Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          hIUvS2MVDm9aU1Y1cvbcvDceLU4IGJ6wV0r+KThsr5A=
Subject key identifier:   E0:D1:56:04:A9:1F:EA:87:2B:40:E3:5A:56:F0:57:A9:D5:70:B7:2A
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       0197B6A1B2D1DB88F987B45DA53A993151A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:19 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:19 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:19 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: CNnIOpKkQk2Xn474IDb4E4aOh3gM2+80jqoHD40OCEo=)
                          2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:b2:d1:db:88:f9:87:b4:5d:a5:3a:99:31:51:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Jun 28 13:02:19 2025 GMT
            Not After : Jun 29 13:02:19 2025 GMT
        Subject: CN=e0d15604a91fea872b40e35a56f057a9d570b72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:39:dc:11:d7:75:7d:ef:43:41:27:f9:b1:
                    72:4c:41:65:f2:9a:3b:70:c6:e9:d7:99:85:29:ef:
                    ed:33:95:a9:c5:d7:a0:4d:ad:48:ed:f8:71:57:08:
                    db:7e:94:e0:ee:5d:75:4e:e9:1c:7d:5f:97:cb:65:
                    ec:66:f2:ad:e0:af:f3:60:b9:72:b5:a8:43:a5:d0:
                    26:13:53:a8:9a:5b:3c:65:1c:e4:7c:d3:86:db:fa:
                    1a:0d:f7:de:6d:73:82:04:88:de:5d:2c:74:42:54:
                    2e:87:64:3e:3e:64:df:78:43:00:62:e7:76:34:01:
                    18:5d:b1:60:39:55:aa:05:4e:a8:7c:3c:8f:a8:9f:
                    ee:4f:cd:e9:17:d6:83:c3:dd:d7:6a:06:0c:9c:76:
                    bc:0d:e1:b5:3d:a9:2e:89:8f:84:89:1a:75:bc:9e:
                    67:1b:35:c9:6b:49:e2:fd:87:85:06:90:26:38:1b:
                    b7:82:5e:a2:5e:93:ad:00:5a:49:7b:82:e1:87:e2:
                    9e:09:ff:82:5c:dc:43:54:85:07:2d:ca:bb:12:6a:
                    e8:ae:12:a8:04:3d:fa:0e:5c:7d:25:1e:ff:64:eb:
                    bc:0c:f4:4d:bd:e1:18:38:88:be:bd:fd:84:4d:5a:
                    2e:b9:fc:9a:76:58:2f:55:ae:c6:19:6d:fd:d8:a6:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D1:56:04:A9:1F:EA:87:2B:40:E3:5A:56:F0:57:A9:D5:70:B7:2A
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:ed:da:31:ba:e9:52:ef:ba:9d:0f:ff:e6:23:66:3a:bd:
         7c:ae:f6:8a:1a:0b:42:98:12:d8:68:5e:0f:70:3f:67:74:d5:
         f8:fa:ea:30:a4:4d:d2:9d:89:cc:10:93:7f:ed:30:8b:ce:8c:
         f6:50:05:c9:8c:16:8d:b7:57:dd:d4:eb:63:e4:19:f4:bc:ce:
         d6:0a:d4:62:90:e6:d5:ac:e9:d9:09:5d:17:42:38:03:76:e6:
         6b:6b:f5:0b:96:66:d6:7c:88:cd:45:dd:6b:44:b6:3e:29:aa:
         cc:bf:ef:9c:db:fa:10:74:03:b1:50:2e:0c:d3:c3:92:b8:c9:
         15:37:4e:35:b7:2f:b6:d5:b7:3e:ce:ab:fa:c5:80:68:b5:c5:
         29:08:a9:42:ad:f9:fc:80:94:b5:9c:22:20:dc:dc:d0:f9:f7:
         a6:87:ba:57:27:e7:c9:3c:4a:b0:d0:bc:5f:b1:01:d9:7f:fa:
         7f:ff:d5:4e:13:68:88:bd:a6:e1:44:1b:3e:1b:f1:7a:af:2c:
         e1:fe:b6:23:1a:b0:99:4f:82:b7:10:5e:d2:b1:6c:42:5c:04:
         35:59:1a:08:0f:c1:db:a8:5c:dc:34:0e:17:55:15:2d:cb:18:
         9e:69:7a:8c:68:4f:1d:1d:01:a6:9e:c9:ee:0c:9d:61:c5:b2:
         67:b8:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:27 2025 by rpki-client