Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          qI79t2nUZCFQCS4YsSlCHZ9coPGwEqdzDSacBcg0xxg=
Subject key identifier:   BF:C5:57:E8:ED:FA:07:1F:83:2D:78:6F:FF:C7:03:EE:BF:43:E2:0E
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       01976CCFD3BBC967F5ECAC1F36C7805E6E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          10D1
Signing time:             Sat 14 Jun 2025 05:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:48 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: NbaC0qxW05IBtN3BBxvR100okn4w6geUk5A6Hs0oPMs=)
                          2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
                          3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
                          4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:d3:bb:c9:67:f5:ec:ac:1f:36:c7:80:5e:6e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Jun 14 05:00:48 2025 GMT
            Not After : Jun 15 05:00:48 2025 GMT
        Subject: CN=bfc557e8edfa071f832d786fffc703eebf43e20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:4e:aa:6d:aa:49:a4:3a:ff:76:17:91:90:
                    af:a0:07:15:cc:96:a4:1a:ec:de:b5:50:dc:7b:ab:
                    db:96:bb:9a:b7:3d:e5:bd:ba:9a:bd:27:ec:1a:79:
                    7b:44:e8:de:b6:83:2a:d9:30:1f:7d:15:37:c5:fd:
                    c7:3d:21:c5:22:ca:23:c2:62:4a:c7:09:e4:1e:d5:
                    94:2a:7a:21:51:7e:24:fe:4e:9d:99:0b:94:99:d1:
                    a0:5a:f3:ef:b1:6f:3e:3d:97:86:d6:5a:f5:2a:3c:
                    93:2b:da:b3:3b:6a:0e:ed:f9:bb:27:7b:8c:dd:fc:
                    85:32:f2:0e:c2:41:df:a3:39:eb:7c:63:e1:77:51:
                    1b:b6:76:89:00:96:3b:b1:3b:ec:c6:73:9c:cb:9f:
                    d2:f3:51:15:83:87:f9:68:6b:05:da:ee:81:47:43:
                    59:3a:86:d6:ca:f7:9c:aa:79:63:f3:5f:26:58:f7:
                    ab:5e:04:c1:d5:0c:7e:f3:1e:55:ca:c3:29:bc:2f:
                    44:ab:ec:67:bb:c1:ad:cc:a8:c3:39:44:7e:17:52:
                    6e:08:f8:96:b4:04:f0:ef:5f:24:85:1b:56:ab:98:
                    cd:0f:0a:61:e3:28:e0:10:43:93:6f:e3:3e:e9:4a:
                    c9:24:a7:99:4f:31:b1:a7:5c:db:7e:c7:f4:bd:73:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:57:E8:ED:FA:07:1F:83:2D:78:6F:FF:C7:03:EE:BF:43:E2:0E
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2b:d5:fe:90:a2:a0:25:62:50:27:d3:0c:ef:75:11:15:46:
         42:a5:73:01:5f:94:f2:70:5a:22:d7:3b:12:23:0e:40:2a:b9:
         8e:4b:44:9b:a7:65:da:8d:9c:24:d3:9b:14:ef:51:0f:2f:fd:
         6f:48:0c:5a:7f:1d:c2:cc:c0:9a:8d:b2:c1:a3:06:bb:00:ab:
         c6:23:c3:2f:ff:77:13:14:57:92:e6:fa:97:37:b1:ab:90:4c:
         23:6d:f8:cd:2b:b4:ce:61:70:ea:d6:61:28:a5:13:43:74:77:
         25:8c:10:88:bb:d2:00:cc:9b:86:10:b7:5d:59:19:8b:19:cc:
         5e:55:72:d5:ee:02:52:98:98:64:f9:12:27:e4:bf:07:2d:8b:
         35:8b:c2:17:d5:4b:ad:fc:fe:3d:b1:cb:2c:5c:13:3e:74:79:
         e4:2c:f7:24:c3:ff:dd:13:cc:4b:a8:89:0e:79:a5:f0:3c:2a:
         ec:7d:c2:16:80:db:27:c4:fb:b6:3d:04:ff:d5:20:6f:c4:d0:
         71:4b:82:09:39:d1:c8:67:a4:07:3c:17:b6:50:a3:71:75:5a:
         a8:e6:23:6c:8f:95:91:e1:7a:19:cf:ee:6e:4b:8e:d1:31:d5:
         7a:43:47:d1:32:38:e0:b9:e7:2c:46:ef:f2:f4:92:08:13:6c:
         3d:24:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:55 2025 by rpki-client