Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
File:                     5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft (raw, json)
Hash identifier:          a47qCU4CmRiiA+gJqS2tem8xLH9XIOBauJywa1YHFdQ=
Subject key identifier:   D3:9A:0B:A3:C5:19:88:51:32:4D:AD:85:B8:98:E3:41:AD:60:22:FC
Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5
Certificate issuer:       /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
Certificate serial:       0196B6A31B130CD25DED04ABCCD202159F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
Manifest number:          1531
Signing time:             Fri 09 May 2025 20:01:04 +0000
Manifest this update:     Fri 09 May 2025 20:01:04 +0000
Manifest next update:     Sat 10 May 2025 20:01:04 +0000
Files and hashes:         1: 5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl (hash: axnfTZcMIrDWnlQQqCsvd8CpC62qW6pBJAx73GMkDxk=)
                          2: VGd9KjMwAgOKsTmpV-66ONuVSdc.roa (hash: DDJ2sEHFTQOmIwDAMdVrMbf0vg81gKq/jz/yH3diG9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:a3:1b:13:0c:d2:5d:ed:04:ab:cc:d2:02:15:9f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5
        Validity
            Not Before: May  9 20:01:04 2025 GMT
            Not After : May 10 20:01:04 2025 GMT
        Subject: CN=d39a0ba3c5198851324dad85b898e341ad6022fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:98:61:ce:45:a4:95:78:51:1e:3c:ea:31:
                    24:d0:6a:d2:62:1b:c7:b9:5c:5b:5b:ab:11:d3:04:
                    2d:46:df:2d:53:70:6b:56:d3:9e:f1:07:cb:e1:2e:
                    fd:a8:b6:8c:96:85:0b:59:c9:64:e6:ed:9e:fc:f5:
                    2d:33:8b:b7:43:f7:45:a1:08:0d:a3:ac:dd:45:1a:
                    8e:e6:4e:89:8a:45:ff:de:4c:fe:8b:06:d2:f7:e7:
                    21:9c:0a:74:6a:62:49:4b:fc:e0:69:f3:00:81:4b:
                    cd:bc:27:ab:dc:3c:b9:06:8f:dc:37:3d:60:e9:50:
                    7f:cb:36:bf:60:92:7e:e5:27:3b:a5:22:96:b1:01:
                    93:70:f6:91:15:1d:5b:6b:ac:0c:61:48:f8:fc:a6:
                    9f:7c:cc:f5:86:2a:a8:98:96:3b:f0:df:8f:97:01:
                    b0:0d:d1:fb:1b:58:05:d1:38:5f:8a:37:8c:c8:99:
                    94:ac:51:8b:8f:d7:cb:b1:23:08:17:49:03:49:df:
                    e1:0a:53:cd:80:33:9d:e5:c8:97:28:67:6e:f1:6a:
                    91:5b:48:24:e9:df:9a:80:09:66:3c:f3:7c:2d:b6:
                    0f:2e:09:ab:e4:fb:a7:0b:76:86:18:01:51:c9:2e:
                    ce:11:16:e9:bb:54:90:a7:b1:b8:64:61:15:bb:12:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9A:0B:A3:C5:19:88:51:32:4D:AD:85:B8:98:E3:41:AD:60:22:FC
            X509v3 Authority Key Identifier:
                keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:04:99:92:90:3e:16:58:3c:13:00:d1:39:2d:d5:cc:ab:81:
         32:05:0d:54:77:59:ba:8d:73:d1:d3:c4:c9:19:9a:3a:83:e7:
         d3:cb:3c:a4:55:8a:49:af:da:c8:51:12:7a:f2:65:15:70:00:
         91:32:91:bc:3e:f9:e4:9c:76:3c:1a:7d:75:b0:4d:80:e4:ab:
         a2:58:72:b7:36:aa:68:31:38:3c:80:1d:12:5a:c0:de:31:05:
         6f:78:3c:ca:47:c4:2d:64:8a:b3:95:61:cc:b9:c6:0b:59:ee:
         54:14:84:b6:3c:ed:4b:de:71:38:f1:85:cc:aa:19:aa:9e:42:
         11:0c:54:a4:79:73:ae:e4:d5:1a:e9:46:3c:0b:14:70:53:79:
         2f:0f:53:78:ab:a1:1b:52:e4:13:a0:73:59:df:d5:dc:b3:34:
         01:07:bb:3f:2c:e8:d8:7d:63:63:bb:a5:1f:cc:ba:6b:c2:08:
         c3:37:ed:22:d4:29:52:32:64:b9:6a:7c:bf:52:b1:d4:06:10:
         65:85:69:94:de:dd:be:72:73:83:55:e6:f8:06:bc:20:72:6d:
         60:67:dc:c1:71:20:bb:07:a5:67:c4:b2:67:b1:2d:62:d5:7a:
         55:e3:ef:29:db:c8:a9:50:63:7a:98:e4:e3:85:57:78:69:29:
         f9:ee:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:09:45 2025 by rpki-client