Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
File:                     5cn_8vjtDWWq0LlPgDby7hru6go.mft (raw, json)
Hash identifier:          FaCe9X6hD32+2KFZhKpTuV80Fw/qoBfrmQk66oRgkKc=
Subject key identifier:   09:B6:83:3B:E2:C5:98:C9:8D:15:46:C0:73:84:0F:2D:22:6E:D3:F3
Authority key identifier: E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A
Certificate issuer:       /CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
Certificate serial:       0197707564CAB5233843975B12A42CF45E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
Manifest number:          13D7
Signing time:             Sat 14 Jun 2025 22:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:31 +0000
Files and hashes:         1: 5cn_8vjtDWWq0LlPgDby7hru6go.crl (hash: B/51iYJXnE5tYxrguGGUPkQ7+x7DgbuDjSuqz6cyWdc=)
                          2: taYmShyZEWW4U8j1R_6KnQDOweM.roa (hash: GjJYuf7T9BVgN+aam1ca3lpMWRi293GWW2n+eayTU5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:64:ca:b5:23:38:43:97:5b:12:a4:2c:f4:5e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c9fff2f8ed0d65aad0b94f8036f2ee1aeeea0a
        Validity
            Not Before: Jun 14 22:00:31 2025 GMT
            Not After : Jun 15 22:00:31 2025 GMT
        Subject: CN=09b6833be2c598c98d1546c073840f2d226ed3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:3a:1c:a9:d0:ad:c1:b9:8f:d8:40:d4:6d:
                    c0:31:1e:d0:af:c0:6d:2c:8d:2b:30:ac:64:9e:01:
                    61:b5:b3:7a:1b:f1:47:a5:45:d4:79:57:5e:ac:ca:
                    14:96:5d:a1:1e:89:8c:41:96:0a:35:20:83:b4:fe:
                    8b:00:52:3e:4c:8c:bb:82:77:90:e3:7f:c0:21:78:
                    82:a3:7e:54:23:56:df:77:4e:ee:39:12:59:b2:db:
                    b0:35:a5:39:1c:65:80:23:66:97:89:f8:16:53:79:
                    be:33:07:27:93:ae:ec:ff:cf:ed:79:67:71:ae:ef:
                    5b:5a:7d:bc:28:a8:e6:37:9b:05:ee:81:40:22:55:
                    9f:6f:d9:02:c5:e7:ba:1f:44:06:da:8b:17:63:f9:
                    27:1b:8a:a9:e9:4c:c3:7c:1c:e2:b6:0c:85:36:c6:
                    87:ad:a6:81:56:17:18:bb:ee:c1:a0:d3:e7:da:00:
                    03:8e:35:5c:1b:fc:bd:83:4e:8d:02:11:94:82:88:
                    b9:2e:31:6f:71:88:56:71:17:d1:4c:e1:7e:7e:5d:
                    8f:43:34:3a:cb:a2:e3:94:a4:73:d4:7a:f6:30:eb:
                    93:71:af:39:8a:85:36:23:30:cb:2e:bd:a7:8b:18:
                    a7:62:00:5c:d5:84:d9:2f:03:3c:aa:a7:f3:0f:60:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:83:3B:E2:C5:98:C9:8D:15:46:C0:73:84:0F:2D:22:6E:D3:F3
            X509v3 Authority Key Identifier:
                keyid:E5:C9:FF:F2:F8:ED:0D:65:AA:D0:B9:4F:80:36:F2:EE:1A:EE:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cn_8vjtDWWq0LlPgDby7hru6go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/af23c6-efec-491b-87cd-9faa62a1f178/1/5cn_8vjtDWWq0LlPgDby7hru6go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:70:bf:5f:66:ba:58:ec:0f:7b:12:8a:53:1f:94:86:68:e0:
         9a:11:07:bd:67:35:54:53:a4:29:56:8f:8f:24:89:37:c9:58:
         48:a3:cc:8b:50:3a:91:81:e2:50:c2:75:a8:c1:07:1b:6d:52:
         ba:19:16:a4:99:43:19:9b:ba:e7:a3:8e:b2:78:06:52:60:00:
         ba:e4:71:02:e9:68:2d:ee:12:70:04:8b:af:f3:1a:3a:29:6a:
         1f:14:b2:3c:06:5e:ae:cc:7d:ea:c1:6c:8d:66:e8:e7:53:7d:
         a4:a9:a7:23:26:bc:62:89:cc:21:52:f1:f0:9e:20:d3:93:13:
         da:be:4a:8f:7d:ea:16:ff:0d:61:6c:79:91:39:c3:05:fb:dc:
         27:42:4a:ad:0d:4b:9a:0f:e5:44:a9:77:fd:92:58:46:5c:32:
         11:ff:a9:97:02:53:ad:5e:91:08:b0:0e:dc:ba:ff:e0:d2:75:
         42:ea:7c:81:c4:19:d5:d9:f5:66:72:33:0e:6f:b5:60:f3:30:
         bc:56:1c:d3:da:d2:66:eb:46:a9:15:3a:de:4c:f6:0b:ea:9f:
         ab:40:e9:25:9a:cc:7b:94:82:5a:f3:ef:ec:7e:28:1c:c9:9f:
         21:57:cc:2b:53:b2:d6:2f:76:cf:26:64:63:2b:89:22:07:c7:
         c2:ed:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:53 2025 by rpki-client