Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File:                     9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier:          VD3Kq76wx3jpnRZRuRwGY2JjGYp/fDQ6XrORuN12iqk=
Subject key identifier:   5B:AF:A3:40:BE:0C:8A:13:87:31:21:A6:E8:44:EB:70:62:42:DC:B4
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer:       /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial:       01969DF5F3E3D1C824C70129954C437A5726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number:          0245
Signing time:             Mon 05 May 2025 01:01:03 +0000
Manifest this update:     Mon 05 May 2025 01:01:03 +0000
Manifest next update:     Tue 06 May 2025 01:01:03 +0000
Files and hashes:         1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: IeceX3Y88P/LIBU2+E+KnD3+6odeO3zVar+6VLTYsU0=)
                          2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:f3:e3:d1:c8:24:c7:01:29:95:4c:43:7a:57:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
        Validity
            Not Before: May  5 01:01:03 2025 GMT
            Not After : May  6 01:01:03 2025 GMT
        Subject: CN=5bafa340be0c8a13873121a6e844eb706242dcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:a0:2a:89:a3:0c:fa:39:af:9e:e4:8f:63:
                    20:cd:e9:a6:4c:33:d4:f1:27:f2:16:d9:a8:92:b2:
                    a6:e9:0a:e2:f1:da:c3:ad:30:e4:7f:ee:3e:62:b5:
                    79:89:8b:9d:52:b0:3f:bb:86:76:a2:21:cd:93:08:
                    4c:6a:44:bf:4e:ee:22:c8:f0:1f:9f:09:31:e8:96:
                    9f:d0:86:4b:ed:79:87:b4:f7:9f:fe:24:05:08:f9:
                    b0:cd:19:03:73:16:69:ce:ed:3b:c2:d9:20:99:51:
                    5c:3a:de:be:1d:15:5f:2a:5b:1f:46:ac:5b:b6:cb:
                    ab:f0:54:dc:2d:c6:df:8e:69:b9:a8:7c:9a:1d:fe:
                    0a:70:99:fd:b1:26:fe:e0:bc:65:61:dd:1e:a3:0a:
                    50:ef:89:53:c0:4f:99:8c:dc:cf:ab:8e:12:b9:88:
                    51:41:0e:6a:2a:78:22:d1:b6:5b:d8:c9:4e:d5:89:
                    1b:13:5d:74:02:cf:98:10:98:00:db:a4:35:8b:54:
                    52:a6:5d:a2:95:31:8b:8e:1a:e8:4d:4e:15:7f:b9:
                    ce:8d:74:6f:5e:c1:df:91:83:9d:62:05:8b:50:76:
                    90:cc:57:2e:e8:a9:02:b6:76:2c:8d:da:b4:68:0b:
                    c0:bd:97:a1:0d:93:f4:13:33:7d:f4:39:a7:b2:02:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:A3:40:BE:0C:8A:13:87:31:21:A6:E8:44:EB:70:62:42:DC:B4
            X509v3 Authority Key Identifier:
                keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:d8:af:bf:e3:3f:ae:a2:5c:25:83:f2:c2:88:7a:c6:e0:
         c3:53:6b:9b:62:1f:cd:f4:ba:55:98:c1:1a:91:82:b1:32:1c:
         99:76:27:4c:cd:02:00:5d:8a:67:ec:0c:eb:61:c1:34:33:43:
         ad:fb:a3:40:b1:8b:30:a2:38:ba:19:39:05:11:17:b7:68:a0:
         1c:45:98:e7:9b:ae:74:da:40:7d:81:84:ab:66:2b:7b:13:ae:
         7b:1e:e5:b2:e7:90:e4:cb:f2:47:95:df:68:20:34:ea:0f:9d:
         98:42:9d:67:16:7c:ea:99:e9:59:42:90:75:d0:e4:55:41:9b:
         75:3f:e6:14:43:8c:e2:42:c3:c8:a1:4a:a7:b2:be:cd:b8:2f:
         70:27:24:d2:f8:2c:71:b4:4f:af:4f:63:fc:82:83:f6:76:da:
         fb:bc:3b:d0:31:1e:2e:3c:3a:c4:d9:c2:ce:4b:27:12:d9:2a:
         ed:f2:66:c1:2e:b8:b3:e2:bd:82:0c:91:40:1b:9e:5c:b5:68:
         04:83:31:ef:62:88:ea:57:59:fe:11:c2:7c:b0:fc:12:e7:89:
         e0:3a:1c:b7:c4:ab:ef:dd:4f:c3:09:c2:b1:48:f1:e3:dd:04:
         b2:b9:a6:19:6f:3d:06:61:0e:a3:b8:43:72:4a:38:9b:d4:44:
         76:73:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:21:39 2025 by rpki-client