Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          xQn3joZvWS7AS/KNA/goum2q8LDlDjOva727X5TBpz4=
Subject key identifier:   F9:CF:75:9C:C7:06:C7:45:73:34:05:6C:F5:94:42:FB:CA:F9:E4:99
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       01976EF510B28E5B6645CAE8E0C456D5C7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 15:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:43 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: XNGFmy3NCQFfYzVScmigrlm9RvyRUmZh0Y/J05a12s8=)
                          2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:10:b2:8e:5b:66:45:ca:e8:e0:c4:56:d5:c7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Jun 14 15:00:43 2025 GMT
            Not After : Jun 15 15:00:43 2025 GMT
        Subject: CN=f9cf759cc706c7457334056cf59442fbcaf9e499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:4e:bc:1c:83:52:e6:e9:0d:6b:d8:51:ab:
                    58:b2:72:7a:8e:01:de:cf:59:46:e5:28:54:fb:31:
                    27:07:8b:9a:4a:3d:dc:71:8d:44:77:5d:19:2c:9f:
                    38:4c:04:0d:86:8e:4f:84:41:61:cb:f9:99:9c:c0:
                    30:12:66:c0:67:e6:54:26:ab:75:bd:d6:85:74:c0:
                    4b:2e:fc:74:ad:c4:32:f0:87:73:4a:cb:7d:7e:37:
                    b9:03:6a:03:58:9d:17:d8:c3:b7:fa:30:a0:13:02:
                    a7:74:45:f1:4c:d9:6b:ca:13:96:71:33:65:a0:11:
                    0f:19:65:11:52:e8:20:af:84:4c:35:37:77:5f:04:
                    44:05:b4:96:59:2b:65:cb:85:e6:2f:75:6e:03:fc:
                    8f:ec:06:ce:1b:6f:d1:c6:61:f7:73:5f:12:1b:0f:
                    48:b9:fd:ac:64:07:fe:7e:41:a1:9b:23:e6:23:9c:
                    87:92:67:d8:84:45:d8:bb:67:02:c2:9c:79:23:49:
                    04:56:cc:05:2f:eb:46:bd:dc:b3:16:10:05:50:f3:
                    e5:fa:39:ae:01:46:4b:71:df:af:58:58:b6:ec:61:
                    e3:70:e9:c8:a7:c7:14:e2:0d:9e:57:b0:0c:5c:98:
                    b7:c4:51:14:f3:52:4e:d9:6a:e7:b2:52:18:41:b8:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:75:9C:C7:06:C7:45:73:34:05:6C:F5:94:42:FB:CA:F9:E4:99
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:11:ba:bf:2a:ba:09:24:2e:2c:f7:d2:d9:9d:68:e5:62:25:
         b6:bc:73:16:fc:90:04:c8:c8:7b:1e:8f:46:74:18:b3:bb:69:
         fd:94:ca:7d:60:b6:02:d3:19:78:1f:23:80:05:fa:49:f0:e7:
         cb:74:9c:ab:2b:0c:b7:ab:53:d0:29:dd:5f:d9:50:2b:09:91:
         a1:ea:12:c3:8e:bd:c5:08:c2:17:de:1e:01:59:b6:84:f9:9c:
         88:da:b4:0a:50:fd:0c:de:c1:be:f0:5f:21:51:82:61:ce:37:
         8c:cb:f2:17:32:97:a8:b9:79:36:fb:22:a6:e0:6e:f2:54:02:
         ab:d3:35:c8:67:ad:ba:f4:8a:08:0e:fa:7d:69:1f:0a:1f:60:
         73:f6:08:ba:8d:43:41:0b:15:a2:6c:fb:8f:70:8d:f9:61:15:
         a0:33:a3:96:08:b2:fb:47:ae:89:a5:bb:17:e8:8b:95:f5:a3:
         d4:d1:6c:78:73:c7:a7:d8:8b:a8:72:2a:fc:ee:53:1a:59:b0:
         93:5d:f4:a2:f5:fb:57:a9:0a:8d:22:27:d6:cb:ad:d9:d0:a3:
         c0:fd:40:83:f3:22:a9:8c:17:42:36:53:6e:a8:6b:c6:46:2f:
         14:3b:07:89:89:7c:c5:c4:51:c3:89:b4:f6:63:7a:a8:e5:57:
         58:81:69:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:39 2025 by rpki-client