Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
File:                     F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft (raw, json)
Hash identifier:          +55U8OrgPTxlevjaxFa7oefqp9YUFfe6EXBEU11xPng=
Subject key identifier:   2A:98:3D:DE:9E:F9:00:42:EF:EA:52:13:88:50:2F:68:AD:F5:51:34
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Certificate issuer:       /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial:       0197B7456EE9BBA518480A045CC460D7415C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 16:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:10 +0000
Files and hashes:         1: F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl (hash: 9AbK7xj2V9j9VrFZM3kSVj18MU0y0Bn2EP5f3d/1Bhw=)
                          2: WmJngWZzmKvAdcCFlnXZaxyPpiY.roa (hash: uKArgllEdQakrvIrUr4Tsros7JNu1glQJvvnJhzoD8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:6e:e9:bb:a5:18:48:0a:04:5c:c4:60:d7:41:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
        Validity
            Not Before: Jun 28 16:01:10 2025 GMT
            Not After : Jun 29 16:01:10 2025 GMT
        Subject: CN=2a983dde9ef90042efea521388502f68adf55134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:d7:8d:d7:27:0e:bc:8e:89:14:55:f6:c4:
                    1b:ce:7e:79:f4:43:a1:20:c1:6f:cd:4a:fd:19:f9:
                    c2:62:3e:91:24:6d:47:00:06:5a:47:8e:ee:a5:e7:
                    29:e7:56:d6:61:9b:be:12:b8:97:34:1b:97:49:8c:
                    1c:7d:ea:79:e6:ee:00:c9:b1:7c:5d:c3:57:3d:42:
                    fc:34:34:e1:6c:67:18:57:a7:6c:2b:1b:af:39:48:
                    ae:f1:df:c9:f7:2d:98:92:8c:01:6e:4e:44:4d:75:
                    ad:1c:03:c6:8f:32:84:4c:b4:1a:a4:d8:74:7a:9e:
                    5e:27:81:38:85:5a:65:3d:58:d5:b8:f7:55:fb:bb:
                    4f:cc:f7:34:16:70:e5:07:59:84:94:24:e3:d2:d9:
                    e3:4e:db:8f:30:f9:63:c7:28:7b:17:61:d8:b4:67:
                    ad:20:80:6e:e3:7d:86:a1:6f:f9:a5:3b:3a:d5:dc:
                    6a:36:fe:08:ea:a7:ea:50:5a:ad:78:64:f7:33:db:
                    ce:f5:81:7d:47:15:2c:57:c1:f8:76:ad:d2:71:bd:
                    14:ff:e8:35:0a:a3:25:ec:41:43:6b:23:52:fb:00:
                    e3:34:27:b4:d5:60:11:9b:1e:af:9e:d3:aa:69:32:
                    c4:ea:b6:e0:47:6d:31:60:6f:45:e7:2c:ec:eb:63:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:98:3D:DE:9E:F9:00:42:EF:EA:52:13:88:50:2F:68:AD:F5:51:34
            X509v3 Authority Key Identifier:
                keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:58:8e:da:5e:be:14:eb:79:98:f0:fa:2f:61:4b:35:5b:06:
         ab:cf:1f:cf:be:d4:3f:4d:16:0d:0c:4d:3d:f4:7b:66:d9:4d:
         cd:e5:df:22:03:eb:f2:b1:71:56:85:64:b9:95:6a:f3:4f:15:
         43:8f:fa:04:15:d8:06:b0:f4:af:1f:82:06:d5:a2:49:2b:1d:
         3c:05:2c:57:55:0f:a0:8c:ef:48:9a:9f:55:b4:bb:a6:b8:2e:
         ef:b0:05:ba:73:12:4e:8a:d9:fb:b5:ee:e6:9d:dd:b7:90:24:
         4e:40:5c:4d:d2:b3:41:d3:de:b8:ac:42:55:01:7e:67:bd:f1:
         ff:98:12:a2:8b:7a:61:d8:15:35:8a:3d:e6:57:f5:0d:36:85:
         18:f9:dc:1a:35:d0:98:79:74:e5:6c:4f:44:cd:8b:08:b0:2c:
         b8:9c:cd:1d:0f:1c:0c:9d:6e:95:30:09:19:3e:6e:da:63:35:
         50:1c:de:51:b7:d1:07:5e:5d:1c:b9:29:d7:64:20:90:5e:fb:
         d6:ba:7d:37:2f:e0:e0:cd:ab:a5:1b:30:4e:38:b7:b2:58:23:
         02:af:48:a4:43:a4:49:58:ef:b7:8f:b8:71:fd:40:a4:67:34:
         d2:b7:a2:e0:39:4e:14:36:79:bd:05:e4:54:51:4f:d9:29:0e:
         b8:3e:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:16 2025 by rpki-client