Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
File:                     5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json)
Hash identifier:          o8TE6cMC9T8wlEDMsOmGICElsUJpwc6dkSGvXA54abs=
Subject key identifier:   30:4B:49:89:05:1E:31:31:02:0F:87:F5:34:A6:B9:19:6A:1D:97:77
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Certificate issuer:       /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial:       01976EF4F8853C5ACDA484B0C4D55FA62297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
Manifest number:          0C08
Signing time:             Sat 14 Jun 2025 15:00:37 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:37 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:37 +0000
Files and hashes:         1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: r2NvBnG0czoiG6ylmnVFsRJGCrb+g677KOalFyM03lk=)
                          2: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (hash: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=)
                          3: lX6hj9K_SgWpbjs9Vm4h-iLqKxg.roa (hash: sh68gHRxqa7fIqQfLrHiW3Yb8Ld23ANUs7IVCd+duFY=)
                          4: r9qf6KgX9IgFo0eq5J1Iki9tbIU.roa (hash: 5vA2NlXN7t+qJxC8MfIinBSgfDV+e3NTP2tOSZC2XEw=)
                          5: tZVX3qYygm8mhqLKvtgCUl1qics.roa (hash: C3pcGXYwCjQl9eRypOyqTAkBmg+sjPi6ucd+K6cZcQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:f8:85:3c:5a:cd:a4:84:b0:c4:d5:5f:a6:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
        Validity
            Not Before: Jun 14 15:00:37 2025 GMT
            Not After : Jun 15 15:00:37 2025 GMT
        Subject: CN=304b4989051e3131020f87f534a6b9196a1d9777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e9:4a:84:f7:25:46:c4:c6:f8:a7:fd:50:56:
                    7f:bb:e1:7a:2e:84:54:82:02:72:45:2a:73:61:18:
                    5e:65:07:de:34:fc:23:0c:df:cd:cf:7f:bc:5e:e3:
                    13:e3:09:80:07:16:89:b0:da:7d:02:5b:6c:7e:ad:
                    94:fd:77:b4:c8:b7:a4:af:41:d3:1f:2e:3e:24:7d:
                    6c:96:7c:87:43:f5:25:2c:c3:6d:20:94:0c:30:5a:
                    00:40:a7:e9:d7:5e:3f:b1:e6:ac:79:3c:37:7f:6f:
                    a3:f2:dd:da:f7:78:12:05:b7:74:fa:6f:09:bb:94:
                    31:42:94:52:1a:4b:d2:46:25:91:b5:82:04:5e:7c:
                    cb:fd:c4:7a:17:96:b9:49:8d:3f:8e:44:0e:1a:6b:
                    57:08:17:b7:a0:07:e6:81:00:b7:d6:97:af:32:1d:
                    b3:80:e4:14:d7:ac:28:4f:31:c7:da:77:d8:ea:51:
                    ed:86:68:b5:0f:ad:4c:94:bd:0e:b7:db:8e:fe:de:
                    b5:66:28:a0:db:01:79:a8:00:db:53:17:54:03:c1:
                    be:fb:8f:91:ba:3c:29:56:4d:ff:ca:0e:8f:8a:dd:
                    4e:67:5d:a7:56:f8:80:03:6a:87:d1:a9:39:df:5a:
                    63:38:3e:a7:ef:a6:09:0f:9d:a1:b1:85:18:ae:a8:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:49:89:05:1E:31:31:02:0F:87:F5:34:A6:B9:19:6A:1D:97:77
            X509v3 Authority Key Identifier:
                keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:f7:54:58:22:dc:41:c2:a0:2f:a8:d3:6b:65:03:e1:b4:
         04:b4:b8:47:31:4a:23:f7:3f:f7:dc:12:7e:fd:00:02:09:6f:
         29:db:0f:bc:9a:88:96:8d:b8:74:57:d1:2f:6b:bb:58:a1:b8:
         b9:f1:61:b0:1f:c1:92:65:cd:66:be:89:e7:cc:46:0a:dc:45:
         07:63:e2:a6:b2:da:5e:1b:89:38:d4:7e:74:90:4c:ff:cc:d8:
         b4:46:b0:8b:47:06:bf:b5:ea:53:3f:c2:46:83:51:fb:97:72:
         08:a8:cf:40:52:68:7c:8c:1d:a3:9f:dd:30:b9:28:d9:a7:e5:
         9a:f5:8d:6a:70:8d:a9:87:d2:a8:46:d1:21:6c:40:35:10:44:
         db:f9:09:af:c8:02:d5:e9:2c:60:28:03:16:c6:d8:a5:31:68:
         85:e8:df:65:63:59:27:8d:33:8e:13:60:61:14:5e:61:0a:cf:
         d7:6b:ab:03:e9:88:54:14:31:77:6d:09:61:b6:5e:9c:85:2e:
         e8:d9:bc:b2:94:0a:58:e3:91:a2:ee:ed:07:4c:5a:0f:19:09:
         1c:81:8d:b9:41:61:cc:ef:e7:c5:0f:c4:1e:b2:72:8f:00:b0:
         bc:be:1c:39:15:49:c9:6e:e0:87:36:51:6e:3b:ce:d4:75:7e:
         27:d0:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:58:39 2025 by rpki-client