Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          iQ4p0B+cezlhk6Ndgvl7SPPZOh5+uxRCugSSupvalU8=
Subject key identifier:   A4:3A:1A:FB:E3:FC:AB:CD:6C:F4:36:FE:C4:F1:4C:C1:C0:AA:BB:CB
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       0197B58E0202E45FA476302310D2BE8C6E0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0BCA
Signing time:             Sat 28 Jun 2025 08:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 08:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 08:01:12 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: aiKVG09kGbiBPstUDWsk8z/bonSQSs1NqEvdfK5+Ycs=)
                          2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8e:02:02:e4:5f:a4:76:30:23:10:d2:be:8c:6e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Jun 28 08:01:12 2025 GMT
            Not After : Jun 29 08:01:12 2025 GMT
        Subject: CN=a43a1afbe3fcabcd6cf436fec4f14cc1c0aabbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6e:98:97:79:f8:19:c2:9b:fa:b1:dd:cf:48:
                    25:2a:49:85:46:21:dd:0b:7d:24:e6:7c:f3:33:df:
                    d2:ef:42:8c:91:f0:3f:c0:92:7a:3e:67:00:69:e3:
                    a4:0b:3f:3f:f0:ad:05:c3:0d:53:66:91:0e:79:0c:
                    c6:93:46:65:67:01:20:6d:79:3a:5b:49:67:02:6c:
                    e1:13:dd:a3:a0:36:db:86:3d:b5:65:da:4a:f2:c1:
                    f3:c5:a5:a9:51:a2:ee:9e:81:ae:7d:51:39:48:40:
                    77:35:e3:09:e6:be:6f:9d:39:de:40:29:c3:b8:87:
                    97:2b:37:46:0a:68:a8:40:4d:06:9f:89:b9:7c:26:
                    e4:23:ba:40:78:48:81:36:d8:e5:0c:a7:07:1f:0b:
                    12:08:ca:96:07:ee:e6:ba:db:b7:93:03:1a:50:c7:
                    80:2e:8e:95:8e:77:9e:22:4f:44:c0:bc:29:cb:fc:
                    ca:ca:76:87:48:0f:73:c1:61:65:b6:86:f9:55:c6:
                    ae:12:b1:35:f0:3b:e2:1b:36:43:20:94:2f:88:a9:
                    f5:c4:20:d6:1e:b6:95:90:2d:ea:9d:cf:0b:f8:39:
                    d8:98:08:35:f0:26:88:39:05:91:f4:78:98:9b:fe:
                    19:ad:b7:46:3e:7d:56:19:19:66:e6:f8:09:f3:5e:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3A:1A:FB:E3:FC:AB:CD:6C:F4:36:FE:C4:F1:4C:C1:C0:AA:BB:CB
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:51:d9:5f:90:6c:51:e6:39:18:76:38:e2:db:f0:1c:34:48:
         83:e1:1c:1a:5e:2b:b6:bb:99:23:05:a0:69:4d:24:b1:e2:d6:
         cd:ec:0b:31:28:a3:08:49:58:4c:c7:81:f6:bc:79:a7:e3:8a:
         be:40:16:f1:cf:48:7e:06:55:e8:98:6d:fd:bd:e4:c0:75:8a:
         49:74:42:f2:8c:f2:86:7a:57:d3:67:f3:cf:1f:f5:03:4e:c2:
         10:1e:33:45:b9:8c:f6:a4:ca:45:1b:10:94:73:8d:ae:46:f4:
         15:47:92:71:67:c0:f3:fb:08:8f:54:1f:c8:5c:10:14:8f:bd:
         14:5c:83:d5:66:44:58:35:5a:8b:bb:9d:09:ef:af:4f:db:f7:
         1c:61:bd:b3:fc:a1:c1:35:e6:b8:37:aa:ce:75:24:ff:c2:c7:
         46:ab:15:e7:75:ed:3f:73:e1:a0:9a:bd:94:0b:9b:cc:d9:a1:
         02:52:df:33:bc:80:ae:c3:b2:2c:9b:e7:93:79:bf:31:6e:88:
         92:40:d1:da:da:2c:1e:9d:3a:1e:1b:cd:6b:10:0c:42:87:8a:
         b4:ce:9f:4f:62:cc:1b:80:44:34:3d:0b:01:cc:7a:88:23:df:
         84:f8:22:c9:a0:8c:a1:9e:95:37:53:92:11:09:9f:02:e8:26:
         14:b1:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:21 2025 by rpki-client