Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          tmUU3tfxKUpdEnrSfqxHWCmk0bGwnCOGdfKh7SeVc80=
Subject key identifier:   23:33:EA:57:FF:E2:E3:8D:1D:FE:F8:18:04:A5:9E:65:F1:54:2B:A9
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       0196A2AE21A588ABE1A0B552B527D50F4AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          02E6
Signing time:             Mon 05 May 2025 23:00:42 +0000
Manifest this update:     Mon 05 May 2025 23:00:42 +0000
Manifest next update:     Tue 06 May 2025 23:00:42 +0000
Files and hashes:         1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
                          2: BT6TVJmI3RprSa-N0sWISs5634A.roa (hash: bIKRemDFFxTxUiCAL/8Hu++HBhZMoHacaRHBstTjw7w=)
                          3: D4PPtKoYzm6TEOaEItnlpLXHHvM.roa (hash: lDsciGTqjNOV2/WKbPe1B6UAqKR1IlIJEKOSyRbTxtQ=)
                          4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: OfwMmbHzthH52Pqkmw2pIipsXYlCKvpSydkccVO9ffI=)
                          5: Z95M0xYaqG88vxFWVTNeS9sdPBs.roa (hash: OIWDRjggzYvatxQH+hE1CGU7lQDN+TA7u/ptNiOY8dQ=)
                          6: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
                          7: qIt3yAvdRDhdEOuAq_oHtp0daD0.roa (hash: eeo1JYN4250oNykA6vfnL0vc003Ck3pcB2dM4s9ij4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:ae:21:a5:88:ab:e1:a0:b5:52:b5:27:d5:0f:4a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: May  5 23:00:42 2025 GMT
            Not After : May  6 23:00:42 2025 GMT
        Subject: CN=2333ea57ffe2e38d1dfef81804a59e65f1542ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:de:65:66:88:0f:31:ba:17:79:c0:fe:04:
                    20:07:94:2b:69:ca:f9:14:e0:db:13:01:82:d7:2b:
                    90:60:83:9e:77:14:59:0e:2c:ee:ae:18:67:cd:c2:
                    84:52:13:f9:bf:ce:93:f0:94:9a:41:96:0e:c6:e6:
                    79:71:d2:0f:0f:f2:4d:f2:1d:b8:fc:d2:2a:07:bb:
                    04:b2:0c:53:82:30:0a:bc:46:9b:76:fc:89:d9:f0:
                    3c:c6:80:55:37:8b:b6:da:b4:a1:a4:f5:d4:f8:10:
                    6e:a1:a4:c7:6d:8e:58:45:4c:b4:c0:ba:09:5a:2d:
                    9a:c3:77:26:31:dd:dc:50:65:32:ce:4f:29:ad:ae:
                    a8:2c:68:21:fe:51:56:b4:06:97:c4:1a:1c:c6:75:
                    38:fa:f1:f0:1e:bc:5e:9d:bc:d4:10:e9:08:fe:89:
                    f9:38:89:1a:41:ad:bc:80:9a:b7:99:9c:92:bc:83:
                    f9:2a:57:35:72:11:ef:41:38:3a:0b:61:6a:e5:95:
                    44:5a:05:23:09:c3:3d:b4:41:cd:d7:1a:09:b6:0b:
                    d6:49:86:74:f1:e5:b9:8b:8c:a1:4d:25:1b:f7:2d:
                    ef:9a:5d:4d:04:3f:fa:8d:23:78:01:65:a2:35:cc:
                    c4:41:e3:a8:db:93:67:be:c7:55:0e:a1:26:47:a5:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:EA:57:FF:E2:E3:8D:1D:FE:F8:18:04:A5:9E:65:F1:54:2B:A9
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:86:7b:f2:45:9e:0c:95:44:8f:27:21:dd:1f:27:6a:b3:df:
         4b:af:a3:b4:77:3d:6b:ae:c6:94:bc:2a:5c:a7:d6:cd:e7:01:
         48:2d:bf:97:28:56:d0:4c:c9:41:4e:ad:45:40:69:8b:62:c3:
         5f:87:ac:0d:1c:d2:a1:f6:c5:96:71:e6:56:91:2f:c7:02:2f:
         3e:41:61:41:1b:dd:ab:61:1f:c6:29:07:38:d2:04:e9:eb:1e:
         8b:23:c7:4a:6e:ad:96:43:ca:5d:9c:37:0b:9b:b8:0c:a6:9e:
         45:af:12:ce:ff:20:7f:4a:75:63:b9:8c:cf:50:6f:d2:7f:80:
         cd:28:7e:cc:76:1b:9d:ee:9d:25:cc:30:d8:56:46:ed:3d:fe:
         b2:d4:a5:f5:c3:60:c8:eb:fa:39:f3:44:a7:a4:c2:4b:89:ab:
         23:84:eb:83:2c:cc:03:2d:82:53:a2:75:e3:78:0f:95:cc:78:
         30:94:6d:de:da:f8:2f:63:da:4e:a4:df:85:9b:4a:34:75:a8:
         89:82:78:5f:f0:a4:2c:17:b7:ae:e1:3c:97:de:ef:fd:8d:fe:
         1c:b0:5d:a9:86:26:33:fa:a5:89:41:0a:2e:81:73:c5:ce:cc:
         42:17:5b:30:46:41:ab:eb:8a:3b:5b:3b:f2:01:41:5f:03:5f:
         d3:30:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:22:18 2025 by rpki-client