Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
File:                     E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft (raw, json)
Hash identifier:          dh3LCpd2XTeq6yD112qjw0QFVjweSO8YvE3enU8Bylw=
Subject key identifier:   1F:E5:10:DC:27:4E:78:3A:72:21:EC:10:FC:8A:8B:B6:EA:94:E1:F3
Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35
Certificate issuer:       /CN=13edfb910fffe47d51ad9d0f883b1b649669e135
Certificate serial:       0196428CC7504BB496B19C5909138F761873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
Manifest number:          068A
Signing time:             Thu 17 Apr 2025 07:00:44 +0000
Manifest this update:     Thu 17 Apr 2025 07:00:44 +0000
Manifest next update:     Fri 18 Apr 2025 07:00:44 +0000
Files and hashes:         1: E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl (hash: DAG6GyxBCqHlTZ4vnDLAiTgfWpCnuI15IjPMlDfygYI=)
                          2: PN1oCUnhSJS2gBMwpHK-KuwsUE8.roa (hash: I/FNz1fCzuds8tR/gTE3VhldOpz6XGiv0J7vXLKi7Hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:8c:c7:50:4b:b4:96:b1:9c:59:09:13:8f:76:18:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135
        Validity
            Not Before: Apr 17 07:00:44 2025 GMT
            Not After : Apr 18 07:00:44 2025 GMT
        Subject: CN=1fe510dc274e783a7221ec10fc8a8bb6ea94e1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:e4:94:a0:c7:88:67:d7:26:fa:72:ef:6f:
                    b3:c1:08:0a:62:88:80:8b:4c:af:53:f1:9a:68:0c:
                    24:c8:eb:4b:dc:63:70:00:e2:24:0a:58:be:fd:d2:
                    be:56:bb:65:a4:2f:7b:90:81:7a:7f:06:e9:5f:7f:
                    8e:57:fa:75:cf:67:57:4f:a1:91:b1:0c:43:4f:0e:
                    0e:f9:09:e3:cd:03:9b:b0:4a:22:7f:75:22:9a:ec:
                    6c:95:73:26:1d:8a:9d:24:0a:5b:be:a2:60:2f:0a:
                    68:9d:d8:3f:e4:c8:d7:b8:f7:33:f2:73:50:06:89:
                    7c:01:23:d5:12:a9:0b:08:e7:df:cd:8f:b7:cc:fe:
                    df:9f:92:20:bb:12:57:b6:c3:1a:de:16:b3:77:8f:
                    8a:0a:ff:02:07:2d:03:c4:54:5b:91:52:8e:98:11:
                    ba:48:6b:6c:0b:db:d9:ef:1f:c2:1b:2c:a7:d6:2d:
                    f0:58:12:d7:73:0a:29:93:88:0b:69:a8:7d:dc:de:
                    71:ff:ea:fd:fb:0a:ad:8d:29:5e:24:e4:30:1a:21:
                    7d:9a:a9:8b:cc:af:54:fc:8a:51:2a:f1:ea:5b:aa:
                    5f:1a:83:82:e9:38:d6:ab:0a:38:7a:41:d2:b7:08:
                    2a:2a:5b:53:a0:06:6d:f0:08:65:a9:e3:4b:1a:99:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E5:10:DC:27:4E:78:3A:72:21:EC:10:FC:8A:8B:B6:EA:94:E1:F3
            X509v3 Authority Key Identifier:
                keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:1e:89:fe:fc:71:31:d9:ff:1a:9f:48:bd:91:e2:84:6c:
         51:d8:f8:a0:9f:76:c3:5e:37:bb:57:d1:44:7d:aa:4c:1b:cb:
         12:81:7f:a5:6d:13:a6:d1:7f:c0:f9:cb:e7:18:10:ee:5c:7b:
         1a:16:5f:5a:84:37:b8:58:88:c4:61:47:ae:75:42:ab:c2:4f:
         61:98:02:f0:a5:0c:e8:37:5a:16:27:d0:05:64:f7:4e:ab:26:
         6e:13:36:d1:f2:00:47:65:b4:66:0a:03:1e:33:a5:e7:c2:9a:
         89:71:29:c6:3d:4c:82:7d:9a:a5:ef:9c:f8:14:06:d7:8c:2c:
         70:16:bc:de:b3:33:3f:97:3c:4e:06:66:5e:9c:aa:e3:93:49:
         7f:bd:a7:34:ac:37:f3:ab:dd:d0:22:2f:45:95:63:c8:67:32:
         f6:48:37:2b:15:6d:4b:9f:6a:98:4c:a9:f2:ef:a0:78:d7:fc:
         55:b1:f9:73:8c:10:b1:92:15:79:02:55:02:ee:51:df:5e:31:
         75:21:83:82:e3:c7:16:54:58:6d:d2:fb:cb:c9:f1:45:02:ea:
         dd:50:bd:f4:8b:56:db:98:d9:9d:b7:09:42:57:f7:48:f7:d1:
         df:37:91:9f:b1:71:99:96:38:78:b8:2c:cf:b6:29:5b:d3:b2:
         f9:e1:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:18 2025 by rpki-client