Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File:                     f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier:          P/91oU48RkpJcpUa/ayoI4JmPcWamNm0YdUTfylV+c8=
Subject key identifier:   E2:35:04:89:7C:D5:19:95:65:A8:A1:56:79:59:89:C7:2D:47:EE:FF
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer:       /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial:       0196C4CC016AA3EA76B9A367928A8D78D5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number:          0B17
Signing time:             Mon 12 May 2025 14:00:26 +0000
Manifest this update:     Mon 12 May 2025 14:00:26 +0000
Manifest next update:     Tue 13 May 2025 14:00:26 +0000
Files and hashes:         1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: z7lOYPFD57ay0RsUoy6AzqVwSpFxNZjcsNWp3gkr6i4=)
                          2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:cc:01:6a:a3:ea:76:b9:a3:67:92:8a:8d:78:d5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
        Validity
            Not Before: May 12 14:00:26 2025 GMT
            Not After : May 13 14:00:26 2025 GMT
        Subject: CN=e23504897cd5199565a8a156795989c72d47eeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:e4:e9:0d:70:d3:36:c8:08:40:32:6f:2b:
                    76:f1:46:db:96:54:5c:40:c8:27:d7:9d:ae:c1:c4:
                    bc:f8:fb:10:e8:1f:47:29:b0:ed:51:c1:1b:53:86:
                    a5:06:a6:df:ef:83:1b:72:be:fd:79:5d:db:eb:73:
                    08:ea:65:b0:2f:e2:77:e2:2e:06:6e:15:f9:e0:8e:
                    e7:12:cc:42:02:8b:ca:02:eb:51:d5:5f:63:3c:62:
                    07:a1:bf:5c:21:a2:2c:92:e9:1f:7e:2d:a2:78:1a:
                    01:94:5f:ff:dd:17:01:21:e3:50:8f:57:99:86:76:
                    b6:2a:13:7f:6b:c8:2e:7c:13:42:8b:00:27:a9:d3:
                    27:52:ef:97:52:14:25:0e:26:14:16:92:4c:33:37:
                    ba:ed:01:58:dc:0b:ce:0a:f7:e7:40:98:da:55:81:
                    fc:ed:ec:a3:47:53:ba:14:f3:a3:8b:89:16:64:85:
                    f9:b8:ab:b3:54:0e:2e:53:fa:47:ed:dd:71:7d:94:
                    f9:59:7e:58:39:0b:36:ff:20:7e:56:ba:15:ea:9b:
                    43:66:8d:9b:b8:9b:df:27:54:60:8c:9e:05:9e:12:
                    51:a0:e1:15:d7:7d:43:70:c9:e1:61:e6:3a:14:f7:
                    56:98:db:3c:1b:49:a5:32:78:1e:bd:7d:0a:c3:92:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:35:04:89:7C:D5:19:95:65:A8:A1:56:79:59:89:C7:2D:47:EE:FF
            X509v3 Authority Key Identifier:
                keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:10:47:3f:64:2b:ef:8b:38:6a:54:fe:8c:59:7d:85:7f:af:
         a3:03:29:df:25:c0:e1:ff:2d:97:8c:50:cf:9c:5b:00:f3:1c:
         43:af:95:2e:a2:30:e2:aa:dc:5c:06:ac:0b:d8:f5:29:47:a9:
         48:2f:01:d3:a8:61:0d:8f:4f:c9:ac:94:70:11:42:ee:93:c6:
         97:e3:33:8d:08:1d:4a:a6:3f:f7:5b:f0:8f:b5:5a:dc:99:e0:
         07:37:c9:07:2a:50:d6:67:d5:8c:d1:16:73:22:19:bd:9b:8f:
         bd:ca:2e:b2:14:1a:01:26:11:c3:5b:ca:0f:29:72:59:7c:db:
         06:a2:75:f6:25:bf:a9:6e:73:31:e3:99:37:73:e7:cf:00:9d:
         5b:dc:d1:73:ec:d9:0a:78:f3:12:13:33:57:05:38:7c:71:35:
         5b:85:bb:b0:70:ba:86:de:20:79:c7:40:f5:a4:68:f0:91:45:
         dc:f0:61:f2:6b:05:a3:a2:d7:16:e1:e8:d7:52:d8:84:a8:55:
         26:ae:b0:ba:2b:9e:8b:0d:2f:11:97:6d:a2:df:fa:9b:67:a9:
         3c:bf:37:77:09:be:b3:db:e9:d2:68:32:88:71:57:47:15:7b:
         67:23:f6:df:92:26:8c:f2:fa:40:9e:64:8e:b0:2e:4c:a6:b7:
         a0:b9:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:56:07 2025 by rpki-client