Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          a0VR8aG76PRja3BOgFu8Po4gcALUCihYIAhYyz0+fdk=
Subject key identifier:   3D:11:A8:FE:40:0C:5F:D9:45:6F:65:31:F3:4C:58:AE:BA:D3:CC:9C
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       0197CEA9730768F2D4F66B5B90A4A7A09B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          086D
Signing time:             Thu 03 Jul 2025 05:01:40 +0000
Manifest this update:     Thu 03 Jul 2025 05:01:40 +0000
Manifest next update:     Fri 04 Jul 2025 05:01:40 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: nCElmQK1M4JHm0UZYF2Q+SB6WKX/uh3j4aVOn/90WEw=)
                          2: 8CQhFFzhVCUSs-Acf3oCW5Ht1O4.roa (hash: 4QjA0b3TlO69hSmmKrV3SWr74V598K76v+qHTSKJ/xE=)
                          3: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=)
                          4: gTRae7ZL-HNGSMdQfcCH4w50U3I.roa (hash: lqNN9a02R1wKbKPgix1ICuGW1yv4WMeo7Mou83VAgGA=)
                          5: j_3Ftqm-lzj1TntRYs7GVQ4-no4.roa (hash: uD9N1p5kcD0F5MTrxTTnuG+MRtGjk9UHle8sxsfds2s=)
                          6: qpT2fz7gBHouwLsuowbAYvgg-Ig.roa (hash: o0L42Hh+TFiS6tacfIvRtxQ2lA2AeiIQCwPGgLIErJk=)
                          7: tLtgUfd0ui74NFHNYFQ3DTMpTpY.roa (hash: t0Rcfn+Zo7QZAW0FXDZgWJxfMhFkyCKBVpW7cC1Ejw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:a9:73:07:68:f2:d4:f6:6b:5b:90:a4:a7:a0:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Jul  3 05:01:40 2025 GMT
            Not After : Jul  4 05:01:40 2025 GMT
        Subject: CN=3d11a8fe400c5fd9456f6531f34c58aebad3cc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:58:d1:9e:14:e7:59:0e:7c:0e:5e:6e:72:
                    33:d2:97:39:df:39:49:b0:12:c3:2e:92:fe:1b:1f:
                    6b:12:8a:9d:de:f4:2f:4f:af:16:c5:7e:3f:ec:04:
                    c1:fc:c7:15:43:a4:18:34:21:f5:be:b9:47:ed:73:
                    3a:0b:36:35:31:2c:c5:b7:f9:a0:22:44:eb:e0:74:
                    8f:8e:e3:9c:3f:8e:6f:88:cf:22:28:43:cf:dd:5a:
                    7e:7b:4f:ea:e9:75:eb:a3:61:f3:3b:4e:80:97:2a:
                    d3:71:27:63:a8:b5:0a:a1:0c:be:ff:43:17:35:52:
                    87:85:6d:9c:2d:cb:46:cf:54:f2:2b:92:c2:66:fd:
                    c1:9d:14:c5:c3:a1:79:2b:5d:f9:e2:e2:65:b6:07:
                    7f:58:e1:b4:53:98:a3:73:a3:96:18:0c:65:e2:07:
                    64:a5:39:ff:4c:6f:ee:f4:20:1b:d2:bc:f7:3a:64:
                    a0:80:2a:0c:13:c0:5c:be:f3:83:9b:2a:7c:35:2b:
                    7f:90:ba:c3:55:26:69:2a:c9:0c:24:23:66:33:e4:
                    8a:7e:2d:79:86:ba:c8:12:5b:c7:07:43:69:b4:1c:
                    7e:cc:23:be:27:c2:93:65:40:e9:aa:18:51:dc:cd:
                    8e:a5:ad:99:0e:bd:cb:db:73:73:8c:4d:d7:ce:7c:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:11:A8:FE:40:0C:5F:D9:45:6F:65:31:F3:4C:58:AE:BA:D3:CC:9C
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:29:51:93:7c:2e:2c:35:7e:34:17:be:3a:92:2c:39:7a:b0:
         a0:23:b1:e9:e6:fa:07:78:22:09:b0:fe:c7:ec:c7:0f:65:85:
         10:ce:6a:0b:bd:0c:99:93:c3:e4:21:8a:ed:20:c3:b4:04:d8:
         96:bd:8e:87:6d:d2:87:9b:39:93:1c:30:df:e3:87:d7:07:94:
         64:c0:f0:c0:b6:15:1d:35:e8:09:5b:e2:ba:a6:7d:62:5f:6d:
         58:e6:14:e9:a2:64:9d:a8:cf:9c:e5:43:da:d0:f7:a0:f1:ee:
         82:39:6b:fa:84:d2:8c:b9:d9:c3:73:ae:b1:2c:4b:8f:ae:ad:
         59:c9:af:5f:3f:de:c0:0e:96:7b:9c:21:64:6d:d7:8e:7a:24:
         3f:04:8e:fb:dd:2b:bd:66:f1:95:c4:38:1e:e5:eb:01:65:5c:
         24:6d:b7:f4:81:72:fa:55:e3:41:7b:ff:2c:46:46:54:20:39:
         23:a4:59:0e:00:00:b2:48:82:4b:b5:b2:5f:c7:42:36:0d:b4:
         29:2e:b5:cf:54:55:9d:d0:da:5d:46:e4:fc:b1:ad:a7:7c:09:
         a5:60:c8:21:a9:c6:63:10:35:3c:e7:ac:ae:09:a2:64:77:f3:
         c7:c3:32:49:9b:91:09:be:38:85:63:8d:60:0b:5f:b3:e5:d7:
         f3:77:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:10:21 2025 by rpki-client