Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File:                     t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier:          hzh+Wzbz4Bn+yrKDN19sw46tWx59fJQn0Vz6y8tw9rE=
Subject key identifier:   53:D2:68:36:A3:32:E0:CC:25:76:3A:DB:8F:5C:AC:86:5E:38:BC:90
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer:       /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial:       01976F2CD14DD1D2A81E03A9DD43B8DD0AA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number:          0932
Signing time:             Sat 14 Jun 2025 16:01:37 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:37 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:37 +0000
Files and hashes:         1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
                          2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
                          3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
                          4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: 7xupg+H0uiIhVYlIohJwDwpCftzQcUK3HMFkBATrtmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:d1:4d:d1:d2:a8:1e:03:a9:dd:43:b8:dd:0a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
        Validity
            Not Before: Jun 14 16:01:37 2025 GMT
            Not After : Jun 15 16:01:37 2025 GMT
        Subject: CN=53d26836a332e0cc25763adb8f5cac865e38bc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:ae:58:1e:11:46:4a:04:eb:65:2d:7f:42:
                    fd:c6:fd:e0:92:91:82:9b:96:be:0f:12:b2:47:32:
                    76:2b:68:13:fd:e4:69:51:ff:3a:4c:a3:4c:36:ae:
                    8d:95:01:ea:b5:ff:85:89:27:72:d9:97:0f:c1:68:
                    92:7f:d0:71:6b:aa:07:92:4f:31:7b:f8:39:83:a1:
                    54:e3:3c:d2:62:53:73:c7:8b:f1:e1:52:23:ba:db:
                    35:9f:62:44:94:da:75:b2:b7:f6:f3:b7:16:d8:0e:
                    eb:f7:e6:59:2a:1c:41:aa:d6:fa:f6:5a:6a:06:72:
                    3a:65:42:05:e9:7e:d2:f4:a4:d2:d3:b4:3d:b5:37:
                    5d:fd:0a:54:46:f1:99:f5:6c:b3:b0:6c:c2:c1:d8:
                    de:da:ee:f5:16:1e:68:7c:73:2c:21:02:4f:10:d2:
                    f0:31:9c:9a:a7:a4:33:ed:ec:9a:be:f5:92:02:cf:
                    3f:fe:dc:ba:d7:6f:94:ee:e0:7f:f1:9d:3c:6f:fd:
                    b1:04:ef:22:e9:0e:f8:ab:a5:cc:8c:36:92:57:21:
                    b3:2f:b1:64:51:65:a7:f3:c3:46:42:c3:23:85:bf:
                    48:19:2e:0e:d2:c8:f9:9c:78:fc:c8:77:68:39:94:
                    6e:79:af:44:bc:fe:d3:92:44:fb:07:e0:a2:41:8f:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:68:36:A3:32:E0:CC:25:76:3A:DB:8F:5C:AC:86:5E:38:BC:90
            X509v3 Authority Key Identifier:
                keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:49:3e:33:7b:51:1b:93:ac:43:68:d8:6b:7d:1e:0d:42:8b:
         6d:f9:1a:34:13:3c:c4:59:34:fb:cb:e5:fc:cb:dc:e2:72:f1:
         9a:3d:d5:35:cb:b9:d5:09:21:31:6d:99:1e:46:ec:c2:27:90:
         1a:dc:fb:75:14:03:b8:12:ec:cf:01:be:16:49:d7:e2:ed:55:
         aa:93:7f:09:09:2a:e5:fe:01:1a:30:4b:ac:9e:a6:53:fa:4e:
         b2:26:da:43:63:ae:37:73:14:33:1e:08:88:f6:38:90:5a:87:
         84:7c:9c:ac:b5:57:9f:94:fd:cf:cb:b1:b9:57:f3:7f:64:c8:
         e8:d4:c8:c4:0a:e2:44:17:b4:a9:b2:8b:2f:96:ca:29:a4:7a:
         78:28:07:c9:a8:f0:fd:93:4c:90:fd:43:76:2e:43:da:48:80:
         d8:5a:b2:1b:e4:50:1a:82:cc:f3:be:1b:ad:1e:27:a7:ff:dc:
         3d:c5:24:e0:49:c1:86:92:18:4f:4c:10:ba:c0:e3:b3:4b:b0:
         23:6a:3a:da:ed:f5:44:72:6d:06:cc:77:91:7a:ab:46:c9:6f:
         cd:c0:4c:d1:05:f8:38:4b:86:ab:e9:16:34:2d:cc:57:44:ad:
         bb:c7:38:6a:f0:18:5a:1a:49:47:8d:e4:bd:7b:62:a6:fe:ed:
         ee:36:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:53 2025 by rpki-client