Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          u5T1d347BNnrX3p0TQRnduNiYGadf4UqAq0Ix61HOtM=
Subject key identifier:   BD:16:9E:64:F1:85:2D:02:C0:A5:64:37:8B:C2:A5:AA:2D:23:4F:EC
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       01976CCFE958C00A7EB3F68CFE4ECFF3FA6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          041F
Signing time:             Sat 14 Jun 2025 05:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:54 +0000
Files and hashes:         1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: urKzCb5b4QJL7vru1tb3tJeBhHHkbzCnIMsUl2j/xdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:e9:58:c0:0a:7e:b3:f6:8c:fe:4e:cf:f3:fa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: Jun 14 05:00:54 2025 GMT
            Not After : Jun 15 05:00:54 2025 GMT
        Subject: CN=bd169e64f1852d02c0a564378bc2a5aa2d234fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:73:97:31:1a:41:c6:ba:9c:a4:6f:22:e0:
                    dd:27:da:6b:7c:b7:db:e8:0b:f4:d4:ae:10:13:1e:
                    21:39:7c:2a:4c:32:81:48:22:b6:fe:dc:85:18:68:
                    b3:9c:54:3b:a5:90:51:ad:2a:64:d9:c0:1f:51:c1:
                    da:ab:07:25:01:fb:a2:92:c9:8c:d1:fa:50:c1:15:
                    4f:63:5d:c0:ae:86:46:19:9f:b3:e5:bc:0d:f3:ed:
                    e0:9f:65:45:24:f9:e5:2b:dd:9f:52:bb:8e:41:8a:
                    23:e2:2b:c4:6e:86:38:8d:d4:b7:7b:43:f3:1f:c5:
                    1f:0a:74:6e:be:d9:00:3e:6c:8f:28:d6:89:9d:22:
                    55:c9:b8:3a:63:51:42:ee:d5:99:89:f6:6d:f9:e1:
                    08:43:18:61:f5:44:e2:a4:fc:01:8e:4b:ff:a5:31:
                    70:bd:29:95:73:d7:bb:e1:f9:4f:4b:7a:25:b2:6b:
                    ad:77:a2:ea:37:04:b5:31:4d:33:35:99:1b:9d:03:
                    46:e3:00:17:be:de:7f:9d:80:52:ee:d5:fe:72:08:
                    57:95:a5:52:bb:ef:29:eb:6b:4f:da:b1:65:da:b8:
                    aa:a5:21:ab:51:4d:5f:69:8c:d3:55:0e:06:b6:03:
                    7d:d0:15:f6:dc:f5:60:3b:e3:da:14:b3:9c:23:7c:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:9E:64:F1:85:2D:02:C0:A5:64:37:8B:C2:A5:AA:2D:23:4F:EC
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:ca:70:43:2a:3a:a4:c3:dc:9c:77:be:bc:87:58:9c:23:
         65:84:76:44:98:27:8f:d9:84:9d:55:1e:5f:e2:27:df:bc:10:
         13:81:e0:9b:d1:27:d5:ee:8c:0a:20:d7:e0:9c:51:7d:c1:f6:
         da:d3:04:90:05:4b:98:17:83:80:fe:ff:0c:b7:2d:e8:01:17:
         df:3c:83:d3:ec:12:7b:28:39:2d:5b:01:b4:23:da:89:89:25:
         0e:92:17:c0:c8:38:c9:0c:f5:42:34:c1:46:8d:23:06:cf:ba:
         71:39:09:d6:fb:9a:96:32:bf:c6:ea:10:be:79:af:77:4c:4f:
         63:e5:6e:7f:d4:d8:66:59:8c:ee:b7:87:ec:3c:6c:42:81:7c:
         fc:2a:d3:68:6d:95:33:67:c4:ae:70:9a:23:99:f7:3c:18:3e:
         3e:cb:99:a9:9a:5f:9b:d9:20:30:ea:54:12:e6:70:03:95:04:
         ae:97:71:9f:c5:2a:f3:82:4a:3f:91:79:35:ab:52:4b:f1:e9:
         7f:a3:99:f7:4e:2a:2d:cf:7d:76:6c:e4:76:c1:c2:8d:6f:f6:
         fa:8a:35:5b:5f:7c:96:a4:e6:91:c5:5b:14:1c:cd:72:6a:f9:
         ec:f8:3f:49:9d:2d:15:30:46:a4:e1:60:27:fb:0d:54:2a:7f:
         1f:dc:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:12:21 2025 by rpki-client