Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          ZzkILwPhye3c+euycJFkLrPjq2IbelR8sdSHKz9VXNg=
Subject key identifier:   E9:B8:4E:BE:98:81:89:9B:C6:E5:A5:F3:8E:E3:D8:01:A0:92:72:AF
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       0197B5FBDBCB71218E62FC0823EDD8ECE3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          0980
Signing time:             Sat 28 Jun 2025 10:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:11 +0000
Files and hashes:         1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: 3rFy0yxgqH8MuNkrG1L/8n3vKX7uTinAAszhGYiaEo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:db:cb:71:21:8e:62:fc:08:23:ed:d8:ec:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: Jun 28 10:01:11 2025 GMT
            Not After : Jun 29 10:01:11 2025 GMT
        Subject: CN=e9b84ebe9881899bc6e5a5f38ee3d801a09272af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:07:a8:58:70:cc:10:7e:13:e5:3c:fd:36:
                    85:b4:5f:11:b1:2e:29:a2:81:f7:fb:ca:fe:a8:cc:
                    36:9c:a3:06:75:9f:b4:f3:04:47:91:71:ad:54:69:
                    30:a1:fc:50:3e:c7:fc:40:61:84:58:ac:2d:df:c1:
                    e2:9a:5f:33:72:44:9b:4e:62:de:2f:40:04:ee:27:
                    29:f5:d7:39:b4:f2:92:23:55:61:3d:0d:99:6a:47:
                    75:c5:5d:87:ff:2a:9f:be:52:09:9f:68:43:d3:b2:
                    37:5e:7b:f3:36:12:a0:37:d5:4f:2e:01:92:44:51:
                    20:b2:f7:c8:fe:08:59:78:66:fa:03:dc:26:1d:39:
                    e9:3a:8a:60:95:73:50:89:7e:6a:94:11:20:c4:fd:
                    69:ae:72:eb:51:76:35:df:13:77:e4:00:33:19:33:
                    3a:b1:65:c7:c7:f8:2c:09:07:62:5f:5b:77:e3:cf:
                    63:53:36:b0:b0:e0:a5:b7:b8:f8:c0:03:f4:49:2c:
                    9c:9c:03:31:e3:bc:13:e6:4c:36:fd:c8:d3:a5:3b:
                    bc:cf:d8:dd:7d:27:50:96:5e:3e:c9:4d:fa:7f:72:
                    63:49:59:73:f5:f3:8d:d1:9d:2b:9c:8a:86:ec:26:
                    0c:45:41:ba:09:66:f4:16:da:4a:f3:52:53:eb:d1:
                    13:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:4E:BE:98:81:89:9B:C6:E5:A5:F3:8E:E3:D8:01:A0:92:72:AF
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:17:54:7f:e7:73:56:dd:73:f4:3b:2a:98:7e:75:c1:4f:78:
         af:bc:2b:44:1d:eb:c2:27:ea:4d:4d:91:0c:e3:e7:2f:6f:92:
         13:ba:b0:09:c0:b5:3c:dc:7f:1d:ee:af:94:64:33:f8:08:9e:
         aa:9d:7d:49:c3:7a:5d:60:8d:0d:2a:4c:3b:8e:25:ba:56:55:
         19:bf:f4:55:2c:54:af:24:e8:44:af:c3:6a:a7:3b:16:9a:6c:
         27:e4:8b:b8:71:87:77:f3:dc:f2:80:1b:70:52:2d:2f:cd:f2:
         80:dd:02:5a:d5:33:88:4b:6d:37:2a:e3:27:bd:90:9d:8c:49:
         cd:a5:ae:09:84:34:62:de:c2:c1:4f:3f:c9:49:99:19:6f:73:
         68:5f:ee:4b:3b:a4:3e:b4:99:ff:5d:8b:d7:8a:d0:9c:35:4b:
         a0:3e:b2:a1:02:2f:e1:18:fd:7b:bd:07:93:73:a3:88:a5:16:
         64:fd:99:8f:58:00:79:3d:49:69:4d:d8:64:34:9f:90:dc:f9:
         7d:cd:0c:4d:5e:92:e1:3a:56:9a:ab:e1:6f:44:7d:b1:af:02:
         89:17:46:f9:4a:7d:a7:ff:b8:82:d5:2f:f1:fc:3e:1e:b7:71:
         65:c4:97:49:dd:fe:48:53:3a:46:1b:53:bc:1e:a5:9a:97:9e:
         4b:cb:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:24 2025 by rpki-client