Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          6oySSpoPhU3iY2bGGmvoaQaF0x6O7eWY8oLmjBZqx8Y=
Subject key identifier:   D4:A8:06:1D:5F:93:FF:41:6A:81:0C:26:46:AC:4B:4C:56:27:4E:B1
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       0197B9D935C46E85FA02A88B542D2834450F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0966
Signing time:             Sun 29 Jun 2025 04:01:49 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:49 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:49 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: okfORxasDnWavm9Mg869kaGGUEnSuNzJ77aIs7okQSM=)
                          2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d9:35:c4:6e:85:fa:02:a8:8b:54:2d:28:34:45:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Jun 29 04:01:49 2025 GMT
            Not After : Jun 30 04:01:49 2025 GMT
        Subject: CN=d4a8061d5f93ff416a810c2646ac4b4c56274eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:4d:cf:a4:0f:70:2c:b6:56:2b:e7:d8:17:
                    45:77:d1:d5:e1:2f:30:56:4d:b4:48:58:85:65:60:
                    44:2f:90:9c:15:4a:07:f4:e5:65:fc:95:36:ae:2d:
                    e7:55:c1:62:e7:d6:05:65:ed:51:4a:be:71:39:56:
                    9b:7d:f8:57:c6:a4:de:e8:56:3f:59:30:53:78:94:
                    0b:9d:55:64:4a:28:e6:43:77:3b:d6:b4:80:9b:fe:
                    6c:fc:69:ea:57:1d:97:66:e0:3c:39:8b:a6:17:2f:
                    a0:5c:d9:6d:5a:d5:ac:24:61:8c:21:70:7c:20:6b:
                    f5:a3:a5:e9:63:df:29:b0:2f:29:ef:b7:63:b7:94:
                    7b:59:68:d6:80:45:ee:24:6c:5b:21:4d:26:67:30:
                    8a:9d:b9:24:24:f9:f2:26:c6:6c:f3:a4:06:c8:c3:
                    ef:c3:8f:d5:48:03:d8:52:7d:21:b9:4c:f7:17:20:
                    fc:35:44:c5:21:18:e1:f6:f1:21:22:f0:08:cb:09:
                    3c:59:02:1a:3f:4a:ba:56:8f:d7:1e:59:18:05:d5:
                    85:8f:22:8d:89:7f:51:71:9e:ea:5b:13:83:96:eb:
                    85:2f:47:80:e2:4e:74:f1:94:00:c4:d3:11:89:4d:
                    fa:12:c4:b7:ff:5b:46:62:26:2b:2a:c4:33:f2:4f:
                    53:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:06:1D:5F:93:FF:41:6A:81:0C:26:46:AC:4B:4C:56:27:4E:B1
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:5d:80:eb:67:8c:4e:86:1b:5b:90:1b:a7:ea:3e:4c:24:
         81:ad:cd:98:be:1a:66:48:eb:63:bc:20:77:49:3a:88:99:27:
         92:77:02:e1:42:7e:ac:e1:a2:5d:76:03:4c:44:ef:c8:16:34:
         3f:b1:f9:8b:42:d5:70:f9:9d:3d:3a:90:bb:a2:55:c7:5e:79:
         5f:79:c6:36:ca:47:a9:69:c5:70:ad:f6:db:ce:88:7a:21:0e:
         33:61:83:6b:07:f8:fc:7c:23:ec:c8:55:f3:bf:47:6f:3b:f1:
         11:b8:08:53:19:6f:67:d9:d0:2f:9f:ea:3c:a2:e5:ad:05:e5:
         56:a9:3f:43:23:01:56:f7:6d:0c:d8:40:b0:c5:6f:c8:9c:23:
         df:f9:74:56:4b:df:6d:3f:b5:77:41:fe:76:c9:37:51:70:bb:
         6a:b1:7f:ec:46:aa:e1:73:2f:84:b2:9b:e0:83:8e:0d:da:17:
         e3:6e:a4:ec:b6:41:1d:52:a1:fd:ed:d0:30:3a:7d:ed:b6:8c:
         d3:b0:49:95:2b:36:3e:cd:a0:14:d5:6a:56:5d:34:d8:e8:82:
         a3:3f:27:60:6f:47:f4:7a:19:bf:68:c9:cf:85:92:4b:e5:10:
         6f:f8:ff:7c:55:3c:58:8e:7a:3a:1e:4d:f5:cd:ac:02:d6:0c:
         fd:9d:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:29:02 2025 by rpki-client