Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          ircUB26Il6d/QG/aMX5h5U//maNHo/jWdH8zF9XHT/k=
Subject key identifier:   B0:5C:3C:9B:DD:84:32:44:C2:9B:3F:48:31:8D:B9:AA:FF:73:DD:AF
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       019655A62825E71D5423E5140995F321593A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          1500
Signing time:             Mon 21 Apr 2025 00:01:14 +0000
Manifest this update:     Mon 21 Apr 2025 00:01:14 +0000
Manifest next update:     Tue 22 Apr 2025 00:01:14 +0000
Files and hashes:         1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: Xg5tpLkz44NgS7YrdXqmnio3ZCkdNj1sTai/ckZz8a4=)
                          2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:a6:28:25:e7:1d:54:23:e5:14:09:95:f3:21:59:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Apr 21 00:01:14 2025 GMT
            Not After : Apr 22 00:01:14 2025 GMT
        Subject: CN=b05c3c9bdd843244c29b3f48318db9aaff73ddaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:d1:49:fb:a4:1a:5a:ca:8f:d4:64:4d:da:
                    0b:9d:a9:46:a2:0c:1a:66:6a:06:8d:c1:5c:9c:45:
                    9d:c0:c2:cd:43:ec:86:84:13:38:99:ae:37:cb:40:
                    32:03:ac:1d:74:24:fb:f6:d5:f3:92:84:85:6e:61:
                    6c:44:1f:67:d5:b0:bc:f1:7c:a3:3f:c7:4c:67:2a:
                    79:9d:15:35:79:8e:44:b8:b9:6b:a8:a2:d8:25:15:
                    bb:74:29:e2:78:b1:90:6e:2b:66:06:d7:ed:44:78:
                    bc:b6:1e:7a:c7:89:70:d0:83:c1:8a:19:22:cb:f9:
                    d2:3a:91:7f:2c:f3:fc:11:2a:1c:b0:f1:0e:d3:e5:
                    f3:25:e9:52:ab:3e:4d:5d:c8:14:1a:16:99:88:55:
                    e8:c2:a6:a5:cd:53:35:09:57:da:bb:0b:89:95:b8:
                    89:b8:f3:b4:46:32:b5:7e:8e:08:a6:dc:e3:27:c9:
                    1d:38:40:c5:ab:60:c9:77:f6:d1:38:04:91:57:eb:
                    f6:3d:f0:3a:71:02:08:a0:1d:d3:1b:15:5e:24:55:
                    ec:5e:cf:3b:90:39:7e:79:27:a9:0b:33:7c:6f:77:
                    09:cd:cc:31:47:0c:01:b9:80:be:6e:f7:96:c6:ae:
                    b1:20:52:84:d0:a8:d3:72:03:64:20:d6:82:04:a3:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:3C:9B:DD:84:32:44:C2:9B:3F:48:31:8D:B9:AA:FF:73:DD:AF
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:4f:72:d2:f8:a9:5a:74:5a:19:e6:2e:2e:cc:53:01:e0:
         11:a1:30:40:b8:8c:48:92:79:ae:1a:ad:fb:ed:a1:c5:a5:11:
         68:7f:75:75:94:9d:d1:94:d2:6a:91:8d:27:b8:27:00:ec:fe:
         10:ba:4e:75:a5:74:a2:7b:30:ee:49:43:15:b9:0e:44:fb:ee:
         77:e2:f7:c0:ea:34:68:02:bb:cc:f6:b3:89:85:1b:c8:8e:a1:
         1c:af:91:18:07:f5:7c:5e:a0:11:df:74:75:71:13:af:86:e0:
         40:32:44:fa:f4:6f:c8:34:f1:48:26:b5:ca:41:62:3e:2b:e8:
         f2:39:06:0d:2f:ac:d1:0b:b9:92:12:7f:4b:c7:0b:ff:db:38:
         85:24:18:d9:32:43:24:e0:22:08:67:53:0a:40:cf:d5:36:81:
         39:01:d5:fa:aa:c2:5a:cb:dc:3b:f4:0d:e2:44:ef:0d:c4:36:
         cf:b4:a0:ce:3a:6f:42:b5:0a:aa:a3:5a:ad:17:34:96:41:71:
         20:c4:35:e4:5a:5b:13:9a:2e:a0:2c:57:b7:fc:de:13:3b:ee:
         4a:8a:65:41:47:df:49:ba:62:f5:21:34:cd:70:7d:29:03:6c:
         53:d4:68:41:48:9b:58:87:a1:54:f5:b0:c9:9d:ea:d9:1b:4a:
         f0:97:b3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:13 2025 by rpki-client