Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File:                     n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier:          5pyN26EIjj+IipRKjCikylyHpHNVBpbW+zOO8NAyw/4=
Subject key identifier:   9B:EF:20:5A:88:4D:10:7F:7A:59:66:EB:FE:46:36:4C:82:B7:83:97
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer:       /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial:       01976C621EE9002357C3816AE2303851A1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number:          04F7
Signing time:             Sat 14 Jun 2025 03:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:59 +0000
Files and hashes:         1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
                          2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: v8uJ2Q9uCt1zyTtjWbk44xHVLNr8cmVjatFyF+p9I6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:1e:e9:00:23:57:c3:81:6a:e2:30:38:51:a1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
        Validity
            Not Before: Jun 14 03:00:59 2025 GMT
            Not After : Jun 15 03:00:59 2025 GMT
        Subject: CN=9bef205a884d107f7a5966ebfe46364c82b78397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:71:70:85:ba:72:f6:56:98:1f:91:f0:73:
                    d0:7a:da:e2:fe:65:20:a2:fd:e5:17:58:cb:03:4c:
                    5b:6e:66:00:02:38:13:9f:5e:a9:55:fb:1b:32:31:
                    c5:4e:a0:fa:d5:f7:4e:77:af:33:73:d4:6d:d4:a2:
                    38:bf:80:7a:ec:d1:fc:c8:96:2c:ee:56:9f:b9:3f:
                    f8:12:cc:45:81:66:05:cf:3b:98:fb:7e:c4:73:91:
                    d3:4d:47:2f:25:1b:20:15:bf:af:47:bf:f3:02:81:
                    eb:32:c3:b6:52:3d:56:aa:a5:2b:91:bf:1e:74:40:
                    42:9d:66:1d:86:22:89:2c:34:92:de:24:34:b5:dc:
                    0a:1d:8d:87:3c:2e:92:60:e4:40:ad:29:1f:c3:95:
                    2a:42:c7:d2:fb:ac:a5:1f:bd:04:a7:62:fc:c7:df:
                    3d:7f:fe:9e:e9:82:b4:09:19:ec:66:e3:89:1b:82:
                    23:c2:0e:65:2e:c6:d0:cd:b5:0f:a8:8c:47:bd:6b:
                    d9:c2:d4:b2:be:ff:22:fd:5c:82:1e:6a:91:27:86:
                    1b:51:45:f9:31:6b:90:ce:cc:ed:f4:0d:69:10:54:
                    21:52:db:db:2f:34:df:f6:d9:b4:38:16:a9:3b:f0:
                    81:33:9f:71:bc:d2:ea:85:c2:3e:10:02:c7:d7:c9:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EF:20:5A:88:4D:10:7F:7A:59:66:EB:FE:46:36:4C:82:B7:83:97
            X509v3 Authority Key Identifier:
                keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:16:fc:5b:53:a3:6d:42:3d:8b:91:a8:51:e2:9d:68:3f:
         58:eb:39:0d:0b:04:b1:f0:1d:32:ac:2e:90:d3:58:6e:96:db:
         0e:f3:a6:4d:d0:b1:4f:4d:84:04:eb:5a:4d:95:a5:18:e8:a3:
         41:50:98:58:1b:da:99:18:4b:88:e8:98:57:d3:a6:e0:7c:9c:
         6b:9f:6c:0d:1d:4e:7d:e2:70:9f:6b:3b:b7:82:05:35:95:7f:
         32:82:bf:7f:84:a4:da:e3:e7:5f:ab:e5:59:62:14:ff:a2:20:
         52:f8:44:15:75:35:bb:1e:7f:1d:5e:77:5f:77:1a:63:ce:a2:
         d6:6f:fc:81:e4:8e:1c:d6:97:22:ad:71:14:1b:18:ee:de:68:
         0c:05:b1:67:78:37:6d:e2:02:92:b1:36:54:72:0b:3d:24:6a:
         18:b5:f2:c4:cf:a2:cc:15:b4:92:ef:b0:51:60:11:e6:f7:f4:
         34:ef:71:83:52:d9:75:da:64:70:3d:3a:0a:ed:d3:d1:c2:5c:
         23:3c:7a:d1:07:c7:f5:b6:61:d8:35:eb:64:a3:d6:68:04:00:
         b8:78:48:d0:f6:5e:9c:6d:ce:0c:53:c5:e4:22:5b:f7:9c:1f:
         9b:ef:8b:e4:28:b7:ac:f1:72:ac:48:50:60:4a:4d:8b:dc:15:
         be:f7:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:41:45 2025 by rpki-client