Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          +QDnL00m1nx6EAhFO8Dq7qd24XXFOASvebzoB9lSci8=
Subject key identifier:   76:1C:9A:2A:06:3B:86:85:20:85:24:EC:78:5D:12:FD:2C:A4:C0:CD
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       0197838E83C02897458DDAEABCB56ED46860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          159A
Signing time:             Wed 18 Jun 2025 15:00:44 +0000
Manifest this update:     Wed 18 Jun 2025 15:00:44 +0000
Manifest next update:     Thu 19 Jun 2025 15:00:44 +0000
Files and hashes:         1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
                          2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
                          3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: V37vDLICiGYkLMkLqHmCq1G9a8xDA/vr4hIIP1ECe6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:8e:83:c0:28:97:45:8d:da:ea:bc:b5:6e:d4:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jun 18 15:00:44 2025 GMT
            Not After : Jun 19 15:00:44 2025 GMT
        Subject: CN=761c9a2a063b8685208524ec785d12fd2ca4c0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a6:b5:d1:32:27:0b:85:6d:b7:36:f5:2c:18:
                    9f:eb:7d:73:e1:09:ea:97:44:fc:2a:c3:3a:d3:c8:
                    ea:de:87:a2:b4:90:51:da:2d:28:40:3e:d0:c7:c9:
                    ae:14:e9:19:cb:3a:47:42:33:b7:fe:92:42:bf:e2:
                    f4:9a:99:8d:32:fc:65:73:2a:02:b1:7f:83:e4:4f:
                    d3:74:1b:31:c4:f9:95:aa:94:02:70:24:77:81:01:
                    d5:72:89:b4:23:55:2d:bc:ca:39:d8:cc:f5:f0:60:
                    b6:43:52:68:58:34:4d:af:18:c7:6f:9a:5a:d4:aa:
                    85:22:d3:a3:74:7b:bf:b8:2f:75:af:69:50:00:96:
                    5e:8f:e4:7a:f6:93:cb:7b:87:da:49:79:25:1f:35:
                    1b:b0:5f:1d:03:52:3b:40:a7:7b:23:20:bb:c4:65:
                    ca:75:26:83:fd:7c:29:c3:3b:3c:29:7a:46:c4:c1:
                    0b:0f:ce:d7:e6:f4:f3:5a:78:14:c9:3f:50:6d:06:
                    8b:fa:2e:7c:6b:a4:ac:13:08:61:55:80:d6:cb:6d:
                    8c:d6:3b:28:7f:1a:de:bb:e6:16:52:09:da:e1:9d:
                    55:fa:6c:7e:6d:23:5f:c9:65:a5:e0:ca:91:3f:11:
                    f5:d6:4c:28:7c:da:27:86:5d:85:f4:80:6c:7e:df:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1C:9A:2A:06:3B:86:85:20:85:24:EC:78:5D:12:FD:2C:A4:C0:CD
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:a8:fc:c2:ab:7d:28:d3:39:e2:d3:10:70:6e:6e:b3:0c:
         f2:c5:ae:8a:d5:3a:a3:40:c1:87:d6:79:7b:9a:a4:f5:7c:e6:
         fd:c3:a0:00:04:2a:9a:ff:40:17:fd:90:77:4d:74:b5:fd:a5:
         05:55:f2:96:a9:99:d3:7e:46:f4:27:8e:15:6b:92:99:42:d3:
         fe:f8:d7:0a:0a:2b:06:f8:65:f5:0d:7c:c3:94:87:68:db:0b:
         fa:49:6a:20:1a:c3:bb:d7:df:b5:b7:11:e3:b7:b9:05:5d:c4:
         65:ad:d7:56:49:03:c7:94:89:d7:72:9b:e5:28:8e:96:1a:68:
         11:8c:1e:a6:f1:d2:80:f5:74:0c:78:93:26:ec:be:b0:b3:20:
         3b:cf:c0:92:3a:0e:9e:4b:6d:6a:26:c8:24:05:59:f7:1c:e0:
         1a:e6:d8:71:79:a8:98:71:5a:85:d8:f5:80:8d:bc:5e:7a:65:
         c6:20:39:aa:39:e5:55:c7:d0:f9:4b:7d:71:47:04:5c:03:c5:
         5a:12:84:fe:9e:88:39:75:97:dd:0b:18:4d:c2:ed:81:39:54:
         5c:50:1f:f0:4b:ee:a8:bc:5f:59:e6:47:d4:65:a2:fa:da:fa:
         ef:43:a8:b4:60:e5:fa:90:94:e9:3c:8d:91:ba:6c:57:0f:94:
         e1:45:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:45:45 2025 by rpki-client