Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          unkaGgd6L1hL3vO+TlKNTaMFd+DPtYRjFTRGITbe+hQ=
Subject key identifier:   DB:FD:85:E5:11:80:76:F9:A8:BC:6B:E7:D5:EF:73:7F:9B:C0:39:AD
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       01977B9DEE69486CC36F70E27737588A0CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          08C2
Signing time:             Tue 17 Jun 2025 02:00:37 +0000
Manifest this update:     Tue 17 Jun 2025 02:00:37 +0000
Manifest next update:     Wed 18 Jun 2025 02:00:37 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: HikiAZP9CXABAXlqycuA+R8jHGDa90bcP51OePvYGko=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9d:ee:69:48:6c:c3:6f:70:e2:77:37:58:8a:0c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Jun 17 02:00:37 2025 GMT
            Not After : Jun 18 02:00:37 2025 GMT
        Subject: CN=dbfd85e5118076f9a8bc6be7d5ef737f9bc039ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:3f:0b:46:8c:d7:d3:42:8e:c0:35:df:fb:
                    f1:e5:d5:a6:89:4c:86:6a:88:2d:c2:2b:99:17:81:
                    ad:02:e9:b3:ac:d8:a1:c9:f6:de:c7:8b:8c:b8:9b:
                    bd:3e:cb:9e:cb:2b:72:f3:33:b8:c4:5b:9e:c8:3d:
                    db:67:fc:e5:22:11:37:8f:97:70:dc:8b:a7:66:cb:
                    2a:66:4b:5e:87:d9:fc:46:64:55:e5:d2:a1:bb:7a:
                    b3:9d:95:7d:92:fa:64:c5:5b:7e:7e:bb:24:2b:81:
                    e6:4d:54:76:c9:d4:d3:fa:93:8e:6e:12:53:70:89:
                    8f:2e:22:77:30:a9:57:c4:de:cd:ff:c6:dd:ca:b4:
                    9a:95:71:5e:b9:f9:b2:ae:92:9c:4e:33:4d:49:57:
                    a8:f2:5e:8d:d5:ff:aa:56:a0:64:a9:be:7d:95:6f:
                    b0:da:57:93:f7:ed:25:aa:3a:43:60:8c:32:8f:5a:
                    0f:85:bf:ef:6f:80:62:eb:c8:97:4d:94:2d:9f:8f:
                    ad:c2:91:6b:3f:0f:83:58:3a:57:f0:20:87:72:04:
                    82:d1:c7:df:f6:a6:78:46:77:22:8c:77:fb:02:d2:
                    fb:f7:b3:31:4d:fe:e3:8d:8c:5d:ae:db:f5:ca:e8:
                    dd:ca:ff:93:ea:bc:40:9d:3f:cc:fc:3c:45:48:2a:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FD:85:E5:11:80:76:F9:A8:BC:6B:E7:D5:EF:73:7F:9B:C0:39:AD
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:92:89:7b:e4:34:14:59:50:84:c6:2d:66:ef:6b:bc:d0:c3:
         c7:04:f7:5c:6a:4d:68:e0:3a:8e:05:f1:51:ce:ee:2b:b9:42:
         b0:f4:98:30:f1:99:39:60:ce:80:62:3f:ec:72:1a:b5:f2:9c:
         d0:62:e8:ab:f1:4e:76:3c:51:3f:00:f6:94:b3:6e:46:78:7c:
         73:71:a4:60:77:f9:02:01:bb:4c:c9:21:f9:ea:25:4d:a5:88:
         5f:74:5d:20:cb:88:e2:80:1d:5d:26:1a:3d:8d:9e:5e:41:a0:
         63:72:26:77:4c:42:60:7c:e8:b9:bb:06:68:a1:2d:68:f0:68:
         9a:34:4d:49:a3:d8:a4:8e:4d:90:df:eb:33:a4:58:96:ba:71:
         c3:7d:01:f7:00:ae:a0:50:f9:17:c8:6d:7d:fd:10:8d:bc:e3:
         d2:7a:33:24:c0:0c:f9:c9:7d:14:fa:19:00:ba:e0:1d:72:a2:
         dd:f5:50:af:56:2e:56:e4:99:c2:8a:f1:17:d5:89:e9:ed:92:
         a1:ad:0f:1c:12:ea:c6:fd:f0:8e:28:38:c3:ba:31:5a:b4:e9:
         79:7c:32:bd:7c:1f:1e:8e:13:65:3f:70:d9:c1:1a:71:fd:29:
         3b:71:02:18:44:89:f6:e7:31:9c:28:47:b8:eb:2a:6e:ba:7b:
         28:dc:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:37 2025 by rpki-client