Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          Wff21l3uC9O2lsx18b1JnclYLBZnFNcJswyh3S5yms8=
Subject key identifier:   91:09:CD:AC:A5:15:41:AF:22:26:D2:3B:86:CC:E1:CE:B3:61:5C:3B
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       019783C61938957CAA441C39C65070B12779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          15A2
Signing time:             Wed 18 Jun 2025 16:01:27 +0000
Manifest this update:     Wed 18 Jun 2025 16:01:27 +0000
Manifest next update:     Thu 19 Jun 2025 16:01:27 +0000
Files and hashes:         1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: YcSpV8kh+cjAKXZGMfJtemwRUQFxfiCRNcwh8woV6cU=)
                          3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
                          4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
                          5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:c6:19:38:95:7c:aa:44:1c:39:c6:50:70:b1:27:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Jun 18 16:01:27 2025 GMT
            Not After : Jun 19 16:01:27 2025 GMT
        Subject: CN=9109cdaca51541af2226d23b86cce1ceb3615c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:64:48:ad:78:10:20:7c:b4:c8:b5:e4:92:33:
                    80:9b:b8:63:78:7a:29:30:8c:73:f8:09:4f:20:48:
                    cd:de:d8:93:6d:19:17:d3:2b:15:38:56:d8:6c:ad:
                    ae:ca:02:18:79:93:01:38:b4:f8:8c:8a:83:37:53:
                    bb:3d:31:22:17:89:b4:3a:93:18:6c:f6:e3:b2:4d:
                    3c:5d:16:1a:10:f7:b9:09:ca:d5:0e:a7:23:8d:28:
                    a3:37:9b:9e:b1:e1:5c:6e:ab:61:29:0e:3e:7c:7e:
                    89:1e:c8:9e:cf:1c:52:34:be:cb:4b:dd:65:c0:ea:
                    c8:8e:c6:41:95:65:e3:e8:98:a6:11:9c:b9:3c:16:
                    f7:90:a2:e2:90:d7:53:64:d4:a0:37:33:b4:8d:3e:
                    cf:de:dd:fe:16:fe:67:45:41:80:63:b0:03:4d:0f:
                    02:09:e3:72:95:e3:f8:49:9c:a9:75:68:d1:83:14:
                    ab:b2:ed:90:14:6e:bb:e7:c3:22:e7:4f:60:4d:81:
                    b7:89:65:ee:f4:e5:d6:0b:45:72:8c:e7:33:a2:de:
                    49:db:13:bb:a5:af:b5:5b:72:18:94:e6:bd:a8:03:
                    c9:f9:37:97:00:97:9a:49:e9:75:e4:43:2d:41:23:
                    46:7b:23:23:21:04:cf:79:68:2a:33:8e:c8:37:26:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:09:CD:AC:A5:15:41:AF:22:26:D2:3B:86:CC:E1:CE:B3:61:5C:3B
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:e9:42:1e:1f:c1:3b:5b:df:6a:6a:e7:5c:e0:89:d1:28:
         da:1a:ac:03:97:0f:6b:40:78:4e:4d:35:68:1a:0b:79:d3:ef:
         c8:4c:ca:6d:8c:37:f6:89:5f:8d:5c:13:c1:91:57:98:d5:93:
         86:9f:90:f6:dc:24:fb:79:ed:8e:38:dc:42:28:f8:df:d6:57:
         64:6c:9b:02:6b:3c:b1:5c:1f:a5:62:d8:ac:c8:d9:99:86:1b:
         52:d4:c7:4f:c6:68:cd:09:d4:3d:c2:a4:e3:a8:23:48:0e:bd:
         c3:ea:27:bf:c7:55:6e:24:7b:16:86:26:69:78:84:ee:11:9d:
         06:f9:23:bd:02:df:2e:b7:7f:42:d1:2c:12:ce:4a:f2:88:c9:
         59:06:78:f1:2a:18:ea:55:87:86:0a:b7:6f:a1:35:84:99:78:
         14:30:84:8f:fc:91:48:10:16:74:bf:e1:40:41:ec:65:c9:86:
         cc:0c:90:b8:f2:da:4b:36:ca:ba:7c:ad:0a:6e:3b:6e:2e:87:
         fa:9f:89:d9:2b:72:22:f6:ed:be:34:86:b9:00:c6:f1:5c:0e:
         2b:54:f4:44:d2:0f:fe:bb:da:95:ce:0b:3d:12:e7:b2:e4:37:
         e4:b4:97:b3:57:cb:bf:a8:b8:1b:d7:c0:01:1e:de:ec:bb:e3:
         c2:c8:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:22:37 2025 by rpki-client