Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          XwsgEECzCsEjwd79MZ3yVOEiUQrQjZaR0k39ekcJ9C4=
Subject key identifier:   0E:83:AD:17:5F:AC:F2:98:2F:5B:47:60:B7:D6:66:3F:7E:08:D5:1D
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       0196C15D197BB2F6C16758B091452FED5A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          14C4
Signing time:             Sun 11 May 2025 22:00:26 +0000
Manifest this update:     Sun 11 May 2025 22:00:26 +0000
Manifest next update:     Mon 12 May 2025 22:00:26 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: t4h8OsBE6jOaOOrLzObgaLgJFxFpHywZLEjRQdLTb6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:19:7b:b2:f6:c1:67:58:b0:91:45:2f:ed:5a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: May 11 22:00:26 2025 GMT
            Not After : May 12 22:00:26 2025 GMT
        Subject: CN=0e83ad175facf2982f5b4760b7d6663f7e08d51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:b0:02:19:7e:0f:69:bd:7b:1c:90:b8:30:
                    c1:bf:fc:54:06:83:2b:44:56:77:5b:72:cb:1e:66:
                    9b:24:d6:c6:c7:04:ea:81:1c:23:22:9b:34:5b:32:
                    6a:de:4c:91:da:09:c3:87:fd:17:84:86:cd:67:34:
                    b2:db:67:c8:f2:3b:7a:4b:85:23:b8:de:51:5d:3f:
                    d3:8b:a8:fc:4f:2b:63:ea:08:20:29:1b:35:9e:66:
                    63:ec:3a:8e:81:30:03:08:9d:98:1e:84:f4:b6:e8:
                    3c:a3:ba:ff:c8:4c:69:5f:45:e6:f8:33:7f:fc:f7:
                    8f:6c:1a:90:e8:d6:a6:69:8a:b3:7e:ed:6b:8c:b3:
                    21:2e:76:51:30:6c:e3:0d:0a:80:34:b6:39:60:cf:
                    4a:a3:40:2d:25:c3:bf:d1:a5:7c:f7:11:cd:9f:07:
                    1d:c2:d0:bf:a2:15:e7:46:9a:2d:29:f6:70:99:ab:
                    0e:f4:45:65:f4:d7:14:8d:a1:d4:29:f6:13:7c:5e:
                    2b:59:1a:2b:b8:08:9f:93:82:03:ff:c3:06:b6:b8:
                    13:c5:ae:b6:fe:7a:35:37:02:5c:46:61:1b:23:0d:
                    2d:82:06:c3:e7:02:45:b0:10:df:c3:5c:a1:0e:ae:
                    0c:05:b9:6a:38:3f:ef:6d:37:ce:d6:b9:b6:f4:c2:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:83:AD:17:5F:AC:F2:98:2F:5B:47:60:B7:D6:66:3F:7E:08:D5:1D
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:b1:d6:f6:6c:17:9f:ae:1f:26:2a:c8:65:3f:01:f2:a9:
         da:6f:e9:a6:07:b9:c1:80:ad:0d:83:2f:92:7a:4b:84:0f:d1:
         8f:d0:31:b1:df:65:6d:3f:75:80:7d:a5:33:8c:1f:22:f7:e3:
         12:56:22:e9:a7:e6:3e:88:51:f6:45:64:82:e9:ae:de:a1:c7:
         37:3b:71:56:18:83:4f:40:c8:ff:60:5f:27:3f:03:64:bc:f7:
         4f:8b:a8:93:42:4c:d6:1d:e5:75:e4:ce:ec:15:32:e5:64:b5:
         e2:83:bf:8f:3b:ea:65:ff:bc:9a:30:93:ff:32:6c:cb:be:be:
         71:ef:1c:a2:6d:9c:8b:04:4f:99:8e:c6:58:fd:0f:17:44:b7:
         c4:29:c3:67:33:4e:7d:06:71:bf:15:fe:47:26:00:75:ea:f2:
         8c:ef:af:d9:8e:e6:b3:ae:07:48:dc:40:e6:04:6f:96:8f:d8:
         61:e2:fd:99:5a:4d:4f:82:c4:9b:e1:87:bd:1c:1a:28:c4:42:
         05:80:d1:d6:26:c8:45:11:a0:7c:f1:fc:4b:b3:52:ba:0e:e2:
         5a:57:6f:dd:b2:a5:91:59:dc:12:4e:1d:c9:9b:48:28:e7:62:
         3d:10:d2:53:68:5f:a2:86:10:9a:cd:6e:be:55:2e:15:65:77:
         61:53:ec:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXRl7svbBZ1iwkUUv7VplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjVmYTQ2ZTFjNmIwNWNiZmVjOTc2OTIxMGNiMTUxNDdh
YmUyMzEwHhcNMjUwNTExMjIwMDI2WhcNMjUwNTEyMjIwMDI2WjAzMTEwLwYDVQQD
EygwZTgzYWQxNzVmYWNmMjk4MmY1YjQ3NjBiN2Q2NjYzZjdlMDhkNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9mwAhl+D2m9exyQuDDBv/xUBoMr
RFZ3W3LLHmabJNbGxwTqgRwjIps0WzJq3kyR2gnDh/0XhIbNZzSy22fI8jt6S4Uj
uN5RXT/Ti6j8Tytj6gggKRs1nmZj7DqOgTADCJ2YHoT0tug8o7r/yExpX0Xm+DN/
/PePbBqQ6NamaYqzfu1rjLMhLnZRMGzjDQqANLY5YM9Ko0AtJcO/0aV89xHNnwcd
wtC/ohXnRpotKfZwmasO9EVl9NcUjaHUKfYTfF4rWRoruAifk4ID/8MGtrgTxa62
/no1NwJcRmEbIw0tggbD5wJFsBDfw1yhDq4MBblqOD/vbTfO1rm29MIXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6DrRdfrPKYL1tHYLfWZj9+CNUdMB8GA1UdIwQY
MBaAFOf1+kbhxrBcv+yXaSEMsVFHq+IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMt
MGM0MTdlZmY0NzIwLzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMtMGM0MTdlZmY0NzIw
LzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp+x1vZs
F5+uHyYqyGU/AfKp2m/ppge5wYCtDYMvknpLhA/Rj9Axsd9lbT91gH2lM4wfIvfj
ElYi6afmPohR9kVkgumu3qHHNztxVhiDT0DI/2BfJz8DZLz3T4uok0JM1h3ldeTO
7BUy5WS14oO/jzvqZf+8mjCT/zJsy76+ce8com2ciwRPmY7GWP0PF0S3xCnDZzNO
fQZxvxX+RyYAderyjO+v2Y7ms64HSNxA5gRvlo/YYeL9mVpNT4LEm+GHvRwaKMRC
BYDR1ibIRRGgfPH8S7NSug7iWldv3bKlkVncEk4dyZtIKOdiPRDSU2hfooYQms1u
vlUuFWV3YVPsbA==
-----END CERTIFICATE-----
Generated at Mon May 12 01:23:48 2025 by rpki-client