Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
File:                     zE1IcI2lBUlZ5hilguKMFV_vET8.mft (raw, json)
Hash identifier:          P3oq32IkEB9g55tSPsO5aKUG2F8fuaJlRtkY11+c30Q=
Subject key identifier:   03:E5:6F:FD:86:CD:37:84:A5:FC:8E:CB:12:1C:1C:AE:FC:4C:7A:90
Authority key identifier: CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F
Certificate issuer:       /CN=cc4d48708da5054959e618a582e28c155fef113f
Certificate serial:       019644E8F8C942BA682EE4ED022E9C33CEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
Manifest number:          0451
Signing time:             Thu 17 Apr 2025 18:00:40 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:40 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:40 +0000
Files and hashes:         1: r9Ux985jnVmfKHLZzNH9_T06wzU.roa (hash: SP4ahRSwbqs6nOlIBz3rDf0O3m+DJabQsDxWQ8oLOwM=)
                          2: zE1IcI2lBUlZ5hilguKMFV_vET8.crl (hash: ImXBxqJvdZRdjnMgzamv6bSUczTsMA1eoF/Ga3hC9m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:f8:c9:42:ba:68:2e:e4:ed:02:2e:9c:33:ce:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4d48708da5054959e618a582e28c155fef113f
        Validity
            Not Before: Apr 17 18:00:40 2025 GMT
            Not After : Apr 18 18:00:40 2025 GMT
        Subject: CN=03e56ffd86cd3784a5fc8ecb121c1caefc4c7a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:31:45:1d:5d:6f:91:bb:bd:59:c1:e7:0e:
                    98:43:6b:2a:5d:81:1b:68:f3:98:25:c2:a6:83:43:
                    81:cd:02:ea:71:19:76:de:96:61:2f:1f:f1:a6:48:
                    14:5a:f1:2d:4f:f5:1a:c5:ec:00:93:ea:7b:59:3f:
                    22:5d:4a:e6:9a:09:c9:82:1a:cc:80:db:83:0f:41:
                    ac:e4:01:53:87:96:8d:56:c4:48:42:e2:a5:d1:b3:
                    97:6e:04:29:b7:f8:f3:fd:6a:37:34:19:21:3d:37:
                    15:2d:d6:cc:3d:ea:52:d9:8e:3a:77:51:f5:0e:82:
                    4a:ec:3c:ba:07:ab:05:8b:6a:21:3f:0d:a7:1f:92:
                    ed:21:cd:02:5b:fa:69:96:69:3b:52:49:a8:50:51:
                    09:30:41:4d:14:78:59:26:68:31:fd:6c:ea:be:63:
                    c0:c4:2e:a1:bb:d2:90:16:6f:87:f1:44:ea:5f:1a:
                    fa:8a:93:f5:74:6b:35:2e:b1:e7:46:be:78:b1:cc:
                    35:84:e8:b0:fb:c5:f0:0e:03:fa:bd:b5:7d:9f:b3:
                    e4:e8:51:6f:91:85:d0:38:e8:63:a2:81:3e:97:ae:
                    29:cd:bd:6f:dd:41:e2:5c:69:34:aa:d9:60:22:be:
                    c7:f3:56:d3:d2:49:5a:5f:a4:08:54:80:cd:eb:90:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E5:6F:FD:86:CD:37:84:A5:FC:8E:CB:12:1C:1C:AE:FC:4C:7A:90
            X509v3 Authority Key Identifier:
                keyid:CC:4D:48:70:8D:A5:05:49:59:E6:18:A5:82:E2:8C:15:5F:EF:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE1IcI2lBUlZ5hilguKMFV_vET8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/96a524-2e1b-4e9e-b2d8-a9c3122984c5/1/zE1IcI2lBUlZ5hilguKMFV_vET8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:5c:87:6b:37:10:c3:76:6d:74:19:61:de:80:a1:4c:46:
         a9:3a:bb:e5:17:4a:79:43:b3:71:55:6c:cd:01:e6:99:15:66:
         eb:01:25:bc:71:94:e7:34:51:36:7a:56:06:2a:e7:74:a4:f0:
         d6:52:23:45:77:60:b6:cc:19:99:89:ca:f0:a7:e8:f1:ad:48:
         66:e4:0f:8a:89:e7:7d:14:b1:b2:cd:8a:dc:1b:af:da:80:19:
         f3:fc:9e:a8:f4:ee:2c:c3:a9:41:e3:8c:cf:7f:02:14:07:b7:
         50:5e:32:2f:4c:4d:aa:13:6f:a9:6e:31:eb:f8:42:6d:a4:a4:
         f4:50:14:ba:7a:7f:67:6f:9d:a5:9a:18:fb:e2:38:2e:27:62:
         df:58:bf:1a:fd:ad:57:ba:e4:4f:78:94:9a:7d:9c:4c:30:59:
         15:5d:df:6a:eb:72:b6:4e:40:39:00:1d:ac:b0:14:e2:bd:1f:
         37:8f:66:36:d5:32:e3:b3:33:f5:74:91:6a:41:de:24:49:d9:
         1b:28:73:48:b1:34:e5:50:49:70:e5:84:ca:5c:34:6a:a5:a6:
         b2:f2:aa:84:1b:b2:67:0d:04:50:75:b5:51:68:01:ac:95:50:
         bc:b2:d9:85:fb:21:1d:2a:29:21:a0:b1:7d:17:2f:1f:0a:8d:
         bc:e1:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:24 2025 by rpki-client