Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          B4XOmGLPvpd/j1TAiS6mydGd3TVXslpx0fFu/Y4rraI=
Subject key identifier:   57:A3:9B:EE:5D:79:DA:AF:C2:22:93:A1:72:D2:FF:FE:FD:AB:C9:FC
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       0197684E33CCBD3999D5DED26A32000272CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          13D5
Signing time:             Fri 13 Jun 2025 08:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:44 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: vdHllr7O8Kim6Cfw1ooA9J+ALSwPkqudrjvjUdjl+40=)
                          2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:33:cc:bd:39:99:d5:de:d2:6a:32:00:02:72:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Jun 13 08:00:44 2025 GMT
            Not After : Jun 14 08:00:44 2025 GMT
        Subject: CN=57a39bee5d79daafc22293a172d2fffefdabc9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:01:7e:ce:c5:df:81:eb:84:d4:c9:dc:cc:
                    88:21:d9:aa:d5:6c:9a:e4:73:23:26:cc:4c:51:d6:
                    aa:74:56:01:55:b7:90:71:bb:98:8d:12:74:9a:40:
                    ef:00:56:26:74:1d:26:a9:22:68:dc:5a:9c:ec:94:
                    a0:8a:26:19:94:75:4c:0a:58:8c:6e:e1:81:39:5c:
                    86:d7:4b:36:44:7b:f2:38:8d:65:61:77:b1:5a:f2:
                    10:43:80:a0:2c:45:fb:aa:bc:a6:0a:2f:47:ee:5c:
                    63:af:87:8a:37:cb:bb:d2:e8:9d:6a:da:d7:ce:ed:
                    f9:4e:3a:6c:98:6e:eb:a5:3d:49:60:a1:aa:2a:3b:
                    9b:81:97:40:25:6e:1d:57:9d:ba:1e:ff:61:f4:dc:
                    85:62:04:01:8f:66:fd:50:d4:e0:5e:bd:22:c4:90:
                    e7:33:fe:d8:4b:a4:8d:dd:ba:30:b1:6b:29:ec:53:
                    49:94:a0:ba:70:4b:99:3c:fc:71:e7:2b:24:29:5f:
                    cd:31:31:00:8c:0a:a1:76:64:80:b9:85:50:df:d8:
                    06:02:14:d2:fe:42:6b:6d:db:5a:e8:a3:d4:fc:a6:
                    28:42:2c:d5:ab:06:04:ab:d6:38:3e:6a:b0:ea:dd:
                    4a:4e:80:0d:66:06:f1:cd:30:e0:e5:fa:3d:bd:67:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:9B:EE:5D:79:DA:AF:C2:22:93:A1:72:D2:FF:FE:FD:AB:C9:FC
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:64:17:73:73:41:a2:d3:f0:60:31:bb:99:e4:43:f3:dc:b1:
         09:8c:50:3e:e1:1f:48:22:55:a4:35:ff:c5:54:5e:bd:d1:e5:
         30:0c:47:d3:5e:67:1a:0b:8b:7e:38:3d:c1:b2:93:0f:97:a9:
         a1:d2:9b:d3:62:d9:e6:bf:12:16:0e:b2:07:46:fc:57:27:cc:
         61:d3:2c:8c:39:bc:11:05:45:2e:78:b0:61:4f:42:d7:9d:22:
         b4:91:d4:38:eb:d3:6e:f9:0e:00:0c:87:32:e3:59:18:d3:ff:
         30:5e:79:dd:6b:61:68:71:52:54:b4:43:fe:29:9c:81:7f:22:
         d9:bd:ba:8c:eb:47:6d:08:a3:74:9b:7b:4b:76:23:7b:b3:f2:
         f6:66:01:1c:b4:49:01:c3:0e:8a:7a:3c:5d:f2:ac:39:a6:2f:
         9d:6e:89:2d:af:45:bc:0f:c9:39:31:55:49:ea:0c:36:d5:64:
         e1:53:f3:2e:37:ab:7a:6f:03:28:e4:9e:fb:2b:47:15:2e:ba:
         79:3c:f5:fd:97:93:25:3f:bb:6f:70:8a:78:ef:b4:3a:74:7f:
         0e:87:43:b5:5b:6c:3a:2f:55:75:a1:fa:c8:36:b7:06:07:df:
         51:c5:88:cc:6a:03:ce:b2:66:ff:e1:e5:78:aa:40:ed:7e:18:
         ef:ef:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:57 2025 by rpki-client