Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          tEZhcFaP6HPypV9O5yrRAjxX+zWKzgb2qYgAc1IqOsw=
Subject key identifier:   D7:0E:5A:9D:C5:A0:74:89:05:72:72:8E:8F:0C:56:6F:92:BD:7D:BE
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       01976BF411539C150C2C7F174927CE8A1627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          0333
Signing time:             Sat 14 Jun 2025 01:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:46 +0000
Files and hashes:         1: lNqtvqUZifhN9hUTQHsN8rzDv6s.roa (hash: noJIwI7/Q+WHXTBLIOr4/ymrWUykyqujMSct/kdt/UE=)
                          2: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: p/40Fk0fx+8x/dAeo4RUXO4esGpE58hIoqRV3YCliCk=)
                          3: sLN0Xk8eYZ3fOkEohN2U_OcDnBE.roa (hash: hLQ2+Hv/BslGw+2RJD0A2omXlm9351c5s36b6sRZHRM=)
                          4: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:11:53:9c:15:0c:2c:7f:17:49:27:ce:8a:16:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Jun 14 01:00:46 2025 GMT
            Not After : Jun 15 01:00:46 2025 GMT
        Subject: CN=d70e5a9dc5a074890572728e8f0c566f92bd7dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:56:3e:f9:ee:0f:38:f8:1c:64:a8:e1:df:
                    b1:0b:58:c0:e2:b2:91:65:10:a1:3a:d3:72:9a:ec:
                    79:eb:7d:33:09:70:cd:79:97:bc:d4:b3:66:8b:45:
                    29:28:1f:58:f4:12:c3:a1:9e:25:dd:d6:80:12:52:
                    7a:11:00:a4:a0:d1:6e:62:45:ba:a2:01:2a:d2:8f:
                    33:f7:60:e4:6b:d9:41:e0:dc:5e:50:0a:00:a7:96:
                    fc:e7:26:75:e2:18:15:a3:0f:e0:75:bc:ca:9f:a3:
                    cf:40:88:8f:76:9e:1c:1a:bb:19:fb:b6:77:a4:89:
                    6d:2d:1c:8f:5d:02:92:a5:30:9a:ba:10:12:5b:a8:
                    fd:15:99:ce:5b:a2:79:ee:ef:12:fd:0f:27:35:32:
                    fe:cf:43:78:2b:3f:3e:8b:d4:fa:2a:06:db:a9:ce:
                    fb:00:fc:59:88:15:d1:27:49:e4:49:e8:4d:67:5b:
                    68:81:47:df:7a:ce:f9:47:8f:b0:d3:45:bd:18:6a:
                    38:54:d0:2e:b1:11:21:4b:02:b2:14:a7:4e:93:f5:
                    07:17:f5:78:11:89:85:0c:bc:df:64:16:0f:11:2d:
                    04:ce:2a:64:c9:81:be:dd:e1:c6:b7:03:3f:b2:bd:
                    99:76:27:09:80:50:e7:9c:72:aa:e0:f8:52:33:73:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0E:5A:9D:C5:A0:74:89:05:72:72:8E:8F:0C:56:6F:92:BD:7D:BE
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b9:65:5c:60:87:9b:0c:eb:03:e9:38:d4:aa:35:68:02:5f:
         83:4b:a0:7e:2f:dc:cd:5e:45:e0:08:59:c6:81:53:05:ff:91:
         08:5f:90:e7:99:4f:f8:72:5b:25:ae:5f:60:27:44:05:38:be:
         31:9a:94:b8:4d:bc:6c:e5:c2:f6:5d:62:11:8f:2d:3b:d3:64:
         6b:88:83:d2:62:a4:c9:ac:d0:0d:e4:1b:1e:03:df:dc:90:6a:
         3f:0d:b9:8b:22:65:40:a0:45:94:9e:ad:b6:30:b6:de:7f:69:
         66:66:c8:a4:2a:13:b3:2a:dd:48:af:84:56:21:fc:64:fb:0a:
         2b:bc:b3:c8:ec:ed:db:24:4d:a1:78:31:37:93:d2:a1:b8:f4:
         6f:55:0e:c1:90:5f:e4:e5:09:2b:be:14:41:0a:e4:54:1d:5c:
         69:fe:89:9e:c4:bc:ea:74:4d:df:c7:93:a6:c8:34:21:d3:c6:
         3c:37:98:ce:76:70:3c:30:bd:01:ec:ba:71:26:6c:aa:f3:7e:
         88:d2:7c:41:26:96:6a:fb:17:64:54:09:70:97:6f:42:3f:a5:
         e4:00:3a:90:fd:2b:c1:c6:6b:13:cf:aa:2c:c7:53:7f:1f:56:
         5f:32:03:69:ec:3e:8b:ca:5e:8d:3f:72:1c:2f:4a:4e:03:79:
         69:56:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:03 2025 by rpki-client