Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
File:                     J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft (raw, json)
Hash identifier:          0NMa0TENlxULyjyiLShw5Lj/cgcObCMvrDU6WP2Ihh0=
Subject key identifier:   96:97:D6:9C:DE:E9:84:04:72:48:9D:48:26:9D:C3:4F:85:8E:4C:DA
Authority key identifier: 27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7
Certificate issuer:       /CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
Certificate serial:       0197D5BD54856526222427F01E4CC1E4EAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
Manifest number:          058C
Signing time:             Fri 04 Jul 2025 14:00:44 +0000
Manifest this update:     Fri 04 Jul 2025 14:00:44 +0000
Manifest next update:     Sat 05 Jul 2025 14:00:44 +0000
Files and hashes:         1: J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl (hash: h5XLJ6aTcDCNY3XTYSZ65AwbvdeLShHTb+ZQdEZTslo=)
                          2: Vsa4sl4yJDWQIOfAQ8k-eZtGrFY.roa (hash: l1VkZleep792Mt0zLZ+URhm6tjPzPXmqqOx4wTL3WgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d5:bd:54:85:65:26:22:24:27:f0:1e:4c:c1:e4:ea:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2791a7b8ee8440522b0b5530c85dce1d73f967b7
        Validity
            Not Before: Jul  4 14:00:44 2025 GMT
            Not After : Jul  5 14:00:44 2025 GMT
        Subject: CN=9697d69cdee9840472489d48269dc34f858e4cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:66:a1:8c:c8:89:3c:c0:7f:a3:46:97:3d:
                    3b:ab:4d:4d:5e:7b:37:1f:f0:e6:d9:9a:28:0f:c3:
                    e6:6a:c3:89:d9:48:56:ea:74:bb:e3:e7:51:49:55:
                    a6:53:f7:a4:a1:3d:3f:c9:b9:42:55:23:ef:07:d8:
                    23:df:29:ef:bf:24:56:60:8d:8f:68:48:b5:fb:06:
                    22:d8:bb:0f:24:da:2d:b5:ea:5a:1d:58:af:66:54:
                    ca:88:56:39:24:78:d8:73:64:6f:2d:fd:03:9f:2e:
                    a9:c5:35:41:43:66:99:e0:47:51:7b:7b:fd:7c:10:
                    91:2e:69:b6:50:b1:3d:57:c4:90:24:a2:bd:a8:47:
                    e8:ca:b6:60:68:9e:25:88:15:69:79:cd:4f:53:08:
                    58:2f:29:21:bb:55:cf:36:2f:2b:7f:93:8e:cf:76:
                    0f:ca:e9:1c:13:9a:62:d8:cd:0a:64:e0:31:1d:26:
                    49:dc:1e:01:32:0c:5d:9c:e3:bf:d5:34:c0:c9:12:
                    4a:7a:eb:1b:18:1b:98:1c:56:26:d5:f7:cb:61:3d:
                    53:df:55:54:d3:3c:25:a1:b9:62:f9:79:01:ed:d2:
                    2f:6e:63:fd:72:5d:9f:fc:58:ce:ea:63:e1:31:4d:
                    9e:37:de:f5:7d:f4:8e:79:02:bb:99:6c:9b:97:aa:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:97:D6:9C:DE:E9:84:04:72:48:9D:48:26:9D:C3:4F:85:8E:4C:DA
            X509v3 Authority Key Identifier:
                keyid:27:91:A7:B8:EE:84:40:52:2B:0B:55:30:C8:5D:CE:1D:73:F9:67:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/13b4bc-197e-40a6-b845-9ecd8cc50a88/1/J5GnuO6EQFIrC1UwyF3OHXP5Z7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:7a:78:e4:d1:f4:0f:0d:9c:57:ad:9d:78:3e:73:67:40:
         33:47:0a:c1:6d:8f:6c:62:d7:68:a8:00:5f:7f:a7:87:32:f0:
         88:1b:c9:79:18:00:61:78:c6:73:86:89:10:07:8b:12:fc:30:
         55:02:f4:64:0f:fd:6e:7f:aa:ef:01:7b:a6:91:ea:ab:e4:5a:
         0b:5d:8c:b5:ce:0d:23:57:2b:2c:ee:16:99:b3:c7:a7:31:1f:
         81:9e:23:8d:8e:7e:c2:8f:7e:db:4c:30:d6:49:f8:ed:7c:4d:
         38:30:9b:db:9c:b9:37:e5:42:fc:bc:a7:9a:7c:9c:e6:a9:e1:
         dd:d9:1a:fa:19:db:de:9d:98:2a:2b:ca:b2:ea:7c:e8:ff:d7:
         45:16:2d:cc:c6:4e:ef:3e:be:c9:8d:cb:8d:bb:5c:c5:75:18:
         ad:ee:c4:36:5d:57:72:57:f1:ff:54:b2:2c:eb:a9:73:e4:31:
         10:01:e5:ba:85:0b:c7:bd:48:bd:f5:01:c8:b8:ab:0f:37:a0:
         5e:04:ad:51:c1:8d:5d:53:e8:ca:ec:ad:ef:4c:fa:e5:f7:0d:
         30:41:d4:cf:a7:11:25:cb:c3:d8:a9:52:02:cf:21:38:8a:64:
         57:3b:36:36:25:42:46:48:b4:63:6e:07:25:58:30:c4:57:67:
         b7:54:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:07:11 2025 by rpki-client