Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File:                     5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier:          LJwqrBzPb6CFJgSFpPYwCclsMlG4vzRArWpS/3hEHGk=
Subject key identifier:   0F:3A:94:DB:1D:88:8C:28:52:A3:A5:02:75:16:B1:F3:F9:F0:CD:DF
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer:       /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial:       01976C6220CE2F8F2024E7946B9482347102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number:          0FFF
Signing time:             Sat 14 Jun 2025 03:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:59 +0000
Files and hashes:         1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: Bjpk/84BZmgfq0RQmL1t5U5crRJuP9LgLwgtUIpA2uA=)
                          2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:20:ce:2f:8f:20:24:e7:94:6b:94:82:34:71:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
        Validity
            Not Before: Jun 14 03:00:59 2025 GMT
            Not After : Jun 15 03:00:59 2025 GMT
        Subject: CN=0f3a94db1d888c2852a3a5027516b1f3f9f0cddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:e1:e1:e9:6e:bf:f6:a5:ef:0a:8a:ba:e3:
                    ee:c8:c1:4d:d0:d1:00:9c:0e:25:77:04:b6:10:b2:
                    97:53:ae:b6:98:c9:cb:10:6e:ff:2a:36:8e:33:5e:
                    24:24:58:3c:de:6e:f2:4b:e5:7d:09:71:62:64:84:
                    b3:b1:c8:96:71:da:fc:31:83:44:a9:31:f9:4e:c0:
                    92:6e:f4:87:0d:87:55:7d:f0:42:2b:25:d5:ac:7e:
                    3f:bd:bc:e0:35:44:7f:95:6c:44:01:1b:38:40:de:
                    ba:2e:cf:cd:8b:f1:c9:09:20:d1:e7:52:ee:f1:61:
                    8d:92:46:07:85:19:1b:94:41:4a:3d:ca:d1:67:66:
                    78:07:db:1e:1a:75:99:47:a4:93:2e:a7:ab:1b:a9:
                    39:a5:19:53:3d:a0:0e:82:b0:bb:f2:da:90:4c:b2:
                    ec:ce:04:54:14:fe:2c:0f:a4:80:79:0e:2b:64:72:
                    95:4b:1c:35:3e:cb:33:e0:52:a1:83:09:7e:f4:4d:
                    5d:48:db:43:a2:59:5c:a0:b0:84:3b:6c:ee:a6:95:
                    0a:fc:69:44:ff:13:ae:cf:2f:32:ee:23:40:5c:af:
                    4f:16:4f:bf:6d:aa:6e:4f:9f:9a:ab:28:78:51:f9:
                    22:cf:c3:27:3b:22:c5:61:dd:ff:79:78:57:db:ec:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3A:94:DB:1D:88:8C:28:52:A3:A5:02:75:16:B1:F3:F9:F0:CD:DF
            X509v3 Authority Key Identifier:
                keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:f8:8f:71:de:1b:b1:fb:23:0e:32:fe:b1:2c:43:a6:ae:
         62:82:a0:92:57:a9:c3:a3:a2:0c:a0:43:2c:3a:1e:62:27:99:
         4c:f2:fd:5e:e9:b8:6d:10:19:56:79:ff:ab:3c:9f:c8:b4:ab:
         10:4b:c9:e6:c6:1f:f0:e9:a6:6c:5c:09:c6:e6:05:27:03:db:
         58:51:57:25:41:98:9d:94:3d:fe:97:24:8e:d5:35:8b:18:d1:
         39:59:31:b3:fc:a9:8b:41:1f:f5:34:18:6b:a4:bf:06:5a:08:
         0f:2e:51:fa:d8:7f:e7:cb:74:f0:86:8d:28:e2:44:47:92:43:
         38:d1:39:30:09:50:a0:d4:f8:87:df:14:44:08:a8:ab:d4:4c:
         17:30:2f:07:22:e7:e9:0a:77:d9:aa:54:82:32:1a:35:85:ec:
         50:ba:ef:cb:c6:a8:23:95:6c:79:e8:fa:18:ec:a5:ca:f1:41:
         b3:00:54:e3:5b:13:9c:dc:23:81:e6:89:55:95:e3:ca:8e:f2:
         db:35:ee:68:66:ec:59:c8:0b:ba:76:83:30:96:35:8b:75:90:
         a5:63:2f:fa:c3:ca:f2:8d:e1:fa:d5:40:07:16:de:e1:5c:d0:
         6a:d8:af:01:42:91:af:58:7c:40:aa:06:09:5e:77:c4:59:ce:
         d6:79:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:32 2025 by rpki-client