Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          rNIi9N9mNep67ctkPcj3gLuMecve3rrzJLjZZo+2eMM=
Subject key identifier:   EF:CD:51:A1:08:D2:89:43:ED:63:61:9F:9A:1C:BD:E3:0B:C7:DB:D2
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       0197B77CA610C6377E3FC75B9CEAC25A70DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          08E1
Signing time:             Sat 28 Jun 2025 17:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:28 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: UfrWVnU43wNMwD+bnn9FJD/LzO3ER3G/2CVreGwzXrM=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:a6:10:c6:37:7e:3f:c7:5b:9c:ea:c2:5a:70:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Jun 28 17:01:28 2025 GMT
            Not After : Jun 29 17:01:28 2025 GMT
        Subject: CN=efcd51a108d28943ed63619f9a1cbde30bc7dbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9f:f0:d8:25:42:f7:4d:8e:7c:e5:f1:c0:3e:
                    91:e7:ea:da:4f:1a:06:fd:63:b3:e3:7f:f9:ff:f5:
                    4d:fb:e5:45:d2:48:a3:25:3e:80:95:da:8c:f6:71:
                    44:b3:0e:1f:44:62:8f:db:b8:82:f1:cb:db:05:6a:
                    f1:7f:b7:5d:f8:db:fb:9a:2d:3f:d3:74:c4:0a:37:
                    d5:5e:96:34:66:85:e6:c7:d8:82:54:6b:d1:e8:2b:
                    28:81:ec:46:9b:06:60:91:04:42:2a:cf:0f:3e:6d:
                    c3:aa:ab:65:c4:0a:b6:1a:fb:42:fe:8b:59:f6:8a:
                    9f:9e:3c:03:79:c5:fe:85:7f:80:78:65:1f:6e:f6:
                    fc:a3:a6:a9:50:00:f5:c3:a6:eb:d6:6f:d4:c1:df:
                    50:15:1e:b4:b1:2e:bd:b3:ba:41:1b:d0:3a:26:fb:
                    05:1d:ba:65:20:9a:65:58:1b:32:0d:fe:4c:be:55:
                    d1:be:7f:07:14:3e:2d:e3:c9:cc:21:79:c5:4d:23:
                    9e:fc:1a:19:f7:5b:fa:9a:32:8b:03:41:bf:d6:e8:
                    f1:c0:0a:49:41:90:54:df:c2:0c:2d:3c:28:b3:38:
                    1b:56:21:99:1d:ac:c0:18:c5:0d:ff:3b:5e:dc:93:
                    7f:da:47:10:f6:a6:96:e3:fd:7b:bf:77:7b:72:3e:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CD:51:A1:08:D2:89:43:ED:63:61:9F:9A:1C:BD:E3:0B:C7:DB:D2
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:74:f1:fb:4b:71:e4:38:f7:ad:56:95:a8:42:8c:7a:94:
         d1:bb:5b:f4:07:3b:8d:8f:02:7e:6f:7c:3d:79:61:c8:4a:55:
         bd:84:fc:32:2b:b0:24:d4:2e:df:cd:75:c1:07:0a:6f:8d:51:
         ad:9c:1f:01:99:15:a5:0d:a5:0a:8b:22:a0:94:12:a1:1a:51:
         81:5a:53:9c:9d:09:e7:e2:b2:e0:6c:13:99:bc:79:b4:85:52:
         d9:50:47:39:84:75:34:79:7c:a9:69:e9:92:43:91:15:a9:79:
         9d:4e:38:8c:c1:bf:b8:55:8f:07:d7:da:21:c1:ac:af:11:90:
         37:14:0d:ec:b9:3b:7b:d7:db:9f:75:d5:04:d9:5f:3d:92:90:
         41:c2:59:a6:a9:78:ba:35:6a:3c:8e:76:56:38:cb:dc:21:0e:
         33:10:85:5e:5e:5d:a2:be:cd:c4:f3:4f:43:e8:4b:92:99:a6:
         56:81:44:b8:23:aa:76:86:e3:7d:95:54:d0:fb:14:4f:ad:91:
         0c:b5:de:22:9f:a7:a9:9e:b1:93:c4:2c:22:86:98:08:69:83:
         f2:6e:f0:a3:1f:1e:20:ca:3b:d6:fa:da:17:1b:3a:45:4b:75:
         37:7e:db:e7:77:79:82:76:74:22:6c:ec:c6:b6:ab:35:db:13:
         ca:de:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:57 2025 by rpki-client