Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File:                     R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier:          jZSzZUIMokmqWlYU0vQU00C+767syDLxCA4FXjrstQw=
Subject key identifier:   78:02:76:DF:2A:30:4E:C2:E0:F8:5B:EB:41:32:CC:16:77:72:19:F9
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer:       /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial:       01968F94E8FC272D9D6148BAA66892E55F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number:          0F67
Signing time:             Fri 02 May 2025 06:00:22 +0000
Manifest this update:     Fri 02 May 2025 06:00:22 +0000
Manifest next update:     Sat 03 May 2025 06:00:22 +0000
Files and hashes:         1: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: qaYPk/lUh3l5q2f3JqAPZ4I9kdNfLJ+91B+glan5zZw=)
                          2: YwpFL-la1dCDFyOhJkDlnsbvc0E.roa (hash: 5Fts0SsJTbarORUPjAMAPXr3a1lfXPj9HBkPNFyTj4M=)
                          3: dEKlYH2cmj45z4x_T9UVuavDVhs.roa (hash: Ol+cnfARbBRUjhEvoMIs6jgxKtNHaBvPnq4IVRHSiu4=)
                          4: v05yfGi9C_17HLObMwDo5FEICGE.roa (hash: /OVS3c7m1p/c35QFzc0QWZFHRzFKrme9OTRuEH9/X8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:94:e8:fc:27:2d:9d:61:48:ba:a6:68:92:e5:5f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
        Validity
            Not Before: May  2 06:00:22 2025 GMT
            Not After : May  3 06:00:22 2025 GMT
        Subject: CN=780276df2a304ec2e0f85beb4132cc16777219f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:87:cf:ea:49:11:be:e0:7c:03:2f:ad:95:
                    53:e8:3a:9a:8c:3f:63:6f:47:bf:1a:08:d4:b6:dc:
                    8e:a6:3c:16:a8:20:3c:4f:0f:70:a7:c2:bc:fe:75:
                    bf:43:34:b1:2a:d3:a7:e0:53:33:70:a5:39:50:bd:
                    c5:f1:0a:21:50:07:73:96:9c:89:1e:f5:af:ef:21:
                    27:f9:a0:f6:c1:f5:82:45:1c:03:1c:fc:29:5a:55:
                    3c:77:3c:e0:dc:5f:5d:2e:49:fc:32:b1:f9:9a:5f:
                    22:66:be:ce:95:c3:06:a6:f1:e4:8a:c6:5f:e1:4f:
                    b2:8f:b8:05:3f:80:b9:c0:47:f2:f1:f0:d9:10:10:
                    e9:b8:3f:7e:b7:36:70:cf:c1:89:85:2c:62:69:ae:
                    6d:a3:f6:7b:2c:77:1b:a6:e4:c8:2f:74:2e:61:91:
                    db:f4:8f:6f:60:ac:00:c4:05:48:3a:75:8e:88:cb:
                    80:02:af:05:0e:25:7a:3d:e0:3c:04:55:29:d3:e7:
                    c9:20:01:1a:d0:72:b9:55:1f:84:4f:7d:aa:99:ed:
                    9f:13:eb:be:55:75:bc:83:1b:43:4e:16:8e:8b:69:
                    8e:72:9e:fb:d2:a2:e1:93:3f:10:1b:42:67:9d:e9:
                    f4:45:61:18:04:0e:bc:06:13:21:bb:06:d2:44:94:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:76:DF:2A:30:4E:C2:E0:F8:5B:EB:41:32:CC:16:77:72:19:F9
            X509v3 Authority Key Identifier:
                keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:df:6c:e7:e2:3f:8f:68:9a:b1:1f:67:d6:b2:1b:00:c2:6e:
         37:a8:51:be:7b:bb:2f:1b:76:4f:e6:01:3d:e9:2c:c1:fc:15:
         db:ca:d2:9f:ed:d8:8b:a9:c6:27:9c:32:72:9e:34:86:1d:23:
         a8:cb:f9:33:f9:7a:0b:c7:61:c8:9e:09:9d:9a:d4:03:5d:97:
         07:cd:8d:d7:de:48:b5:61:e7:5d:33:ef:08:c6:4a:a8:a1:12:
         cf:b5:76:1c:e3:c9:d0:98:d1:dd:38:86:ca:65:da:52:1e:c9:
         ba:e9:6e:96:23:33:99:a2:ce:e1:db:dc:84:9d:62:f4:46:fd:
         4a:78:3f:9f:27:d3:d4:ed:c7:fa:60:98:38:3a:9a:2e:a7:34:
         13:ad:de:eb:c5:c3:7d:03:5c:a9:d5:e4:5f:c3:1a:d8:d2:21:
         ef:1b:1f:22:ff:06:1d:b4:d2:4c:74:9a:69:af:69:d4:60:61:
         1f:6c:5b:7c:00:71:07:30:59:f8:6a:a5:2a:1f:1c:31:a7:88:
         ab:d9:23:18:51:a1:81:95:92:80:dd:86:5a:6e:ff:50:a1:9f:
         f5:15:97:57:c9:0c:54:6d:b9:a6:54:ce:b1:ec:2e:a1:b0:e1:
         e9:6b:25:c2:62:c1:53:0b:97:75:ed:7f:47:c0:e3:29:72:9e:
         c5:c8:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:19:06 2025 by rpki-client