Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File:                     4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier:          T6daEHqsHKmzu0IzL+KIyEQnbcsiSJcpS8JPcCF3/lM=
Subject key identifier:   E1:5A:70:59:E6:27:D9:6D:86:46:8B:8B:CF:A9:32:A3:B8:B4:75:B1
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer:       /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial:       0196A164B14858D462D805F1239F7BCF1D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number:          07DB
Signing time:             Mon 05 May 2025 17:00:52 +0000
Manifest this update:     Mon 05 May 2025 17:00:52 +0000
Manifest next update:     Tue 06 May 2025 17:00:52 +0000
Files and hashes:         1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: cM+3nmNvoWs4fwegOnAsMl63/kbJ3xwqvan3HA7CrHQ=)
                          2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:b1:48:58:d4:62:d8:05:f1:23:9f:7b:cf:1d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
        Validity
            Not Before: May  5 17:00:52 2025 GMT
            Not After : May  6 17:00:52 2025 GMT
        Subject: CN=e15a7059e627d96d86468b8bcfa932a3b8b475b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:58:be:73:41:54:19:3f:15:d5:23:e0:cb:
                    84:54:a6:93:dc:68:92:16:fa:4e:d8:57:3c:af:cd:
                    7b:da:e0:46:28:94:d7:93:62:1d:33:87:2c:97:9a:
                    88:58:13:d2:ce:37:eb:d5:14:a9:d2:d6:a7:7a:d7:
                    b3:b2:d1:75:13:f5:48:64:4c:d0:c6:cd:85:03:60:
                    78:52:b1:b3:68:2f:34:76:11:cf:62:62:9e:44:00:
                    73:f9:2c:de:96:74:83:f7:78:4b:da:50:4b:5a:8b:
                    54:3e:84:70:2c:8d:15:5d:cd:e9:6d:0e:dd:34:73:
                    37:80:96:5c:4b:15:89:de:e1:10:c8:9c:cf:1d:2e:
                    30:7f:a1:0d:68:fe:66:1a:fb:84:d3:04:47:b2:1d:
                    69:25:72:ff:23:76:dd:34:1c:d0:cb:7f:64:01:0e:
                    d3:51:cb:1d:67:c2:68:59:b2:1e:ff:9c:d0:77:97:
                    4b:04:f6:de:9c:3f:8c:81:39:a4:e0:2c:ff:e9:6e:
                    6b:39:6a:a7:cc:93:0b:5f:44:98:7a:29:44:8e:92:
                    b8:cd:03:eb:af:8e:5b:89:fd:0c:3e:c0:ce:84:d8:
                    4b:56:4d:95:1e:d3:a2:1a:ed:25:bc:3e:35:b1:6b:
                    43:c9:dc:0b:23:44:06:78:93:fe:a3:18:74:16:ad:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:70:59:E6:27:D9:6D:86:46:8B:8B:CF:A9:32:A3:B8:B4:75:B1
            X509v3 Authority Key Identifier:
                keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:c6:9b:d6:31:5d:38:bc:e3:b1:3f:21:c1:10:55:35:e1:
         08:f1:94:89:c5:0a:eb:6e:ae:a4:1e:80:d3:a0:af:40:f4:bd:
         f6:a1:77:21:cb:36:bb:33:ca:a4:bb:e6:2a:e9:d0:a3:fb:79:
         41:80:10:c6:97:a9:b2:b9:41:59:3e:d2:86:25:9d:61:d7:35:
         16:98:66:8a:7a:60:e9:56:24:84:7f:f9:ee:f9:83:93:e1:a7:
         ba:d9:1a:40:58:84:91:81:41:07:a2:1a:aa:25:d5:89:46:dd:
         bc:c1:f4:28:90:1c:f7:09:bd:a9:99:59:bb:a7:cf:a3:77:21:
         31:2a:02:3d:7f:3a:1d:84:b2:54:b7:f1:f4:c9:44:b8:52:06:
         91:68:8e:6f:bf:d6:ed:03:73:84:43:ad:4e:b6:d4:d4:27:56:
         5e:6e:e8:8c:c5:dc:82:3b:a9:f0:b0:0b:ed:86:78:a2:93:3c:
         ce:cc:62:b5:09:f2:0b:a7:4e:95:f2:5d:31:ba:42:8f:16:17:
         a5:62:ff:e2:b5:97:57:7d:61:2b:d5:27:ea:c9:46:aa:fb:2f:
         8c:5f:60:c7:28:25:07:dc:1f:1e:f9:e8:c4:a1:88:ec:37:aa:
         5b:57:19:52:15:1f:13:bc:a2:40:d4:5a:d7:b5:35:d0:91:8a:
         88:b3:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:24:47 2025 by rpki-client