Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File:                     5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier:          M0uaXpYVnutCxeKhH39Di7FgqlwK6vaMo1eewpjkyw4=
Subject key identifier:   42:B9:09:FF:A3:FA:19:D4:CE:7D:70:61:A6:16:EC:BA:31:4B:E4:E1
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer:       /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial:       01964B21CBC3D57DE6A7942F72B273B6C83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number:          0454
Signing time:             Fri 18 Apr 2025 23:00:28 +0000
Manifest this update:     Fri 18 Apr 2025 23:00:28 +0000
Manifest next update:     Sat 19 Apr 2025 23:00:28 +0000
Files and hashes:         1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: F1J4deGpKTpGNy4aPbMNCQIaRGtGzfuEEav0+39/W9A=)
                          2: fv9GU78KTThVylwpUoVkrE_AXzQ.roa (hash: nnsqZgD7w8A2HHvf/0xUBOlqX3ZvvzafFDRwPNk7+QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:21:cb:c3:d5:7d:e6:a7:94:2f:72:b2:73:b6:c8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
        Validity
            Not Before: Apr 18 23:00:28 2025 GMT
            Not After : Apr 19 23:00:28 2025 GMT
        Subject: CN=42b909ffa3fa19d4ce7d7061a616ecba314be4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:6d:7e:62:da:7d:6b:d4:62:1b:ba:0a:c9:
                    d6:08:f7:a8:9c:87:90:7c:79:9f:74:15:ae:e6:80:
                    7f:cb:cf:c4:e2:f6:6c:61:8a:45:8e:95:7d:7e:eb:
                    58:ff:87:4d:73:b7:8a:07:02:fb:a3:e1:05:9a:b7:
                    ac:61:9e:ce:7f:77:b9:b2:c5:8f:44:50:54:fb:3f:
                    78:25:66:dd:aa:c9:cf:7b:40:1b:7b:7a:50:53:bb:
                    2b:9a:05:6a:0d:aa:2d:c4:93:5a:72:c0:b3:4d:6b:
                    e9:f2:7e:ac:3a:14:a9:f3:2b:6d:dd:cd:fe:0d:00:
                    7f:f3:a8:34:25:e4:99:4c:3b:8b:ce:4f:5c:7a:84:
                    86:53:ab:1c:6e:00:11:2b:fd:2c:dc:ee:b0:94:4f:
                    a3:05:fa:ed:9f:35:74:7f:1e:17:22:60:f8:8c:5f:
                    b6:43:6f:ad:b2:bd:4a:9f:dc:45:bd:c8:63:d2:0c:
                    02:56:57:2e:0e:6d:25:bc:7a:19:4c:32:a0:fd:96:
                    27:ec:9c:f6:68:d7:8a:44:e0:3a:4b:b7:fd:69:1c:
                    ba:0c:13:11:01:60:e6:2f:11:da:bd:ab:87:3c:09:
                    5b:e7:b5:12:62:c0:08:1a:74:2e:9b:1b:f0:ae:b7:
                    6d:c0:7b:c4:93:3f:48:2f:4f:55:97:f5:43:63:9b:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:09:FF:A3:FA:19:D4:CE:7D:70:61:A6:16:EC:BA:31:4B:E4:E1
            X509v3 Authority Key Identifier:
                keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:02:78:0b:f5:21:d7:16:00:c4:73:51:51:86:7d:1b:b8:2d:
         d2:02:57:64:97:d1:c1:e5:81:89:1f:14:5b:b1:f3:eb:c8:52:
         ac:07:63:04:11:15:39:b6:4e:53:83:a6:1f:9b:68:c4:5c:35:
         85:4b:1f:fa:a7:e7:88:10:4e:3b:37:86:8d:c3:04:4d:e2:78:
         65:75:36:9b:f8:48:36:73:48:7b:47:79:8a:0a:1f:0d:fe:f4:
         d4:be:1d:ce:ae:6c:16:e1:60:61:89:25:85:4c:f9:65:f6:31:
         24:7e:da:d7:b5:2e:d8:11:66:f7:1b:dd:d0:8a:3f:9c:f6:30:
         e7:09:8c:24:82:93:38:38:9f:2f:a8:b4:a6:46:35:77:42:5b:
         84:34:5f:b7:e9:d0:de:e2:cb:34:95:50:95:a9:d5:16:df:ad:
         1d:3e:bd:45:eb:d8:4b:d7:72:81:24:40:87:4a:62:a0:1e:31:
         a4:c7:fb:eb:f7:ff:bf:77:c2:d6:89:d9:42:2e:fc:6d:ad:10:
         49:27:80:b2:84:64:d4:f2:c9:40:18:01:c8:20:ce:c4:47:1c:
         a0:64:94:3c:1c:64:ed:d3:18:c7:6c:a8:57:7a:f0:68:e5:2c:
         b6:bf:84:e1:46:8f:76:73:e5:2a:4f:27:d3:6d:32:54:c0:91:
         13:9d:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:15:00 2025 by rpki-client