Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          ObCun96cEOaPwLQlzv4WI/N81IOx+del2fnbXZSkBwc=
Subject key identifier:   A0:D4:CD:D0:EA:E6:73:C5:74:DC:58:FB:EF:6B:BF:8C:66:24:61:32
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       0197B77C87651BD08D328AA2D5034972D920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          13FE
Signing time:             Sat 28 Jun 2025 17:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:20 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: tqu+HtQxlwOCxaM8F7Ap2hEPOUdAPFOY7DeChq51Hlg=)
                          2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:87:65:1b:d0:8d:32:8a:a2:d5:03:49:72:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Jun 28 17:01:20 2025 GMT
            Not After : Jun 29 17:01:20 2025 GMT
        Subject: CN=a0d4cdd0eae673c574dc58fbef6bbf8c66246132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:26:41:0d:da:d1:d8:50:a0:92:70:00:4e:b7:
                    90:d9:3b:86:98:77:76:84:24:cc:50:69:f3:ff:1c:
                    21:ea:20:08:48:46:75:c9:0c:3e:1a:28:90:64:0c:
                    e7:c2:d9:59:2f:f1:1f:b0:1b:32:a5:eb:a1:71:99:
                    58:37:d9:4f:3d:26:4a:3e:91:d7:7e:ff:49:c2:57:
                    c6:30:56:f8:11:f2:5c:70:58:4b:66:93:78:bf:05:
                    7b:59:94:a4:9b:d3:8b:36:c8:a8:b1:46:27:3c:e2:
                    73:74:cd:7c:06:79:66:57:a4:65:72:56:74:d6:62:
                    b5:19:a2:04:f6:34:64:68:9b:61:08:ef:d2:26:ac:
                    df:79:33:ee:07:50:d1:40:4b:54:a3:9c:6d:e6:a4:
                    2a:6c:c9:b9:4d:f4:e0:1f:e7:0c:fa:ca:e0:ce:a6:
                    11:b0:5e:42:8b:fb:18:18:c8:4d:ac:26:bd:a2:b3:
                    68:43:80:32:5a:b8:4f:14:21:98:dc:f5:9f:7f:44:
                    d5:75:39:48:29:2e:ea:43:ff:6c:45:9d:48:41:e5:
                    98:6b:3f:73:9e:bc:dc:d9:81:20:3d:28:27:b1:bd:
                    a6:36:6e:15:c3:a0:d4:54:dd:04:d3:78:fe:59:a0:
                    cb:b8:2f:9d:e3:4a:95:ee:ee:8f:26:97:c0:75:dc:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D4:CD:D0:EA:E6:73:C5:74:DC:58:FB:EF:6B:BF:8C:66:24:61:32
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:1a:49:1b:d4:c7:78:e4:8d:97:79:84:23:ff:af:ee:14:
         2c:b3:19:25:68:c8:cd:20:25:e8:f6:af:42:01:b7:9a:38:15:
         15:e7:52:3e:ac:9a:22:e2:c8:2a:0d:81:5f:8f:a7:d4:86:5e:
         79:25:e2:46:97:01:0f:a3:73:9b:7b:4b:6d:5c:e1:52:f8:a3:
         2e:1a:2d:f1:7e:08:c1:b3:ce:87:89:58:38:7a:8f:38:9a:46:
         79:0c:17:32:9c:ac:aa:b8:ab:be:4b:f0:cd:fc:ac:23:5b:0f:
         ac:f6:4f:84:47:5f:cb:63:5a:67:3f:96:0d:b0:32:9c:08:93:
         3a:5e:bf:36:f3:a9:47:ff:3e:57:fa:6e:fd:45:90:a3:24:96:
         c1:56:fa:c7:04:6b:48:26:b2:7f:d5:00:e6:9c:e6:10:cf:22:
         ee:b3:7b:2f:e8:8e:3d:6e:1c:2e:3e:c9:6e:5d:da:b1:48:25:
         d5:5c:88:4e:0f:f8:fd:ae:0e:fd:74:4a:5b:d1:78:0f:92:9c:
         f0:c4:83:7a:45:34:51:d0:80:3a:b9:b0:24:ae:bd:43:e8:14:
         88:9a:1f:40:1a:b7:9a:58:b2:f4:28:1e:e0:bf:da:76:86:11:
         40:1c:fa:2d:d6:09:b6:11:bd:85:ab:2e:3d:16:9d:fc:90:d3:
         57:db:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:32 2025 by rpki-client