Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File:                     5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier:          a0Xf0Il5BN5Moub56VW6A41ojz3oLj2aOh88BvuG/Ac=
Subject key identifier:   E7:DA:A7:83:83:AD:D4:6C:9D:E9:C4:DB:52:9F:12:27:3B:4E:9C:A4
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer:       /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial:       01976C9920F1F341F505453E93060A12C2A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number:          02AC
Signing time:             Sat 14 Jun 2025 04:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 04:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 04:01:04 +0000
Files and hashes:         1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: 7+hIz35wYPfDHlxs9icGVLuNgN2UGb5GYSRGa+mystE=)
                          2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:20:f1:f3:41:f5:05:45:3e:93:06:0a:12:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
        Validity
            Not Before: Jun 14 04:01:04 2025 GMT
            Not After : Jun 15 04:01:04 2025 GMT
        Subject: CN=e7daa78383add46c9de9c4db529f12273b4e9ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:cc:7b:6d:af:ce:a7:f8:f7:98:c8:ff:d7:
                    92:0c:51:09:26:e6:09:15:55:b1:1f:5b:19:4f:47:
                    e5:42:e2:c1:f6:5e:7f:db:11:da:69:53:84:ef:70:
                    5b:ad:90:27:44:2c:21:a7:dd:f7:83:93:e5:29:86:
                    6a:6d:16:ba:2e:ac:22:61:d4:33:dc:7c:2c:1a:9c:
                    fe:75:c9:34:c0:cc:8c:5a:0b:88:3f:88:3a:4d:2f:
                    12:5b:4c:8f:b1:69:8b:7d:73:53:05:2a:3a:64:00:
                    ab:e6:35:9b:6d:52:a1:43:97:3c:a8:d8:95:4c:9a:
                    e1:4f:47:ca:c9:b3:bd:d6:ba:bf:6c:a2:b3:2c:3d:
                    0c:58:b7:9b:81:9f:1e:e6:25:9d:d9:04:85:97:7a:
                    fa:8f:a3:ad:64:87:0d:9b:cc:f0:90:47:a1:f3:2a:
                    e1:ad:f1:c9:19:8e:60:8e:52:8a:39:e0:7f:6e:ac:
                    13:a7:c8:c6:fb:6a:5a:79:e6:b8:95:df:6a:74:eb:
                    d7:55:de:2c:65:69:a1:ed:72:0d:7f:b3:45:ac:39:
                    8b:38:26:9e:bd:15:de:0a:ff:f1:d9:6f:bb:4a:e4:
                    3b:30:68:47:c1:c5:2a:a7:de:d3:4d:20:2e:2d:95:
                    56:64:1a:cc:65:38:10:da:f7:57:63:19:82:c8:32:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:A7:83:83:AD:D4:6C:9D:E9:C4:DB:52:9F:12:27:3B:4E:9C:A4
            X509v3 Authority Key Identifier:
                keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:3f:de:b0:d7:7a:99:01:9f:4c:8b:60:56:da:4b:8a:9e:
         37:63:85:d9:4c:12:23:ed:3a:75:9d:d6:e5:c2:fa:1a:84:79:
         40:d7:7d:a5:cf:bb:be:d7:53:d6:36:b0:f8:25:70:b6:a7:0a:
         5e:aa:85:1d:8e:65:97:21:80:3a:38:91:13:9d:8c:f0:05:39:
         10:42:f1:3c:3d:52:0f:58:df:15:d1:4c:00:c3:4f:d4:d9:49:
         54:a9:73:51:73:f1:d1:08:88:9a:6d:50:79:6b:7b:22:1e:22:
         77:23:83:be:05:b6:c7:2f:56:2e:6a:7a:7a:8b:cd:c0:e3:b2:
         f9:0c:85:12:cf:67:4d:36:b1:5e:72:c6:86:19:02:f2:04:c6:
         d5:24:d3:44:ea:41:f2:9c:ba:ff:fe:1e:9e:c2:bd:0a:23:9f:
         49:a3:b4:4f:9c:12:fe:bb:9f:9a:7d:95:e5:2d:6e:ba:6f:7c:
         32:67:e7:84:67:db:6d:da:09:85:e0:d1:c3:fa:c6:af:31:97:
         de:98:f5:e9:75:15:02:5a:0f:07:61:c6:bf:f3:82:1e:9c:94:
         b3:89:b2:bb:b4:69:61:5f:a2:3f:a2:5e:47:cb:02:bc:79:37:
         b5:e7:bb:18:76:93:2d:e8:40:98:55:90:11:47:ab:f7:3d:cb:
         4e:c4:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:33:06 2025 by rpki-client