Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File:                     5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier:          fVYMVoe2silhsy9HDj8pFv9qETL9WRP0AWCgIezk48Q=
Subject key identifier:   3D:C0:95:CD:52:D6:6F:63:F6:65:49:9B:91:14:CE:18:C2:A7:0A:B5
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer:       /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial:       01976EF4E3C7B963F5207064C6821A3AC8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 15:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:32 +0000
Files and hashes:         1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: tosWKGKUCUvmIEMHIspfvXZAZlj2/6Z/x6rgr2ZiQbU=)
                          2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:e3:c7:b9:63:f5:20:70:64:c6:82:1a:3a:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
        Validity
            Not Before: Jun 14 15:00:32 2025 GMT
            Not After : Jun 15 15:00:32 2025 GMT
        Subject: CN=3dc095cd52d66f63f665499b9114ce18c2a70ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:4c:5e:45:c0:eb:ce:ec:8c:fb:d0:39:e2:
                    12:bd:ab:55:c0:c8:cc:46:b0:ec:84:b8:73:3a:45:
                    2b:19:ae:50:23:a8:62:36:7c:a8:e6:60:8f:96:66:
                    6b:c1:42:a8:07:83:12:3c:74:4f:37:ce:94:2f:08:
                    ac:a8:4c:a3:8a:01:ed:18:69:55:55:b3:cb:ba:ce:
                    6c:e6:b2:78:a4:99:a1:d7:c0:8b:8a:9d:38:ea:bf:
                    a2:52:5d:c1:19:02:90:fa:ca:0d:a7:bd:00:6b:76:
                    9d:15:f4:3c:3a:0f:91:f6:fe:33:3a:f4:9e:cf:44:
                    4b:27:1e:0c:29:15:a3:14:b6:c0:5a:81:f0:da:24:
                    11:a0:b9:20:33:6a:b3:24:20:77:c4:99:c3:99:df:
                    1d:01:3c:f3:8d:69:61:6b:da:b0:11:81:18:c0:94:
                    3c:cc:2f:ef:d1:55:ef:01:5e:d9:7d:7c:12:f9:75:
                    02:19:7c:d6:17:36:00:29:f1:46:85:28:07:47:8c:
                    7b:58:e6:ba:e3:aa:ba:4a:30:dc:e0:43:9e:65:57:
                    33:3d:11:7e:cb:12:e5:77:76:0e:8d:4f:b9:fe:59:
                    a2:7d:e5:5e:dc:d4:3f:90:05:00:69:7e:f2:39:e0:
                    f0:dc:7b:9f:09:07:25:08:24:c0:57:06:02:15:ac:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C0:95:CD:52:D6:6F:63:F6:65:49:9B:91:14:CE:18:C2:A7:0A:B5
            X509v3 Authority Key Identifier:
                keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c7:9e:9b:37:04:09:62:14:18:cb:1c:4f:c0:2d:3c:0b:70:
         6c:76:4f:ef:b2:05:60:c6:13:15:5f:71:2c:47:4e:51:ce:3b:
         80:fa:9b:a4:82:83:f4:8a:53:c2:d9:d5:cd:d0:d3:f4:9e:93:
         30:72:27:82:c1:f6:b7:47:07:96:75:42:7c:76:a8:d9:2a:c3:
         33:c2:5e:61:4c:f7:62:ef:96:3c:cd:4d:df:ac:77:f4:00:48:
         5d:e5:9e:15:7a:a1:0e:55:ed:e4:75:c5:c1:83:18:ff:9a:46:
         b0:57:23:1f:b3:e1:4b:c7:ae:51:d3:54:12:2e:9c:ad:d8:a3:
         a7:9b:92:f8:6c:96:9f:17:57:47:1d:ee:9b:70:37:2a:b9:57:
         4c:86:08:9e:15:96:ef:8c:4e:d9:25:a4:8b:7b:e8:4b:72:f0:
         b2:c9:ea:6d:76:37:bc:15:1b:0b:aa:50:c5:9c:ba:25:5c:fc:
         f8:d7:97:b3:70:2a:30:1c:e7:50:2e:92:5f:b7:24:7a:8b:3a:
         45:b4:1a:25:37:f9:29:2b:44:6c:41:0f:c8:56:c4:46:e9:f5:
         75:57:77:10:3e:81:9c:57:00:e5:68:2e:eb:35:5c:9f:6b:b8:
         32:43:30:11:20:83:d1:0e:01:25:e4:57:f0:ab:89:2d:c5:df:
         9d:1a:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:30:01 2025 by rpki-client