Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
File:                     SV5QAUnOjXG5YEtYngwy_qB6mLg.mft (raw, json)
Hash identifier:          /7Rqs3A+E9a83BgzYlOUKnRYxzCfKB/1KLII1qtisdk=
Subject key identifier:   6C:65:B0:B1:4B:C9:71:64:8F:F9:B5:D2:73:6A:2A:10:AC:3C:6D:E6
Authority key identifier: 49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8
Certificate issuer:       /CN=495e500149ce8d71b9604b589e0c32fea07a98b8
Certificate serial:       01969F761CCCBBBAC4149D111DE6B20AA505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
Manifest number:          0465
Signing time:             Mon 05 May 2025 08:00:40 +0000
Manifest this update:     Mon 05 May 2025 08:00:40 +0000
Manifest next update:     Tue 06 May 2025 08:00:40 +0000
Files and hashes:         1: PW3nlM7nFnxOwsqkv-YkJFxzUD0.roa (hash: NPdwKJLvvFtq2Qp8PFg9ndUpDvahiFbdM9GL0rt3bw4=)
                          2: SV5QAUnOjXG5YEtYngwy_qB6mLg.crl (hash: xWFuA8DBC3ZCFLB869S0PG4oozjjML7CY1u38twZnmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:76:1c:cc:bb:ba:c4:14:9d:11:1d:e6:b2:0a:a5:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=495e500149ce8d71b9604b589e0c32fea07a98b8
        Validity
            Not Before: May  5 08:00:40 2025 GMT
            Not After : May  6 08:00:40 2025 GMT
        Subject: CN=6c65b0b14bc971648ff9b5d2736a2a10ac3c6de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:a7:b3:46:50:1a:aa:99:b5:74:24:a6:3c:
                    54:72:69:45:e5:f4:20:e5:31:b0:7e:64:7b:6e:a3:
                    7d:81:f0:99:43:90:e8:c5:99:19:81:13:c3:a3:77:
                    9d:89:4a:89:b4:16:98:7e:0e:30:bf:51:41:b2:2f:
                    bb:86:fe:aa:7f:f7:78:51:c5:5c:23:ad:24:70:dd:
                    89:93:4d:8a:5d:50:f8:a7:f6:37:5d:cf:6f:23:5d:
                    1e:88:d7:11:40:7b:f1:32:dd:c9:ca:e4:e9:ec:14:
                    05:32:93:c5:e3:8c:11:fa:6e:ed:26:88:06:4c:86:
                    7f:72:e8:c8:a9:52:48:12:25:58:8d:73:37:41:69:
                    ea:a0:5c:e4:b3:3a:e1:ba:58:80:02:f7:d4:a6:8a:
                    08:d6:40:b6:39:86:a5:16:c9:00:7c:7a:73:01:f4:
                    f4:3e:be:e7:2b:6e:26:25:6d:65:e9:8d:42:2f:37:
                    54:fc:98:a3:7c:f1:b3:7e:7e:82:ce:22:8f:6d:38:
                    15:11:6c:fd:e2:70:40:d0:d8:3f:3e:8d:a4:f7:7c:
                    b4:32:9d:98:8c:57:d7:32:0e:d3:cd:bc:af:9b:dc:
                    f8:ee:ef:0f:0b:28:e3:b8:b6:c8:82:6a:44:1e:34:
                    ef:8d:00:5e:c4:d1:0f:d4:85:a5:3d:5c:d9:37:cf:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:B0:B1:4B:C9:71:64:8F:F9:B5:D2:73:6A:2A:10:AC:3C:6D:E6
            X509v3 Authority Key Identifier:
                keyid:49:5E:50:01:49:CE:8D:71:B9:60:4B:58:9E:0C:32:FE:A0:7A:98:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SV5QAUnOjXG5YEtYngwy_qB6mLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e0cf43-e4c0-46f7-bde8-16fd5ba4f0e4/1/SV5QAUnOjXG5YEtYngwy_qB6mLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:b5:01:0c:32:56:85:b7:21:df:46:01:e7:9d:3d:8b:7f:
         03:8b:f8:44:0b:2d:ba:1e:39:85:ab:d9:95:ee:9e:a7:3e:01:
         58:0d:a3:dd:31:59:68:bd:93:60:ea:95:4e:7b:6b:01:b7:ac:
         93:73:bf:91:d7:76:8d:52:32:a9:c4:92:68:17:9e:12:ab:7b:
         1f:5c:be:53:f3:f6:89:3c:54:35:26:e7:d0:90:fa:71:5d:45:
         ba:66:4a:38:e8:cc:49:7e:47:cb:f3:7e:4e:be:15:86:17:c9:
         f5:d8:44:4a:76:67:ef:e8:4a:7f:56:6f:8f:c0:20:d1:a3:86:
         66:aa:26:d7:e9:73:d6:32:1f:43:5f:f8:66:7d:15:55:47:8c:
         5e:a9:db:85:57:68:55:7a:73:82:e4:bd:95:57:72:a1:f3:67:
         e3:fe:39:87:7e:1e:8c:1a:86:86:bf:a0:44:79:d1:67:3a:db:
         cb:c4:d9:de:9f:e4:a2:97:2d:15:62:d3:92:91:23:d8:fb:20:
         88:43:f0:3d:ec:db:10:ab:7b:9e:6b:75:57:02:9d:4f:81:89:
         c0:35:0e:66:e4:97:71:84:ef:0c:33:fe:fe:4a:2f:1a:bc:16:
         c2:8e:06:f9:75:3a:89:04:42:21:d8:39:ba:6e:f5:c4:5a:f5:
         cc:56:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:09 2025 by rpki-client