Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          dpn9Zd2K3OH6J9tIENZhKvNfUmWtHUIArcg6r28CTpk=
Subject key identifier:   A1:AA:C5:77:37:20:E1:F7:78:1F:60:06:D3:AE:56:E3:E1:73:4D:26
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       0196AB0C9D6BEAD51DA9A697B6C2623129F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0B40
Signing time:             Wed 07 May 2025 14:00:52 +0000
Manifest this update:     Wed 07 May 2025 14:00:52 +0000
Manifest next update:     Thu 08 May 2025 14:00:52 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: 6lqlEfJ0bdkN/2ayKja8o4KKcUMM+sTfRrXUY7Boxdo=)
                          2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:0c:9d:6b:ea:d5:1d:a9:a6:97:b6:c2:62:31:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: May  7 14:00:52 2025 GMT
            Not After : May  8 14:00:52 2025 GMT
        Subject: CN=a1aac5773720e1f7781f6006d3ae56e3e1734d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:2a:39:e0:9b:5f:83:a4:be:68:1c:64:9a:
                    6a:46:d0:c4:82:42:9f:25:61:a1:0f:d9:2a:6c:06:
                    06:5a:95:fe:19:50:26:06:84:14:59:2c:36:00:38:
                    0b:a3:64:ca:6d:76:6a:80:6d:95:93:67:61:68:42:
                    39:a2:82:f6:95:c6:58:41:d2:c8:f6:ca:da:27:1f:
                    d2:5a:db:ea:c7:d1:e6:22:fc:2a:aa:31:20:83:8d:
                    c9:11:a8:b7:c6:4b:40:cd:cc:94:fb:d9:2b:39:be:
                    ac:98:9b:94:1a:b4:d4:eb:af:4a:57:25:98:08:dc:
                    3d:8f:6e:eb:1f:6d:8b:27:71:f4:16:bf:8a:25:2d:
                    29:8f:ab:be:36:2f:de:e7:c9:90:2f:30:87:cf:d0:
                    54:0c:1b:88:30:85:d4:df:31:64:da:b6:1c:d7:c9:
                    d1:77:53:05:6d:71:46:83:13:15:d1:cb:24:47:cb:
                    ff:78:c4:f6:c0:84:09:08:96:c8:9e:75:52:c6:a5:
                    49:3e:8a:d3:b4:51:7d:1d:38:c5:ca:bf:06:d9:24:
                    08:c3:69:4a:e5:23:1e:53:07:3a:f7:4e:c9:97:c4:
                    7e:32:53:26:c5:80:ee:19:0f:1b:dc:0b:02:be:94:
                    67:33:93:56:bd:c2:33:8f:56:0a:f2:80:8f:c2:37:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AA:C5:77:37:20:E1:F7:78:1F:60:06:D3:AE:56:E3:E1:73:4D:26
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:61:34:cb:0b:03:45:ab:c8:24:20:a9:05:a5:1a:38:7f:f2:
         9d:67:87:57:4c:ab:0e:03:26:12:00:b0:9e:3c:36:e3:a4:66:
         7b:f0:67:31:89:16:e8:12:1f:d7:0f:77:a7:d6:0f:3a:02:ab:
         f5:35:a9:4e:a9:a4:f8:76:61:39:8d:ed:a4:6f:0c:38:56:a3:
         d3:92:f1:50:e2:04:5a:69:53:61:11:d7:15:eb:18:f0:ce:76:
         67:f5:63:0f:57:4c:6f:e7:39:b5:0c:82:51:80:13:09:14:10:
         48:0d:48:d6:0e:dc:d8:58:96:3a:d6:83:bf:f4:3b:9a:86:80:
         44:68:17:f7:b7:9a:67:b3:44:e8:f2:90:f1:96:3a:5f:25:d8:
         5f:b0:fe:0d:c3:44:f1:95:3b:e7:4c:e8:4b:3f:2d:86:bd:f5:
         d7:1c:c1:e1:e8:09:08:40:cf:e9:bb:63:11:30:ac:2c:75:a6:
         36:c9:73:d4:59:11:8c:ef:74:03:11:8b:9c:94:cb:9a:2e:77:
         f4:52:74:6a:2f:82:66:be:71:c1:14:bb:ce:34:56:a8:34:90:
         b7:8f:43:dd:92:cb:89:41:95:de:57:74:5c:cd:08:42:df:3c:
         2a:7f:e4:86:04:80:c7:aa:07:94:c3:17:1d:1a:46:24:07:f8:
         14:18:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:24:13 2025 by rpki-client