Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft
File:                     ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft (raw, json)
Hash identifier:          T1Y1Ig146VM8jAapEDORe68159DEbvfnhW8jmjk13mg=
Subject key identifier:   F6:D0:9B:CD:73:DC:E8:CA:34:83:3C:04:F1:43:6B:60:98:D9:BE:2B
Authority key identifier: 7A:D8:69:E5:EF:D4:83:A7:2F:D3:E8:99:78:D1:CC:66:DF:32:B5:12
Certificate issuer:       /CN=7ad869e5efd483a72fd3e89978d1cc66df32b512
Certificate serial:       019644B1C8801EE018F775F0E9A01A8CB6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft
Manifest number:          04F3
Signing time:             Thu 17 Apr 2025 17:00:23 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:23 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:23 +0000
Files and hashes:         1: _EhP3rllpoQnC3l-MgFdCzFMz_E.roa (hash: sUekJ+2MT+tzGeS52b6DvBGQq384Sn63ZR154oCzfhs=)
                          2: ethp5e_Ug6cv0-iZeNHMZt8ytRI.crl (hash: uTlCJZZEgfMa3eyjaVTWMxaw8TI2+cG7dLeEDkCKO04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b1:c8:80:1e:e0:18:f7:75:f0:e9:a0:1a:8c:b6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad869e5efd483a72fd3e89978d1cc66df32b512
        Validity
            Not Before: Apr 17 17:00:23 2025 GMT
            Not After : Apr 18 17:00:23 2025 GMT
        Subject: CN=f6d09bcd73dce8ca34833c04f1436b6098d9be2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:7f:a0:27:e1:47:e4:06:f7:20:27:c5:4c:
                    03:c4:ba:1d:ff:07:90:96:68:e5:e4:43:84:f8:67:
                    05:e2:b8:e2:02:3c:a8:00:ca:ed:8f:e6:74:8f:73:
                    48:75:fa:30:6e:c4:30:bb:d3:32:9d:69:f4:7f:88:
                    c6:f0:a7:ae:b2:78:ed:a1:51:0f:0f:27:39:ef:c0:
                    99:82:ad:88:bd:f7:8b:c3:b3:66:30:63:df:4c:83:
                    c8:41:18:80:b7:26:47:03:5d:d8:e1:e5:e6:c7:d1:
                    40:a7:56:51:07:dc:cf:63:02:93:06:30:35:34:fe:
                    c0:90:de:90:86:7c:07:1e:51:95:d1:ee:6c:49:79:
                    fd:38:84:16:40:f6:ff:ec:9f:2d:94:9d:88:db:40:
                    5e:90:d6:20:99:e4:aa:fe:a8:2e:9d:2c:e8:ba:e1:
                    89:b2:51:67:00:47:6b:52:57:04:82:2f:9c:20:57:
                    b7:21:e4:94:ab:dd:67:b8:4b:d0:62:2f:2d:ff:73:
                    e5:5b:93:6d:55:03:43:21:57:26:08:bd:91:2a:cf:
                    3d:18:7b:d4:48:94:43:42:1b:24:9d:8c:b0:f2:98:
                    bf:5d:1e:c9:e9:15:77:8a:cd:08:ad:10:94:56:5a:
                    f4:39:50:ae:49:bb:74:3f:5e:e4:c7:42:c8:62:0e:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D0:9B:CD:73:DC:E8:CA:34:83:3C:04:F1:43:6B:60:98:D9:BE:2B
            X509v3 Authority Key Identifier:
                keyid:7A:D8:69:E5:EF:D4:83:A7:2F:D3:E8:99:78:D1:CC:66:DF:32:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ethp5e_Ug6cv0-iZeNHMZt8ytRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97311d-af26-4b8d-a1ad-13669569d68e/1/ethp5e_Ug6cv0-iZeNHMZt8ytRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:00:b5:29:f2:da:6d:d1:6f:28:bf:39:21:c9:c2:e7:0b:
         20:5c:3a:44:cd:53:91:54:50:4d:1f:91:a9:ad:f2:cc:28:d4:
         94:6e:08:36:aa:e1:0e:82:2c:2b:f0:2c:80:8b:3e:70:3d:1d:
         2c:3e:b9:e7:00:4c:65:88:c3:7a:83:89:6f:16:2f:bf:db:d2:
         df:e9:1f:34:de:5f:9e:c0:8e:f4:44:a9:55:bf:4d:62:7f:06:
         1a:5c:9c:63:dd:4d:4f:fd:10:5e:48:65:59:34:03:18:76:0d:
         ba:c1:a9:30:66:15:ef:14:c9:e6:80:a8:6c:6f:64:ed:ed:dd:
         d7:51:e0:86:98:86:78:b0:ee:f0:27:69:90:70:11:83:a3:b1:
         e6:e3:4a:51:10:38:f0:71:41:50:00:28:76:13:ea:d1:c5:3c:
         50:bd:71:73:fc:f5:89:bc:e7:71:47:dd:8f:8e:55:5e:70:19:
         8e:29:5d:9e:6d:0f:b3:9f:38:4c:0a:88:1c:f5:96:b0:85:76:
         1f:a8:a2:74:85:7f:44:50:a4:ce:ab:61:7e:fc:fe:88:1c:77:
         ef:2f:cd:85:f5:ac:78:48:db:01:99:fe:98:3d:17:33:5f:24:
         ea:6f:c0:f0:2f:a7:e5:e3:f5:af:1e:ba:52:72:af:e0:66:cf:
         a6:56:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:16 2025 by rpki-client