Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          dCn7bCaOjIDcKWZG551GhY+ELLerHyoT7vsF+OC5/4Q=
Subject key identifier:   07:3F:39:AE:2A:04:A5:D5:5C:22:FF:0C:5A:A4:C1:CF:81:11:D6:1B
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       0197C6822495CD634502F2A1DA7FE347B2A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          0544
Signing time:             Tue 01 Jul 2025 15:01:47 +0000
Manifest this update:     Tue 01 Jul 2025 15:01:47 +0000
Manifest next update:     Wed 02 Jul 2025 15:01:47 +0000
Files and hashes:         1: i5QXiPkXceFCKpymhBdKs-kxqdg.roa (hash: JW9l6XsHQNvt/hO+lQdoU/xk33G+5qgeiTQZTkcdU8Y=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: AnJGcsQmyWiCjdtul6arPJbfAhCPtP3beNt1+sw4YZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:82:24:95:cd:63:45:02:f2:a1:da:7f:e3:47:b2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Jul  1 15:01:47 2025 GMT
            Not After : Jul  2 15:01:47 2025 GMT
        Subject: CN=073f39ae2a04a5d55c22ff0c5aa4c1cf8111d61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:ee:59:7d:50:c1:37:12:4a:31:7c:d2:eb:
                    1f:e5:d8:1c:a9:c7:ed:6e:91:65:27:51:c3:3c:a5:
                    47:f0:9f:b6:e2:14:85:56:df:a2:e6:54:d4:42:0e:
                    2d:4d:10:82:1c:9c:32:87:c5:d1:af:76:e2:ea:ab:
                    13:7a:56:25:8e:ac:95:29:69:38:6a:f4:a9:2d:74:
                    70:44:72:a6:27:d9:aa:af:b4:28:e1:03:98:c5:03:
                    ca:fe:5d:d0:6f:c1:0f:11:79:0d:be:ba:92:57:60:
                    04:08:fc:fc:9f:27:ce:e3:c4:ec:ab:ec:05:42:e6:
                    e2:c4:e5:6b:b1:a8:a3:e9:47:66:ac:95:67:63:47:
                    d7:3d:cc:fb:0b:9e:69:b0:a2:f6:e7:80:52:73:67:
                    8c:95:19:ce:1d:26:5f:e1:67:46:61:a2:4e:27:e8:
                    1e:ca:08:63:83:3e:91:58:f7:71:5d:4c:14:bc:de:
                    ec:7f:14:58:6b:fc:41:70:03:ca:8e:96:d0:86:e9:
                    6d:06:ef:4e:80:5a:99:4c:4a:19:e6:49:9a:ed:62:
                    0c:67:17:6e:59:7c:f0:df:e0:f3:d7:b2:b6:f4:da:
                    dc:2b:54:ab:2f:9d:90:ec:db:e0:d3:0a:60:f7:9b:
                    49:23:c4:39:57:9c:5f:a4:f4:73:df:63:95:86:a5:
                    41:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:39:AE:2A:04:A5:D5:5C:22:FF:0C:5A:A4:C1:CF:81:11:D6:1B
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7c:57:e7:72:df:22:3f:bf:c0:4b:0f:c6:f2:10:7e:b0:4a:
         f9:f4:11:4f:62:42:45:6c:24:73:16:06:d9:75:95:e5:dd:99:
         44:7a:ca:14:df:03:2d:06:77:0c:2a:ae:bb:27:f7:72:cd:e6:
         62:13:c6:f3:df:25:20:f1:88:b0:fb:ff:27:1d:8a:b9:64:e0:
         29:f7:3c:9b:b0:99:da:b6:2e:41:52:ae:85:cb:14:af:5f:c2:
         73:c6:b3:ad:90:f5:45:f0:9b:c3:73:da:a2:46:43:a5:d6:b7:
         0c:14:4a:c2:f8:e8:25:0a:91:fd:75:e0:60:17:71:41:5c:11:
         60:08:c1:1f:65:95:70:5a:9d:eb:33:63:de:02:41:1d:f2:85:
         c0:a3:42:ac:6a:14:a1:df:78:20:f7:86:9c:24:c3:12:99:e8:
         69:d5:f0:b2:a3:93:32:5d:52:f6:42:1d:2a:a3:23:d7:9f:57:
         00:b6:a2:e2:f3:37:b7:da:78:ad:e7:5e:8e:8f:36:69:33:0c:
         39:f9:95:6a:fe:b5:0f:76:e4:06:0e:1f:fd:cc:1c:41:88:6f:
         1d:80:f1:2b:8f:e9:7d:88:8e:ca:4a:fe:ab:18:8c:b1:ab:32:
         a1:3c:73:04:1f:be:b2:4d:1d:ec:a0:e6:0a:29:d4:83:27:5d:
         ca:5a:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:54:26 2025 by rpki-client