Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File:                     n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier:          pM4VJ8XeVqQKL98bPK0ic4Orq7OHuXJ3Lzv8DmC1x7E=
Subject key identifier:   56:AA:1B:E7:6D:DA:9E:57:A7:D6:A5:92:FD:1C:53:8A:07:CE:E5:19
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer:       /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial:       0197B8C5ACADAA2DE3D186A4B0BCB886494D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number:          B6
Signing time:             Sat 28 Jun 2025 23:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 23:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 23:00:51 +0000
Files and hashes:         1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=)
                          2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: Gx3i5dBFcN+oPYUY38iNBhd1ePcfCE4XEOOUmnr5Qts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:ac:ad:aa:2d:e3:d1:86:a4:b0:bc:b8:86:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
        Validity
            Not Before: Jun 28 23:00:51 2025 GMT
            Not After : Jun 29 23:00:51 2025 GMT
        Subject: CN=56aa1be76dda9e57a7d6a592fd1c538a07cee519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:57:7a:d7:cb:6b:0e:1c:ac:04:93:dd:b1:
                    d5:04:63:12:b5:43:f5:91:c5:d2:ef:d2:d5:0b:04:
                    8a:f9:8d:24:40:14:13:d6:66:64:31:c5:e2:fa:e6:
                    6e:d0:49:4c:e9:41:33:d1:94:bd:be:69:e2:5d:50:
                    3c:b3:66:a1:a4:bd:b3:6e:24:52:d1:a9:d1:68:7f:
                    3b:11:dc:85:15:3f:4d:f1:e6:3f:81:bd:4b:e8:37:
                    ca:f6:9a:24:5f:7a:61:07:fd:65:fb:72:81:76:70:
                    4a:98:81:2b:c8:fc:ce:ba:49:0b:a6:94:1a:84:21:
                    1c:0d:82:03:f8:06:0a:14:44:0e:a0:a0:05:26:52:
                    bc:59:11:e7:bf:31:40:fd:3f:f4:3c:f8:ad:fd:85:
                    86:86:9b:02:6b:09:c6:69:1e:08:b7:7a:55:71:85:
                    e0:98:db:d9:5c:cc:b5:5f:c2:5e:1a:d1:b0:52:7a:
                    f1:ae:b5:d0:77:1b:c7:71:f2:eb:e1:12:d1:69:47:
                    96:a1:28:81:8c:9e:91:ec:53:c3:d6:a3:62:00:e9:
                    41:b2:f6:81:3a:a0:48:4f:99:7f:e4:16:07:5b:ee:
                    49:79:00:cf:24:28:81:70:3e:84:76:d6:89:5f:0c:
                    65:e3:ca:12:3e:07:2f:e3:85:c6:16:c2:a0:d5:08:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:1B:E7:6D:DA:9E:57:A7:D6:A5:92:FD:1C:53:8A:07:CE:E5:19
            X509v3 Authority Key Identifier:
                keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:14:5b:b2:e9:00:ea:05:25:d3:ed:d8:c4:a6:eb:9d:96:
         db:fb:37:6c:43:a9:9f:f1:53:5e:ca:95:72:67:a9:c1:3c:17:
         54:45:ae:8e:3d:ef:ff:37:3a:8e:b9:1f:ef:3d:68:24:1e:6b:
         78:e7:76:fd:2c:f3:c7:1c:c4:01:5d:b1:70:5f:74:9a:ee:b0:
         f9:b8:99:13:13:b8:9a:2e:be:46:1f:21:a9:00:ab:8e:f4:d9:
         ca:c2:99:e6:20:a6:13:07:51:f9:67:38:4f:62:9c:e9:7a:74:
         23:6d:93:dc:d8:12:45:da:d1:1d:39:80:1a:d0:91:95:18:8e:
         82:b2:9a:ea:3c:3f:51:2c:c9:c0:a9:6d:88:c7:db:bd:39:45:
         98:d2:ea:57:fe:bf:66:13:35:45:e4:28:0b:d1:87:80:b1:17:
         4d:de:ad:5f:ed:0f:76:1d:e9:98:fc:84:7d:76:18:05:50:4b:
         16:19:2e:6a:f7:ee:db:0d:2d:e8:40:4b:05:1f:ff:b8:de:c7:
         e4:75:d5:b7:5d:e1:ce:18:84:d3:77:6e:48:fc:ee:c7:85:37:
         74:fe:bb:a7:9e:b4:f5:69:4d:14:04:38:15:b5:1a:00:80:ef:
         00:dc:94:1a:82:ca:53:a3:47:2f:c4:b1:a6:6c:cf:cd:ed:d3:
         31:3c:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:08:14 2025 by rpki-client