Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          IUXlBXwbSfKGSuTHnlYyJleU76JlyzbZrTb04uOU+Fw=
Subject key identifier:   D9:F8:CB:FB:48:AD:80:3C:1B:D7:F9:6A:3A:23:05:C7:A4:5D:A6:8E
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       0197C614A80B420136E9C3CD5E3B58C0F35A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          1605
Signing time:             Tue 01 Jul 2025 13:02:11 +0000
Manifest this update:     Tue 01 Jul 2025 13:02:11 +0000
Manifest next update:     Wed 02 Jul 2025 13:02:11 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: Q0guXoH1aAOUZMS0bT5IsvZDT1wwFTokqcvwdX2QfYY=)
                          2: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
                          3: Kcwvf_LAYIgCUsjZTWJ5jUAjHvs.roa (hash: DBuOCdcgOfeSRZCdhr9N5T6hmZRIvpkgOJLbi6ZyJsY=)
                          4: pKD8koif6pxD_upkcG702cWUH-s.roa (hash: LTn4m+Bc5kikqhdLQAuLMwNxnCZXA2794+iqmrbNiXM=)
                          5: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
                          6: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:a8:0b:42:01:36:e9:c3:cd:5e:3b:58:c0:f3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Jul  1 13:02:11 2025 GMT
            Not After : Jul  2 13:02:11 2025 GMT
        Subject: CN=d9f8cbfb48ad803c1bd7f96a3a2305c7a45da68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:5d:c4:8f:a8:a5:eb:54:85:3b:7e:ba:cc:
                    e6:13:d0:63:94:27:ed:b2:18:20:23:19:4a:e8:0c:
                    5c:4c:af:40:71:b6:ee:e7:04:1f:de:ab:52:0b:3d:
                    9c:a1:ec:69:51:d4:4b:20:b9:36:43:0f:ab:a0:67:
                    7e:f0:a2:33:e5:60:cb:10:82:64:54:da:ec:ad:44:
                    5d:67:3d:5d:84:c5:3a:cc:2e:50:49:f7:ff:3a:10:
                    c9:ed:13:17:01:7b:61:8e:f4:cf:cf:70:bd:f1:7f:
                    b7:b9:e1:a4:43:16:be:47:be:b0:b4:4d:31:04:7e:
                    1f:e2:35:82:dc:e7:05:70:08:bb:d2:76:ec:e0:e9:
                    45:c7:03:cd:26:ef:59:39:3e:46:38:6d:21:97:1b:
                    cc:fb:0c:14:d8:de:57:7f:fc:d2:c6:00:5e:33:bc:
                    bc:41:d4:32:19:36:a4:a8:f6:9f:85:80:a3:43:7b:
                    5a:cd:92:3c:48:cf:ce:eb:cb:61:de:ea:dc:69:f1:
                    ef:6c:90:2d:9d:f7:be:94:11:96:a1:b1:54:90:44:
                    63:f9:dc:e0:bd:92:75:8c:19:e9:dd:9d:8b:af:38:
                    4b:77:c4:2e:de:fe:3b:b6:ec:b6:e2:9c:a3:0f:83:
                    5e:4a:64:09:bf:82:31:29:de:c9:ab:aa:b5:30:1d:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F8:CB:FB:48:AD:80:3C:1B:D7:F9:6A:3A:23:05:C7:A4:5D:A6:8E
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:04:56:a1:42:40:0c:c1:6b:0d:84:eb:ac:6f:54:8d:c8:ba:
         59:3e:33:dd:f6:0d:50:64:20:3e:27:31:22:46:9a:65:e7:ed:
         4c:2f:f2:13:b1:d1:41:f4:92:7a:65:a4:cb:db:44:3e:f3:d0:
         6b:68:7c:d5:d5:83:63:d5:da:92:0a:84:2c:05:6b:26:03:50:
         1e:19:cd:1b:f3:f8:f9:3b:ac:72:33:d9:20:81:4a:56:95:34:
         22:f2:05:cf:f3:f3:4c:b5:d5:f8:06:ff:8c:2a:4a:e2:3f:d7:
         99:a3:a3:26:5e:12:d8:da:13:cb:4e:45:85:b1:59:bb:c6:4c:
         73:79:84:bb:7e:12:7a:24:48:5d:ed:05:14:fc:22:f2:95:84:
         93:e9:c0:94:6f:57:46:ea:b4:08:af:61:e7:0c:3c:03:69:a9:
         27:32:b6:f8:c6:31:2a:c8:06:11:cc:d2:4b:45:d4:11:14:90:
         e0:2d:53:b1:1f:f6:72:0d:94:ea:d1:22:bc:b4:1d:2c:a3:37:
         56:73:1e:c2:7d:90:85:21:24:f5:87:2e:ce:c0:90:ef:d1:b2:
         0e:d2:86:1f:27:c5:95:73:2a:95:f2:d1:6f:17:48:69:ea:38:
         1b:1d:54:9b:d3:22:bb:7e:0d:54:f2:17:39:90:80:30:a4:16:
         80:b2:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:21:45 2025 by rpki-client