Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File:                     1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier:          aN21pqoElRpiOxKg+Q7BIyFabJDEBPfN1J2Ic3C7Xx4=
Subject key identifier:   9F:E4:7D:16:C9:CE:9C:6B:A9:E1:53:C4:86:91:01:A2:A8:DF:AC:CD
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer:       /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial:       01976CCFB6D010DD614EBBED537F925F1AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number:          0F3A
Signing time:             Sat 14 Jun 2025 05:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:41 +0000
Files and hashes:         1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: jCJC+PmmtzfnDbsiil2YDpQuSkjaaDVGielUq45Upto=)
                          2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:b6:d0:10:dd:61:4e:bb:ed:53:7f:92:5f:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
        Validity
            Not Before: Jun 14 05:00:41 2025 GMT
            Not After : Jun 15 05:00:41 2025 GMT
        Subject: CN=9fe47d16c9ce9c6ba9e153c4869101a2a8dfaccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:a0:8a:f7:56:6e:bd:4e:bd:75:b5:8d:b5:
                    ca:24:84:60:d3:1c:42:dc:70:0e:51:4c:5d:b7:c9:
                    8c:2c:00:90:8d:60:73:c7:ea:b3:b0:50:f5:62:01:
                    66:80:0f:bb:79:dd:91:e4:8d:46:e7:3c:ee:30:18:
                    e6:4d:b9:b5:74:66:25:f4:4b:d2:db:24:e7:ef:c1:
                    b7:74:20:f2:2c:c4:9a:d5:67:72:51:37:23:f0:a2:
                    ab:b0:75:9a:06:f0:d6:9c:46:81:7c:bc:10:62:f6:
                    50:55:df:86:22:1e:c7:2e:63:87:8e:e5:58:bc:eb:
                    21:cf:31:b3:90:23:45:ba:fe:66:e5:5e:48:5e:48:
                    c8:3b:8d:35:dc:34:2a:22:05:82:44:ab:77:04:f6:
                    fa:bb:2c:56:f7:d6:e1:09:4b:3c:6a:62:1f:b7:d2:
                    ce:10:b5:f0:df:37:97:c4:d7:a9:b0:52:14:e5:71:
                    6b:a2:01:09:e9:bb:ba:42:13:5b:70:46:9b:9d:c7:
                    f7:02:e9:62:48:ee:c1:0b:e1:cc:73:69:87:06:c1:
                    cd:2c:7e:66:bb:e7:da:aa:eb:a2:4a:24:d4:ba:e1:
                    82:a8:ea:6c:ec:1c:55:8a:eb:10:45:ec:fb:7d:26:
                    7d:4e:5b:ba:6f:07:c7:a8:f0:91:3e:9b:11:de:18:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E4:7D:16:C9:CE:9C:6B:A9:E1:53:C4:86:91:01:A2:A8:DF:AC:CD
            X509v3 Authority Key Identifier:
                keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:c8:4d:4e:28:5b:0f:54:b4:bb:2f:84:ea:a2:60:5b:eb:
         11:2d:79:68:00:b5:58:0a:0b:d0:b0:63:71:f9:8d:26:25:90:
         26:47:3c:ae:24:c1:ab:88:75:3f:ea:01:35:0d:db:e8:0a:92:
         88:5a:4d:6a:12:94:52:2d:ac:8b:e4:8f:e1:fd:ef:2a:f4:b1:
         a7:21:be:4f:6e:88:13:d2:59:bc:b4:42:59:17:49:10:3b:ad:
         cf:2a:f9:eb:62:06:7e:50:c5:c8:d3:93:d3:f2:6a:81:96:d7:
         c2:f7:85:7a:d6:7f:17:68:3a:70:44:ed:99:e9:53:66:78:2f:
         ed:ec:62:b9:c8:0b:10:4e:f1:c0:fa:8a:8d:c3:16:5f:ba:8a:
         72:09:c2:f3:e2:88:cc:e5:90:b2:c1:21:f6:c6:a7:fd:50:ef:
         4b:2e:9e:2a:90:32:3f:5f:ed:19:f6:ed:ca:d5:d8:ff:4e:eb:
         22:ab:bb:b7:13:e1:8d:b8:69:cc:59:74:22:0b:0b:d8:32:64:
         6d:aa:56:98:00:55:db:39:83:97:17:f8:8e:9c:5f:55:e1:8d:
         17:90:d8:12:3c:06:92:41:9e:d4:d1:b4:02:66:a0:14:bb:f4:
         97:d5:ab:cd:25:f0:0f:74:25:b6:bf:8b:f7:5a:79:a6:38:11:
         3b:18:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:14 2025 by rpki-client