Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File:                     5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier:          8Y6esbMoySGLwq86dRXBuqleSM5YBY3QCQqFcpAUyrA=
Subject key identifier:   06:16:75:B3:E7:F5:F7:59:2A:FE:C3:71:57:9E:2F:DA:F3:51:2A:D3
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer:       /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial:       01967AFBCE6C0D7E752DB0CB451295337786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number:          0F82
Signing time:             Mon 28 Apr 2025 06:00:44 +0000
Manifest this update:     Mon 28 Apr 2025 06:00:44 +0000
Manifest next update:     Tue 29 Apr 2025 06:00:44 +0000
Files and hashes:         1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: +i67Q/d2hoThlDKvz/aXHTBcnnykylmH1v0416T9d7g=)
                          2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:fb:ce:6c:0d:7e:75:2d:b0:cb:45:12:95:33:77:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
        Validity
            Not Before: Apr 28 06:00:44 2025 GMT
            Not After : Apr 29 06:00:44 2025 GMT
        Subject: CN=061675b3e7f5f7592afec371579e2fdaf3512ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:29:98:07:fa:a5:7f:3e:86:25:b6:ba:bd:
                    1a:3a:96:62:27:2c:86:87:db:5a:2c:03:27:ca:d2:
                    5d:3f:07:93:db:1a:ee:8e:04:24:94:34:22:2d:7b:
                    21:74:da:fb:70:4a:42:32:19:40:7b:ef:7e:91:38:
                    04:1b:bf:6d:06:3a:ce:85:da:9e:76:85:cf:4e:77:
                    b2:3b:53:d0:64:80:6e:c5:62:ef:fc:d0:f7:57:e5:
                    2b:3c:41:e1:3f:9a:94:42:ee:cd:cf:01:89:47:59:
                    65:22:6b:7a:03:3e:fd:13:20:e4:72:cd:8e:c3:3f:
                    60:79:e5:c3:8f:14:86:9e:86:03:e8:7b:15:b5:f3:
                    6e:88:c0:ce:d0:33:42:04:61:c5:90:95:f1:dd:97:
                    7f:d8:f6:eb:60:08:88:f9:12:e9:e7:b3:92:a4:5b:
                    e8:27:46:92:34:cc:21:7a:ff:f1:78:9e:fb:8f:5b:
                    2d:12:1e:c3:45:43:8e:15:c7:60:cd:31:15:95:db:
                    89:b4:e6:f1:12:ed:be:20:fd:64:ad:63:b0:7a:da:
                    34:65:ed:08:bb:0b:f2:c3:72:bb:c2:79:f3:f1:3c:
                    22:7b:30:a4:7d:7c:56:ab:15:b5:95:1f:02:19:de:
                    62:5e:d2:f2:e2:37:a0:47:ff:43:79:0a:e6:e4:48:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:75:B3:E7:F5:F7:59:2A:FE:C3:71:57:9E:2F:DA:F3:51:2A:D3
            X509v3 Authority Key Identifier:
                keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:72:58:43:1c:58:c4:5d:03:87:0a:85:1b:4d:b3:de:57:ef:
         98:10:44:7f:16:d7:67:43:8b:75:c9:df:ce:e8:fc:a1:13:5a:
         f0:63:f4:d0:30:c9:87:8b:9a:19:75:ba:85:b2:0d:1c:ab:4e:
         80:dc:ee:79:2b:c0:9e:88:bf:bd:e8:e1:a8:8c:e1:3a:96:58:
         86:7e:75:82:d2:a6:f6:5a:77:47:f5:83:f3:a9:bd:cc:33:02:
         5d:3b:6c:51:f1:de:ef:66:7f:10:d3:80:de:d7:45:4e:7a:44:
         f7:e1:e0:a9:82:0a:79:36:f3:fb:77:80:8a:e5:98:ee:fb:9e:
         95:c3:3a:f3:f5:11:ce:11:81:8a:55:b7:40:dc:e2:15:02:a5:
         17:f8:37:28:ff:70:b9:8f:3e:3b:0b:1f:60:cf:c3:63:1e:1b:
         01:0a:d1:88:3a:49:0c:7b:16:ee:ae:3d:d2:17:c2:76:94:dc:
         59:de:68:20:80:2a:4f:34:f2:f2:13:5e:d3:5c:82:83:de:82:
         3b:2c:26:bb:9a:ad:6e:ec:10:14:c3:b8:b0:c8:04:af:8c:95:
         7f:69:8d:5b:68:2d:ff:f4:9a:b0:44:93:ac:7b:7c:a5:6b:c8:
         21:d4:d3:e4:5b:27:ab:b9:0e:96:eb:f8:c8:32:47:c8:db:22:
         9e:25:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:07 2025 by rpki-client