Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
File:                     5aHlGcnOd1ddifB89xjzsMyG7FU.mft (raw, json)
Hash identifier:          UvY3jZz5ib4EUmTskByFS+pe0Uoh0SRvJbVgFWZRb+Y=
Subject key identifier:   17:8B:62:28:F9:88:56:0A:93:ED:28:A7:4A:BD:86:B4:3D:63:A4:48
Authority key identifier: E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55
Certificate issuer:       /CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
Certificate serial:       01965914F9D7DF5457B7F6A6F36F63A84EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
Manifest number:          14FE
Signing time:             Mon 21 Apr 2025 16:01:08 +0000
Manifest this update:     Mon 21 Apr 2025 16:01:08 +0000
Manifest next update:     Tue 22 Apr 2025 16:01:08 +0000
Files and hashes:         1: 5aHlGcnOd1ddifB89xjzsMyG7FU.crl (hash: VenmVikkmchCDTMCx+VcJZ6wDoZQaRva2ea2BBpLCuI=)
                          2: uu25l9W5gSZu_tAy5o8jy6VhkvE.roa (hash: Mo0sHJu2Fpws6Go/Wkd7BWgvp/SCXCkUPd0a54ZzbWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:14:f9:d7:df:54:57:b7:f6:a6:f3:6f:63:a8:4e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a1e519c9ce77575d89f07cf718f3b0cc86ec55
        Validity
            Not Before: Apr 21 16:01:08 2025 GMT
            Not After : Apr 22 16:01:08 2025 GMT
        Subject: CN=178b6228f988560a93ed28a74abd86b43d63a448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:25:64:eb:df:00:96:a2:48:09:28:9e:6a:9d:
                    de:74:19:41:fe:2e:db:be:36:94:6f:28:c3:8f:bf:
                    eb:7b:bc:f3:80:d1:79:3b:f9:1f:b7:ff:60:de:cc:
                    11:18:5c:0d:c7:f0:57:1a:ee:0a:68:9a:c6:ec:45:
                    af:ac:e1:94:9b:f0:c3:51:62:2a:18:7e:54:b5:eb:
                    78:ca:df:bc:a1:e8:a7:e4:73:27:10:0d:75:7b:54:
                    3b:ed:6d:c4:70:a4:ff:15:12:20:ca:9c:b0:4a:41:
                    c3:a3:64:37:06:55:00:bc:c0:16:64:36:c7:44:2f:
                    21:54:e8:f6:97:76:8e:8e:04:51:e9:83:d0:4e:50:
                    29:73:8d:21:74:48:c5:b5:e0:7a:3b:e8:0e:3d:89:
                    22:bf:78:05:89:07:33:1a:30:0f:fd:e3:ad:25:c7:
                    a9:14:76:c8:69:41:eb:fe:51:5a:6a:35:03:29:4a:
                    e8:0e:80:d6:e5:df:03:fa:84:78:c0:90:04:46:a3:
                    70:99:5f:d0:a0:5c:e1:ee:20:dc:67:9a:08:8a:a7:
                    7d:02:d5:f2:44:04:c6:e9:36:2a:23:88:03:6e:1b:
                    24:bb:6f:dc:39:1c:82:4f:a1:be:89:0a:f7:75:b9:
                    dd:de:a5:4a:e3:39:12:ea:ed:3e:eb:a5:d1:00:e9:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:62:28:F9:88:56:0A:93:ED:28:A7:4A:BD:86:B4:3D:63:A4:48
            X509v3 Authority Key Identifier:
                keyid:E5:A1:E5:19:C9:CE:77:57:5D:89:F0:7C:F7:18:F3:B0:CC:86:EC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aHlGcnOd1ddifB89xjzsMyG7FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2cc22c-2d71-46d6-9215-38c5b0c4f152/1/5aHlGcnOd1ddifB89xjzsMyG7FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:95:4f:75:d7:26:ca:35:c2:ba:d3:89:bc:45:9f:ff:a0:
         8c:71:d4:ce:62:cd:02:4e:bc:1c:b3:a2:61:02:b5:a3:d2:e1:
         b4:ad:c8:c6:28:01:93:c4:03:fd:d4:d4:f5:62:59:ce:14:3b:
         28:c5:d0:8f:d8:51:9f:65:46:2d:9c:e4:d2:25:d4:87:dd:52:
         d4:73:3d:87:0e:2b:5c:0e:7b:c3:62:d7:54:12:41:ab:b1:76:
         b8:51:58:ad:46:5a:02:17:f1:e3:df:48:19:6a:c3:38:d0:02:
         31:5b:a9:a6:b3:bd:69:7f:43:07:15:9c:03:27:dc:68:49:f8:
         ed:a2:e3:1b:b5:a1:8e:98:d2:2d:f8:83:8d:f1:f0:f2:12:25:
         60:16:56:fd:49:24:3d:f2:65:34:f8:c8:f8:46:51:15:bd:26:
         7e:8b:8e:82:2a:c3:34:e9:f5:36:5c:fa:9c:4e:55:9c:03:91:
         89:53:6c:45:3c:8e:5a:ed:e4:96:ee:0a:37:d9:07:63:c9:6f:
         b9:01:42:6c:59:74:77:3e:97:23:de:02:1b:4b:fa:ba:f0:47:
         14:59:23:8d:8a:59:28:3b:b0:0b:e2:61:22:2c:96:42:a7:76:
         84:6e:f0:b6:5f:55:42:5c:e0:a3:8a:4e:8d:5c:a5:8b:c1:15:
         d4:f2:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:15 2025 by rpki-client