Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File:                     AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier:          o9JCSzQPPmMe0PLK5gB0Dt6QObKoFVN6JuPnbq4AG4g=
Subject key identifier:   AD:73:A6:AE:4C:7C:C7:C9:1A:1F:BC:58:75:20:5E:18:35:06:4A:F6
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer:       /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial:       019771BF88BB72D8CC2B3036E873E38C3A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number:          B5
Signing time:             Sun 15 Jun 2025 04:01:07 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:07 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:07 +0000
Files and hashes:         1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: Km1xQ55X7YkHghLcOyLKwnQiowqEbc8PqCO3yQlMBto=)
                          2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
                          3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:88:bb:72:d8:cc:2b:30:36:e8:73:e3:8c:3a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
        Validity
            Not Before: Jun 15 04:01:07 2025 GMT
            Not After : Jun 16 04:01:07 2025 GMT
        Subject: CN=ad73a6ae4c7cc7c91a1fbc5875205e1835064af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:97:bd:2d:6d:55:87:6d:17:e3:3d:b2:be:
                    4e:d5:d3:93:ac:8f:04:dd:d3:8c:23:03:a3:88:d7:
                    a8:18:75:86:04:41:f4:8f:70:a8:c0:05:b2:0f:d4:
                    4e:9b:22:2f:cb:5f:8d:62:0a:c4:3d:84:8c:c7:08:
                    27:d5:a3:f8:0e:74:67:aa:92:6e:36:91:63:77:df:
                    25:27:cf:cc:8a:35:19:ce:2b:9f:d8:91:c2:c6:d2:
                    90:01:9c:a3:ef:ca:10:72:18:14:62:4a:76:ad:b3:
                    96:d2:c2:36:8a:ce:4c:d7:3f:c0:d2:aa:d9:4c:1e:
                    5f:ee:7c:97:71:33:df:54:eb:36:9c:9c:11:e2:b6:
                    43:c9:66:c8:6e:83:6a:27:dc:bf:c3:84:42:5a:8b:
                    40:10:fc:b0:12:08:a7:60:e7:04:c2:f2:dd:f7:f5:
                    c0:e0:22:9d:ac:f5:a9:ec:82:db:e7:6e:83:95:09:
                    29:57:a9:e7:84:c2:e4:c3:20:27:9c:b0:b4:bf:7b:
                    c5:68:0d:e8:6a:61:8a:ea:cf:70:a3:56:29:0e:96:
                    f2:73:67:7d:0a:40:0f:19:ed:5b:4e:75:60:0f:a3:
                    11:4c:5e:8c:49:31:5d:80:ba:f8:9c:29:af:05:16:
                    3f:0e:81:35:39:eb:06:de:11:0a:66:8a:c3:7b:9c:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:73:A6:AE:4C:7C:C7:C9:1A:1F:BC:58:75:20:5E:18:35:06:4A:F6
            X509v3 Authority Key Identifier:
                keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:40:44:1b:4e:9c:bd:10:f9:0e:41:82:c7:ec:7b:71:da:ae:
         db:20:66:9f:de:76:15:a5:0f:72:a4:f4:11:4f:2f:bc:12:3b:
         de:83:45:a6:64:d9:b9:35:46:76:bc:5f:40:e8:98:6a:15:0b:
         95:f1:ca:b0:5e:ca:04:bd:8e:ed:ab:23:d1:20:9b:57:20:37:
         be:41:8f:b8:c3:bf:fe:c3:9b:ec:5b:27:cb:e7:86:b6:92:ac:
         b3:5d:01:b3:1f:7f:e5:23:a3:7e:9b:b4:aa:6e:b3:7c:37:ab:
         0e:e8:2e:e1:81:a4:01:e9:78:73:97:8c:53:46:ca:c8:92:3c:
         0d:6f:69:25:b9:b1:08:13:e7:05:5f:ed:ff:02:0a:09:50:a0:
         af:69:9e:65:7d:86:2b:ea:18:8f:ca:52:c8:04:c7:90:96:cb:
         6a:ca:e9:1f:3a:b1:3e:c7:6e:3b:b8:3e:ae:52:77:71:ea:f4:
         7a:a1:8b:84:dd:ca:d9:dc:45:a9:15:97:b9:fe:dc:e7:6e:22:
         fd:6a:46:b9:1d:b3:01:7d:48:3f:93:0f:a8:3e:f0:17:4f:7d:
         c3:3e:4b:fd:e4:66:60:35:6c:36:b2:9f:39:6d:b2:47:23:e6:
         1d:3b:0c:05:58:ff:14:b2:f7:da:6d:6b:ce:1b:0c:32:3d:36:
         cb:05:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:31:07 2025 by rpki-client