Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          hm+9HRX0+l3cfKCRMlOUDSGc9+wbn4qpUVEiSiJIulA=
Subject key identifier:   54:D8:6F:8B:81:0B:D8:C2:71:DD:71:01:A7:CA:B8:82:D8:D1:FC:B9
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       0197B7EA673F58232EA9E8C7C08620B1C4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 19:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:21 +0000
Files and hashes:         1: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: 7OdGqHSJRByxxb8sfiMpy16MZoZ9zVrqO+NfvUcf2WE=)
                          2: KAeDRZYtk4gQYh2zbQ0HADYpjok.roa (hash: 3b5QOxzEttRmMN1A9txJTsvRVrohslbNkzlikXbgEz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:67:3f:58:23:2e:a9:e8:c7:c0:86:20:b1:c4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Jun 28 19:01:21 2025 GMT
            Not After : Jun 29 19:01:21 2025 GMT
        Subject: CN=54d86f8b810bd8c271dd7101a7cab882d8d1fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:57:ec:11:4e:33:cc:6b:c2:a6:6b:9c:2c:
                    01:0a:e6:2d:08:db:47:0a:a4:63:80:a9:ad:a0:23:
                    4b:8e:c4:b2:b5:af:28:7d:ec:54:7e:b7:96:a4:00:
                    40:4e:e5:ee:b7:36:e3:07:02:50:b3:db:f9:0d:4c:
                    13:4e:fc:aa:be:a6:e2:f6:63:53:fd:23:ac:37:2c:
                    91:50:14:8e:ca:a1:b9:a9:3c:a2:48:d7:ff:e4:9e:
                    a8:34:f6:d5:d0:a6:5b:7b:7a:e3:95:45:77:d2:5c:
                    96:27:fe:9b:12:8f:9f:ba:7b:e9:c6:f3:ee:a2:34:
                    9a:76:96:ec:29:e9:87:5b:9e:ac:7f:5c:68:57:29:
                    d3:58:c4:7f:9d:66:ac:50:b4:9f:f7:78:1a:69:9c:
                    cb:77:05:24:b8:93:35:32:1f:14:74:ac:36:5a:f8:
                    25:46:a0:38:f1:54:41:91:63:07:9d:31:76:69:fe:
                    b4:c8:f5:36:b2:a5:4a:8a:47:5b:2c:8a:f6:cb:d4:
                    0f:10:ce:20:a2:c9:87:ca:1f:f0:db:30:c0:93:6b:
                    10:81:6a:b6:79:e4:a3:ca:1d:5d:4d:19:84:1f:8c:
                    a4:21:c3:4a:9e:c8:ee:be:ff:84:7d:21:75:67:5e:
                    e3:31:9d:00:5f:65:b0:41:0a:03:f5:54:b1:2a:75:
                    c9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:6F:8B:81:0B:D8:C2:71:DD:71:01:A7:CA:B8:82:D8:D1:FC:B9
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:9e:e8:57:40:08:f2:1d:77:df:8d:63:08:f8:d9:4b:55:
         fd:45:af:72:75:38:e2:07:83:a6:ba:ba:49:5e:a2:20:46:c4:
         d5:47:13:ce:c7:f2:57:36:a9:44:79:f0:36:18:7d:5b:fa:d0:
         a6:98:59:4a:f2:33:a1:cc:9e:d6:3c:af:3e:a1:50:f9:b0:87:
         11:82:ba:3b:ba:c5:03:dd:6d:d6:06:b1:57:29:96:e0:8e:4c:
         a2:cb:55:21:d8:d6:bf:37:01:07:19:bd:b6:2b:78:06:24:82:
         b4:94:9d:0d:f9:3a:06:1f:31:3b:50:49:fc:59:2a:df:88:b8:
         9f:9e:e4:fb:74:b4:71:60:12:38:8a:5c:d6:c5:91:25:5d:51:
         82:0b:6f:00:8b:82:12:41:78:f2:f1:30:01:b1:af:53:dc:c3:
         d6:7f:16:fb:6e:2a:20:c8:7e:0e:5e:04:8a:50:9d:0f:5f:8f:
         29:b8:8c:2d:f5:81:b2:b3:ce:d0:90:94:84:96:ab:8b:d4:96:
         db:1b:c0:8f:8e:3a:3a:18:16:a9:0b:69:f8:a3:af:c6:ef:0e:
         a6:e2:71:d7:c7:69:10:7d:bf:2d:0e:80:96:41:5c:8e:8f:d1:
         f3:4a:09:20:8a:de:3f:9e:cc:d0:16:93:7f:a3:e6:e5:e5:f5:
         93:02:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:15:13 2025 by rpki-client