Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          RlFLxaL9vw5uMck7pGnOgOLqo08eIGtwjJOmOXkgXKo=
Subject key identifier:   47:46:59:CB:A0:8B:AB:E6:1E:3D:01:6A:37:C1:72:AA:C1:C3:C6:ED
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       0197B6A1BEBA640A3612E960C671B2C5FEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:02:22 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:22 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:22 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: tmHuDHJtYRZ9L7cygTXp84+c77pjiF8F3UQigXkTqg4=)
                          2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:be:ba:64:0a:36:12:e9:60:c6:71:b2:c5:fe:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Jun 28 13:02:22 2025 GMT
            Not After : Jun 29 13:02:22 2025 GMT
        Subject: CN=474659cba08babe61e3d016a37c172aac1c3c6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:83:1d:f5:40:c0:2a:2e:c1:4b:4d:17:27:
                    7b:43:cb:eb:00:49:9e:95:17:f7:31:c3:9d:b4:21:
                    a0:fa:57:1a:f6:d8:5d:79:e4:66:19:2b:f5:c1:8b:
                    af:74:4c:f4:13:3f:65:70:ab:66:8d:16:9e:68:8c:
                    a2:20:9d:a3:a7:f8:ac:91:96:58:72:cb:ba:7f:b4:
                    e0:8c:85:de:f6:61:42:25:03:6c:5f:92:9e:6a:e7:
                    05:a7:79:f3:07:c4:a1:27:da:93:39:bd:e1:16:57:
                    43:79:27:54:db:1a:22:04:0c:ce:7f:98:c3:27:e4:
                    a3:54:e4:b6:a7:a6:c8:d9:f4:a7:c1:ae:70:9f:8d:
                    53:84:59:a8:a9:29:6a:f6:74:2b:a8:22:8a:7d:53:
                    60:43:49:26:59:61:ed:a3:20:09:77:e0:a3:19:fb:
                    c9:97:4d:07:36:e5:4d:42:df:88:54:31:f2:18:7f:
                    a5:c7:0a:9e:4e:99:91:b1:12:c2:d9:5c:d0:95:7d:
                    a5:eb:76:1b:01:ed:70:de:ab:f5:1e:cb:30:dc:1a:
                    55:03:ac:69:dc:fd:49:20:af:9d:1a:6b:2a:1f:a3:
                    0d:b8:74:3f:81:6c:5e:9d:d4:9c:16:f0:94:15:30:
                    e2:18:06:38:ac:ad:26:18:46:8c:c1:93:b6:be:9c:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:46:59:CB:A0:8B:AB:E6:1E:3D:01:6A:37:C1:72:AA:C1:C3:C6:ED
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:4e:8a:28:d8:59:e6:c8:1a:91:fa:85:23:f4:19:eb:30:
         06:25:c2:30:76:3c:23:b7:e1:81:f6:7b:1a:f5:aa:a8:dd:f2:
         59:79:41:1e:b7:8e:75:36:a3:47:d5:76:9e:39:31:e2:5a:cc:
         d0:b7:6e:b6:1f:72:2e:c8:74:f8:44:f3:97:f7:42:68:fd:c1:
         82:76:83:1f:30:73:c9:9c:ef:28:eb:80:70:0c:b8:86:d5:7f:
         e7:ba:b1:14:38:dd:36:e8:b9:4f:a4:c8:24:95:cb:77:13:10:
         a4:df:12:69:d2:34:a3:00:f9:4d:ea:b4:15:4c:e7:1a:02:f6:
         dc:dd:7e:f4:41:c2:77:b9:3e:87:3e:7e:50:10:a4:1a:92:0b:
         87:db:80:d3:2f:44:cd:d4:d7:be:cf:25:b8:d2:48:0c:42:13:
         0c:cd:aa:16:42:44:4e:29:f4:63:cf:49:ff:37:8a:7d:9a:bd:
         22:7c:cf:6f:83:27:99:43:52:44:f2:15:14:ce:a1:e2:e4:e5:
         7b:69:1a:60:f3:0e:63:ee:5e:77:78:02:19:79:36:8c:91:01:
         03:b8:e4:3a:04:6f:5e:aa:75:ff:55:6e:c3:4b:ce:6c:96:2b:
         38:a7:b8:12:fc:fd:7c:de:9e:66:28:d2:99:75:3c:e7:0f:a7:
         fe:06:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client