Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File:                     a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier:          TPrfQM3FW07AKOdRFnTC82X63GgEE1LkefIHPs6VAxg=
Subject key identifier:   78:A4:E0:6B:65:6B:21:66:2B:F8:B8:F7:08:A2:C9:71:13:58:66:86
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer:       /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial:       0196BC36D41CB435CCC771963449B0925195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number:          055E
Signing time:             Sat 10 May 2025 22:00:31 +0000
Manifest this update:     Sat 10 May 2025 22:00:31 +0000
Manifest next update:     Sun 11 May 2025 22:00:31 +0000
Files and hashes:         1: MKVWoK3wRPR_92nYPkQa4dZVFlU.roa (hash: CUusBr3IW9QaEzh3QeMtC6ZDvXcFkIcu309/jIeDme8=)
                          2: UVKqbvOHvCn6HoAzG1ux5mNYX9U.roa (hash: zS7iofsDKAb9AZxOa/q1sMs1Br0lasrnbRlbpqfAq5w=)
                          3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: 6yhMDzIyW905ins9hmjwugz+roaXtEMPM9k2mJ2pgNo=)
                          4: nHW9BLq4zRW7_GDpHKk8LDtfSmI.roa (hash: wgNVfFr1EUmSTQMiYZD3CFdfwE6KU5e+fnSwgZEt6SA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 14:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:36:d4:1c:b4:35:cc:c7:71:96:34:49:b0:92:51:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
        Validity
            Not Before: May 10 22:00:31 2025 GMT
            Not After : May 11 22:00:31 2025 GMT
        Subject: CN=78a4e06b656b21662bf8b8f708a2c97113586686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:d3:fd:ab:38:32:b8:c8:14:1f:36:7f:c2:
                    e7:76:25:c6:d8:f5:bc:54:38:fb:6d:b0:63:e6:8e:
                    44:e7:64:6b:9f:98:72:d8:2a:e0:b0:05:56:9e:3d:
                    dd:1c:c2:28:bc:bc:1b:e1:f5:e6:80:f2:07:e8:39:
                    7c:bc:0f:46:1d:f5:8d:d7:c7:5c:c3:b5:b5:a1:bc:
                    a6:03:f9:cf:1c:f5:97:3b:a7:f4:03:e0:b4:f5:65:
                    b0:e0:6d:a8:97:66:4e:0d:94:8f:6c:a3:b8:dc:20:
                    99:65:57:55:46:20:79:41:e2:41:5b:6d:06:ad:7d:
                    6d:5f:96:0e:f7:58:60:10:60:d5:d6:07:63:c7:44:
                    6b:1e:0f:d0:b3:08:6f:f8:aa:28:7c:16:b4:36:d3:
                    76:91:98:90:9f:2e:44:d6:4f:51:4f:79:58:e2:59:
                    f4:f6:e5:2c:a2:17:11:49:3b:ad:5a:dc:3f:ee:73:
                    bb:3e:78:d8:29:43:d1:cb:5e:df:ba:36:6a:05:88:
                    80:2e:e6:46:e7:a2:5d:3f:ff:40:0f:d2:7b:58:b4:
                    d1:64:d5:0f:d6:28:9a:64:c2:c3:e3:3d:6d:75:0e:
                    8a:27:fd:2c:1b:72:ab:9a:ee:79:2d:f6:e9:c8:bb:
                    1a:24:26:95:8a:c6:69:ae:8e:1f:92:97:14:36:30:
                    bc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A4:E0:6B:65:6B:21:66:2B:F8:B8:F7:08:A2:C9:71:13:58:66:86
            X509v3 Authority Key Identifier:
                keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:58:19:ec:5e:29:42:c4:52:4d:5d:37:4c:e3:c9:40:0b:
         42:15:78:d8:e0:30:63:bf:77:e7:83:d1:40:c3:be:79:b2:25:
         a9:e5:c0:50:03:1a:52:9d:d5:ec:a5:8d:50:a5:6b:b8:31:17:
         8c:12:b9:7e:21:32:3f:14:91:fc:5c:8f:fe:cb:71:ef:c6:19:
         cd:6b:e3:55:18:16:e1:8f:d2:37:7c:bd:26:bd:4d:05:fd:b2:
         10:86:fe:29:35:c5:38:2f:66:e9:a2:73:c8:37:f8:3a:18:33:
         4d:62:60:30:5b:a4:d9:74:47:b6:2e:fd:ca:90:2b:75:8d:47:
         51:e5:ae:7c:8c:e4:66:2b:ae:f8:c3:a1:45:86:5d:17:96:8c:
         38:03:18:cb:46:9a:c7:ae:c3:c7:a4:d0:7d:7f:95:34:dc:ac:
         26:92:d1:d5:aa:09:03:6d:d8:e2:86:45:2c:5e:e3:4e:3b:e4:
         61:aa:96:36:63:d0:c0:8c:9a:95:95:7e:46:24:37:56:a6:7b:
         d4:85:9e:a3:ae:ea:20:c8:79:12:c5:e0:da:fa:6f:0b:3c:7a:
         3f:a3:a4:c5:5f:79:73:43:35:f2:db:5c:47:1b:ed:91:25:5d:
         b9:80:9b:f4:8b:15:59:58:07:4b:83:af:95:db:37:3a:bf:e6:
         11:47:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:14:25 2025 by rpki-client