Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
File:                     R1oGyte9DD25-KOB8euc1sdaqyg.mft (raw, json)
Hash identifier:          35e7m7rhs6dOtmkDkKxbgxV6Aeo8H2JIPhTSPGtKOoI=
Subject key identifier:   86:39:29:58:8C:E1:7E:4E:FE:46:CD:73:F2:DA:8A:05:C5:A4:2F:E0
Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Certificate issuer:       /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Certificate serial:       0196A9F9BF28FD4C0DAC298A0A6655920CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
Manifest number:          E5
Signing time:             Wed 07 May 2025 09:00:38 +0000
Manifest this update:     Wed 07 May 2025 09:00:38 +0000
Manifest next update:     Thu 08 May 2025 09:00:38 +0000
Files and hashes:         1: P26izWnWykundEbYZ5JEBhpU0uU.roa (hash: cWV+pN/zcAshvYcQxK5v+o4IGsyjFJQg91I3ipirKBI=)
                          2: R1oGyte9DD25-KOB8euc1sdaqyg.crl (hash: glWSVgbIG/PIIihXoLhQ1Fv4aJwryp23S3Avo6icWiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:bf:28:fd:4c:0d:ac:29:8a:0a:66:55:92:0c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
        Validity
            Not Before: May  7 09:00:38 2025 GMT
            Not After : May  8 09:00:38 2025 GMT
        Subject: CN=863929588ce17e4efe46cd73f2da8a05c5a42fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:bd:4e:9a:46:79:59:01:2b:ac:d8:08:4f:
                    7b:ee:48:ee:68:bd:dc:a5:11:68:be:07:c0:8b:1c:
                    f9:d6:b5:74:d5:0f:58:a3:55:a4:ce:31:a1:dc:71:
                    56:58:1f:5f:47:5b:35:c4:0b:0f:e5:44:1f:37:76:
                    1b:25:ce:c4:7a:1a:dd:33:38:ce:45:a7:54:61:f0:
                    94:41:7f:ed:73:77:59:77:d0:03:42:cf:2f:79:b5:
                    74:54:87:89:f1:aa:66:12:bb:b3:89:92:8e:56:04:
                    b2:dd:29:61:5e:07:69:26:c2:16:ca:9d:87:ed:ad:
                    19:6b:52:4b:c5:28:d2:3f:56:25:bd:d7:18:52:f2:
                    b9:62:1a:63:81:7e:1a:de:45:c0:fa:58:18:c0:e7:
                    92:91:ec:73:35:e4:cd:32:91:53:d5:1d:c2:0e:2c:
                    de:c1:bc:53:cd:5e:a0:1f:f3:4c:bf:31:35:03:81:
                    a0:72:1e:e9:ac:2d:66:15:42:5b:44:c3:ae:f9:38:
                    83:60:66:83:d4:6a:ba:cc:01:26:25:93:f2:59:af:
                    cf:c4:6f:8a:a4:15:6c:3c:7d:10:ad:8f:ed:16:db:
                    59:4d:07:73:25:be:00:56:2d:bf:05:32:87:dd:30:
                    5e:b4:b2:45:10:19:83:59:ab:44:8a:c3:fd:6b:18:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:39:29:58:8C:E1:7E:4E:FE:46:CD:73:F2:DA:8A:05:C5:A4:2F:E0
            X509v3 Authority Key Identifier:
                keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:01:73:ca:e0:4a:00:7a:98:28:33:ea:df:49:5e:83:62:36:
         62:a9:eb:40:90:4b:09:1e:43:2f:88:24:6c:89:4f:f7:26:3f:
         4f:70:63:65:36:81:4a:86:55:85:2e:b4:24:72:1c:c8:8c:d0:
         5c:ef:e5:89:ff:a4:f0:d7:df:1f:92:16:24:db:ec:0c:7a:0f:
         e6:34:a6:b9:38:a0:33:bc:71:f9:a5:28:d0:40:26:f8:d1:e6:
         61:b8:d8:04:38:e3:37:98:17:9d:d7:42:e5:18:25:42:7c:97:
         9f:ef:05:03:f8:78:31:d6:b8:06:3e:85:41:80:a5:71:94:fe:
         fd:04:c7:83:01:1c:20:24:a2:59:29:53:d1:2a:bb:58:f7:44:
         fb:0a:85:e0:92:c7:69:37:1c:43:15:dc:ce:34:a3:c3:f9:6a:
         1b:d8:84:83:68:51:84:7b:08:0d:e3:40:f1:2b:3e:00:a5:4b:
         83:47:6d:08:ae:6f:77:16:36:f3:12:ac:d9:69:74:b8:f0:d6:
         d7:66:1f:44:e4:40:c4:56:3d:21:94:e5:a3:28:e0:bd:ac:43:
         cc:ba:e9:b2:87:90:a3:2b:69:b7:94:95:32:40:0e:af:63:25:
         b3:08:f3:80:0e:a7:d5:e1:9f:0d:a5:b0:0e:03:70:3e:f9:bf:
         22:e9:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:45:03 2025 by rpki-client