Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          j/PCRqTUl1S6DwflzGYWkfmf6kRV2bGuI0Td2e45h84=
Subject key identifier:   DE:CE:49:47:25:9A:59:B3:66:32:88:A4:A4:2A:41:39:D7:69:D3:9D
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       0196B2C64BBC9D0291FD288FE08085B8FF19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          1377
Signing time:             Fri 09 May 2025 02:01:01 +0000
Manifest this update:     Fri 09 May 2025 02:01:01 +0000
Manifest next update:     Sat 10 May 2025 02:01:01 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: 17i0hq5ir0C9/Le6f/fdTjtUyJxjLY4TFxsDsb5jz+I=)
                          2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:c6:4b:bc:9d:02:91:fd:28:8f:e0:80:85:b8:ff:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: May  9 02:01:01 2025 GMT
            Not After : May 10 02:01:01 2025 GMT
        Subject: CN=dece4947259a59b3663288a4a42a4139d769d39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:42:00:0e:ec:b4:94:b4:c1:1b:7a:6e:c7:
                    bc:3b:3a:5c:5e:5f:08:45:09:3c:1b:03:0c:cf:5d:
                    8d:ff:8a:c4:65:d4:d5:ef:89:0e:d8:12:99:fd:1a:
                    64:0e:84:e6:55:f9:b4:7e:98:b6:c9:28:19:75:5a:
                    50:f5:5c:f2:01:f0:0b:02:e0:6c:0d:82:5b:f8:1d:
                    be:bb:6d:02:a9:87:e0:e9:13:4e:c5:4e:16:29:9c:
                    27:ed:e1:e5:86:db:f9:ab:70:27:a2:95:f4:0f:32:
                    ce:ce:72:5b:9f:c1:6d:19:68:8a:e1:e8:7b:d3:aa:
                    67:ed:b2:2e:97:83:1d:ca:c4:89:94:08:50:87:d6:
                    b9:75:7b:62:6d:0c:d4:e1:15:8a:e1:7b:77:8a:a5:
                    c0:3e:b4:10:88:e0:9a:8f:91:29:17:91:5a:32:e0:
                    0e:5e:77:13:30:7d:ad:6f:26:d0:a7:7c:9c:34:62:
                    e4:e6:9c:b8:47:db:10:84:d1:b2:c1:7b:1d:05:9d:
                    84:9f:36:22:18:1f:fb:2f:91:2b:db:60:ec:fe:3a:
                    ef:5a:ea:02:cd:de:b8:27:ee:a4:90:58:d6:ac:dc:
                    12:85:60:d9:de:ea:9d:5c:cc:42:48:26:31:9b:1a:
                    67:c0:1b:ff:65:8c:2e:0a:31:83:17:04:6f:17:d8:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CE:49:47:25:9A:59:B3:66:32:88:A4:A4:2A:41:39:D7:69:D3:9D
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:87:b4:a6:a6:98:c7:34:99:33:69:f8:ea:36:56:27:e9:
         65:c1:6a:80:b9:1b:85:91:e5:16:0b:18:37:0d:13:d4:03:27:
         e2:5b:39:79:57:62:6d:af:8f:82:44:61:95:6f:2b:7b:4e:cc:
         03:e1:4c:c9:52:cc:40:1a:92:d0:64:bb:b2:43:0c:7a:1b:06:
         58:b2:80:0d:59:0d:a7:9d:cd:ad:d5:03:d7:96:dd:e6:07:10:
         e1:13:b0:65:b5:19:96:75:01:c8:cd:24:82:07:5b:66:49:6d:
         83:6a:62:84:03:ae:9a:63:b2:38:95:cf:39:e0:4f:e2:a6:0b:
         ad:ee:05:9d:51:5b:04:61:1b:52:02:e8:f8:68:cb:d3:cc:02:
         ed:63:81:55:80:a5:bb:54:f9:10:cc:98:2d:c8:91:f6:6a:8f:
         7f:02:82:27:a1:f6:e8:b3:33:f8:a5:92:23:c1:46:3d:66:6f:
         0f:6f:f4:06:eb:b9:fd:cc:f0:d6:23:cf:c1:c0:30:39:f3:59:
         42:1e:91:ed:3e:40:09:9d:19:c4:d3:e3:96:fd:de:db:10:92:
         6c:e8:44:3e:cd:f6:af:e2:8f:9a:6d:e5:25:40:38:63:d0:2d:
         bc:f8:0b:de:c7:dc:a3:31:86:a3:52:a5:a2:96:3b:92:b2:6c:
         7b:14:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:10:44 2025 by rpki-client