Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          9w7QAcDg4KkFpmqvcDGacqr6n6Fj80Y3XMmR5Fb6KLQ=
Subject key identifier:   ED:E6:1E:FB:FC:16:4C:15:24:75:6D:BF:40:8E:A9:B2:E7:CF:46:07
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       0196B9359890398C870C4A6BD35001F97C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          1087
Signing time:             Sat 10 May 2025 08:00:19 +0000
Manifest this update:     Sat 10 May 2025 08:00:19 +0000
Manifest next update:     Sun 11 May 2025 08:00:19 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: wBny/Pe+n6aW57NEKrsxmzICjcE3itZPwxHnjhR+R+0=)
                          2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:98:90:39:8c:87:0c:4a:6b:d3:50:01:f9:7c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: May 10 08:00:19 2025 GMT
            Not After : May 11 08:00:19 2025 GMT
        Subject: CN=ede61efbfc164c1524756dbf408ea9b2e7cf4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:18:03:e2:f9:dd:16:f1:d5:e8:e6:ce:d3:
                    96:ca:78:65:79:32:b0:61:92:f2:6e:fd:8c:71:74:
                    b1:90:01:64:41:ff:86:d7:01:b7:0b:97:18:23:73:
                    9a:42:5b:f2:ec:36:55:c1:07:91:4d:00:3c:c9:ba:
                    85:32:7a:21:87:f4:0f:3a:42:19:d7:40:50:20:0f:
                    53:3b:a0:f1:0e:e7:76:9f:4c:bf:2c:f7:f3:d5:ee:
                    ba:67:b8:f5:30:89:63:0e:93:10:98:3c:da:86:b6:
                    cd:e5:61:99:8e:1a:4b:0a:bf:1c:ed:10:46:32:4f:
                    74:33:a9:90:a3:30:49:90:fa:14:dc:e8:57:91:de:
                    aa:e5:7d:2e:fb:88:bd:66:a8:ca:5e:40:fa:7d:fb:
                    70:91:25:44:63:36:83:30:52:4d:b1:b1:45:3a:6d:
                    41:0c:35:93:00:db:a0:64:da:08:48:86:93:a5:31:
                    d5:97:34:f5:2f:18:37:7e:0f:03:8e:73:32:9f:d9:
                    4b:24:38:dc:b3:34:81:8b:2d:d3:f9:5f:c1:6c:62:
                    e9:36:4f:ca:43:94:6b:ea:a4:af:ca:87:b4:90:d9:
                    1c:f5:ff:40:aa:7c:58:9e:1b:79:99:19:7e:b4:2b:
                    7e:62:04:0b:39:56:9d:cc:2a:d9:6f:12:9c:79:b8:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:1E:FB:FC:16:4C:15:24:75:6D:BF:40:8E:A9:B2:E7:CF:46:07
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a1:43:6c:45:dd:4a:fd:9d:86:69:bc:25:e6:1e:e0:05:4b:
         81:dc:6b:e5:68:5d:51:d1:52:a5:7f:8c:85:f3:18:c0:18:64:
         ce:1d:95:0f:67:47:b9:c7:80:9b:1f:11:2b:69:0b:91:8a:65:
         f8:49:b2:10:5c:b1:fa:a6:5e:45:f3:fb:e7:7e:c7:86:80:b0:
         59:85:86:2b:e1:4c:1c:88:1d:35:6a:ab:ee:8f:b5:b1:1c:ad:
         45:07:c1:55:14:b3:15:64:2c:90:2a:fe:0e:1e:49:57:d3:b3:
         a5:83:f1:67:96:26:b9:06:e9:bc:de:79:5a:55:db:ac:40:12:
         70:81:35:49:00:5e:ad:a5:b6:a0:cd:93:3b:e2:63:8f:ba:59:
         30:e7:0a:6f:a8:69:51:cb:37:0d:4a:67:2d:c9:ce:3a:3a:a5:
         88:6c:ad:d5:e5:b0:eb:66:d4:ca:73:9a:43:5a:99:21:db:4b:
         e4:10:5b:55:d4:05:fa:0a:6a:c9:71:c6:88:24:bb:24:36:61:
         a9:07:a8:fd:5e:f8:7f:56:3d:5a:cc:c9:be:89:f4:f4:71:54:
         16:9c:cc:7a:91:10:01:ac:68:19:de:f7:72:8d:c9:5a:fa:12:
         53:80:c6:85:d9:5d:41:00:c7:12:d8:85:e4:1f:92:04:ad:fb:
         c0:57:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:12:01 2025 by rpki-client