79:27:4b:e8:05:de:ac:6e:69:95:
         19:d9:99:56:9e:21:b0:47:93:ef:26:ce:34:ef:3c:42:df:19:
         a4:ed:a8:56:33:8d:e7:c6:7f:69:57:37:6e:28:af:92:1d:91:
         fc:0d:fc:66:6c:0d:98:42:3b:c8:8b:c4:96:3b:58:69:ac:08:
         1d:8e:5e:67:98:7c:d1:a7:a5:93:98:2f:61:29:9b:9c:d0:9a:
         3d:83:89:3d:b3:f2:48:b0:61:7e:ae:c0:2e:b2:48:e9:16:17:
         6d:58:62:27:89:3a:8d:be:5b:13:da:02:60:eb:70:f0:be:8e:
         09:9e:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:04 2025 by rpki-client