Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          Y5uZG8/54if7WUp2lW4P9/6eLa+CseLZfb55PxS4Spk=
Subject key identifier:   32:D8:F5:14:68:54:36:7D:10:36:99:8C:0B:D1:EE:54:C0:DA:83:D7
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       01965FF23F5C83A99AC3A80DA00032530206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          1504
Signing time:             Wed 23 Apr 2025 00:00:33 +0000
Manifest this update:     Wed 23 Apr 2025 00:00:33 +0000
Manifest next update:     Thu 24 Apr 2025 00:00:33 +0000
Files and hashes:         1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
                          2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 8whGDZCm2Cw9KoKKXO+Y3MyCl2C5WuL6Yqzlj6U7iio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 20:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5f:f2:3f:5c:83:a9:9a:c3:a8:0d:a0:00:32:53:02:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: Apr 23 00:00:33 2025 GMT
            Not After : Apr 24 00:00:33 2025 GMT
        Subject: CN=32d8f5146854367d1036998c0bd1ee54c0da83d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:9d:10:42:60:4d:70:96:15:ca:90:d8:3e:
                    10:61:f9:7c:25:b4:e9:41:f7:e4:4d:aa:83:64:d9:
                    f0:3f:f6:41:ff:60:0c:c7:c2:53:dd:c7:1d:14:56:
                    ae:33:b9:ed:a5:49:f8:92:5a:13:02:a7:53:f3:d9:
                    49:95:78:f8:9f:3c:ae:8d:e3:2e:ac:ba:3e:fe:5f:
                    01:9e:eb:58:80:9d:9f:55:fb:60:89:84:a5:38:17:
                    41:c7:0b:85:30:bb:1a:47:a4:4e:be:d5:ae:91:ef:
                    d2:d0:2d:93:e4:15:da:22:e5:e3:4a:c6:f4:bd:48:
                    d5:39:8d:a1:61:95:b1:e6:5c:51:54:b0:12:76:4d:
                    3d:94:19:2e:ba:88:f3:09:d1:c4:ad:b4:d5:6c:d3:
                    59:04:19:99:16:04:8f:db:23:03:2c:6d:7b:7e:e2:
                    e6:57:26:52:11:69:ff:64:f9:d4:18:bb:0e:88:98:
                    31:0a:da:fa:96:d3:aa:5b:71:a6:e7:87:2e:18:1c:
                    dd:53:98:d8:6b:4f:45:5b:d7:b8:1e:a9:c1:85:3a:
                    71:22:27:bb:e8:fe:a8:07:8e:cf:e8:3a:c0:83:d3:
                    ae:b6:3c:52:42:5c:39:72:bc:71:36:4b:92:4d:4c:
                    09:7f:53:1d:e8:d5:55:c7:3f:d0:a0:78:f5:f9:5b:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D8:F5:14:68:54:36:7D:10:36:99:8C:0B:D1:EE:54:C0:DA:83:D7
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b9:1d:a0:75:50:1e:ff:7f:f0:69:73:cb:39:2f:08:e1:f6:
         96:00:d2:b3:d8:57:2c:5d:e2:48:ce:32:bd:46:e9:70:f0:a4:
         6d:7a:eb:08:fe:00:8d:61:90:59:d4:0c:99:51:fd:fb:ea:c1:
         7c:a8:93:44:17:80:88:98:cd:41:52:38:3d:88:01:29:58:fd:
         22:be:3a:97:c8:63:a8:7e:f2:d0:a6:6d:d7:dd:f3:45:01:0b:
         71:b1:94:6d:55:e1:d2:52:c6:28:6b:a1:f3:fd:b1:d3:51:53:
         fb:3d:c2:51:19:96:cc:ef:00:db:8e:a2:27:40:35:44:8a:04:
         b8:f8:d9:b5:64:3c:7b:b1:59:ef:61:a2:bd:5b:5f:c2:67:1f:
         85:1d:16:4b:f9:3a:ba:22:9d:c5:76:c8:c3:d4:a9:24:81:b7:
         3c:fe:e2:14:dc:be:08:de:71:d3:fb:f4:65:52:1b:0a:a4:95:
         f5:eb:79:7c:5e:e1:b6:79:26:55:33:dd:6b:b3:7c:06:ec:14:
         ab:d4:56:35:ad:af:74:79:bb:53:29:a9:1b:77:0a:12:b1:b4:
         de:95:14:78:1c:95:93:fb:db:12:5b:1d:d2:d5:a0:58:f3:00:
         89:16:a2:77:23:a3:ca:58:e0:31:dd:9c:ff:46:47:49:a0:b1:
         a6:d7:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:20:31 2025 by rpki-client