Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File:                     5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier:          GTMv42hhPn3sjMuvKAwxc4YYgu6TT+BP30JCwO9iEf4=
Subject key identifier:   6B:05:5A:5C:CE:AC:52:32:78:71:5D:C5:12:B8:41:B5:B3:9B:73:98
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer:       /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial:       0196C5711B0AE99B768B650107846C0439C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number:          0119
Signing time:             Mon 12 May 2025 17:00:46 +0000
Manifest this update:     Mon 12 May 2025 17:00:46 +0000
Manifest next update:     Tue 13 May 2025 17:00:46 +0000
Files and hashes:         1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: U5fSJS5vlJKC4fsckr+ypSCZKAGkYhOWism/eSzhtHE=)
                          2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:71:1b:0a:e9:9b:76:8b:65:01:07:84:6c:04:39:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
        Validity
            Not Before: May 12 17:00:46 2025 GMT
            Not After : May 13 17:00:46 2025 GMT
        Subject: CN=6b055a5cceac523278715dc512b841b5b39b7398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:97:47:a0:2c:18:ec:b1:76:89:44:57:c2:
                    42:ce:ed:70:a9:ab:52:10:0f:a9:8f:a9:62:37:84:
                    cd:ae:ac:d9:a3:37:50:8f:6e:c4:2a:54:45:88:12:
                    99:09:b6:e9:f1:38:15:40:69:2c:ba:3e:f1:a1:fb:
                    8d:87:19:85:94:60:e8:6e:7e:04:b0:6c:b9:95:52:
                    78:06:9b:6e:be:b1:dc:13:a0:d9:d1:15:c6:4f:09:
                    21:25:0e:b8:20:f1:2b:75:63:ed:04:b8:40:6e:d0:
                    2f:e1:e9:80:80:53:f1:f1:fa:7f:de:28:df:f1:8b:
                    45:32:1f:74:c7:94:10:e7:fb:03:41:f5:62:61:f3:
                    91:1e:bb:00:b7:96:14:53:f3:e5:27:fd:c5:5a:01:
                    ea:b7:81:3b:e8:89:67:36:ce:3d:8b:b1:95:a0:14:
                    7e:60:54:aa:1a:e1:25:55:99:df:19:8d:36:d0:9a:
                    c7:dc:69:b7:25:10:1a:41:6d:f6:f3:a8:34:a5:70:
                    84:74:89:f3:69:ca:f4:ca:14:f2:df:1a:1f:d0:3b:
                    ba:65:16:8f:2a:a3:53:98:49:b9:26:dd:6f:96:19:
                    93:4f:6e:58:3f:4e:7e:ee:0c:52:18:8b:59:12:54:
                    1e:87:6d:77:0d:61:50:f8:fd:fb:97:4b:25:6e:9e:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:5A:5C:CE:AC:52:32:78:71:5D:C5:12:B8:41:B5:B3:9B:73:98
            X509v3 Authority Key Identifier:
                keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:62:9e:81:48:84:1c:33:32:d6:87:af:28:68:56:89:ed:72:
         4f:2a:49:05:24:ca:69:21:ed:5c:ab:e0:32:36:96:01:18:ae:
         73:2a:53:5f:81:c0:82:61:2a:7c:b2:96:e1:0a:1b:92:97:95:
         68:9e:fe:60:33:78:c1:12:15:8e:93:93:01:5e:23:d8:59:31:
         e2:13:1f:28:13:d0:fb:92:e8:e1:ae:ed:c6:47:34:45:45:d3:
         82:1f:05:66:8f:55:d8:d4:45:6b:d3:f0:b8:ca:cb:5c:d3:51:
         56:36:7a:ec:61:fd:47:1a:e2:e8:88:d7:27:84:8a:04:7d:1c:
         fa:0f:32:06:c2:6f:fe:55:b0:8b:47:35:2a:a8:e0:fd:6d:12:
         be:09:90:f1:f9:57:dc:4f:4c:11:a2:a0:ce:7e:95:d4:e6:d6:
         81:57:e1:72:a1:6a:0a:d3:74:57:0d:7c:bf:0e:e9:04:92:5e:
         55:3c:12:6c:9c:50:3d:36:39:54:c0:d1:99:89:77:12:67:f6:
         88:c8:92:41:60:c2:06:56:88:b8:5f:6d:45:ed:d0:96:af:bb:
         e5:4a:a3:ae:9c:0c:8d:e5:6c:98:d5:de:bc:30:a2:28:29:74:
         af:7b:71:61:e0:09:93:95:46:b7:34:bd:b3:e9:06:c0:26:10:
         21:37:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:07:16 2025 by rpki-client