Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
File:                     5UhKt1Cby72jUeIACRdC1DNms0c.mft (raw, json)
Hash identifier:          tXGUO6bY9leP1gErYeR1hweMaNPuX5UsjYP77GKFur4=
Subject key identifier:   68:24:AC:AF:54:9C:88:18:C1:AE:DA:E4:B9:91:1A:B0:BC:45:60:42
Authority key identifier: E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47
Certificate issuer:       /CN=e5484ab7509bcbbda351e200091742d43366b347
Certificate serial:       0196440CF5338FFFD73D88F71C678785532C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
Manifest number:          1051
Signing time:             Thu 17 Apr 2025 14:00:21 +0000
Manifest this update:     Thu 17 Apr 2025 14:00:21 +0000
Manifest next update:     Fri 18 Apr 2025 14:00:21 +0000
Files and hashes:         1: 5UhKt1Cby72jUeIACRdC1DNms0c.crl (hash: zO/kh2edhvFTv30VViifCK8HhfITY7N4ANuv5syESPQ=)
                          2: wJBjAczRrgGosNqanCxFfo-dFjI.roa (hash: cA7B9NV3PGLqMbvMdkJgYrBm37cd4VUUTrn9CCk7CJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:0c:f5:33:8f:ff:d7:3d:88:f7:1c:67:87:85:53:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5484ab7509bcbbda351e200091742d43366b347
        Validity
            Not Before: Apr 17 14:00:21 2025 GMT
            Not After : Apr 18 14:00:21 2025 GMT
        Subject: CN=6824acaf549c8818c1aedae4b9911ab0bc456042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:87:ea:75:77:c9:ba:cb:64:89:ee:f2:4c:
                    9c:8c:21:a3:f3:1d:0b:c1:64:14:05:79:75:b1:06:
                    a2:b4:16:11:33:14:e9:1c:cf:e0:ca:f1:2d:fb:19:
                    c0:b7:fc:0a:f9:c9:13:7e:37:d1:9b:11:0a:1f:d7:
                    d7:a3:df:3e:71:a8:b2:9d:fc:95:36:fc:59:d5:41:
                    10:98:9e:79:d1:b3:92:38:67:b1:54:9f:44:a4:36:
                    f7:e6:30:41:c4:41:9e:60:29:ab:bf:73:f3:44:7a:
                    a9:d0:cc:12:27:86:e5:89:f9:42:49:85:58:41:a3:
                    02:57:d3:85:93:8d:e4:04:ec:c8:67:5b:8a:83:73:
                    36:7f:fb:53:df:c7:88:a6:11:44:e0:fe:89:74:9a:
                    30:16:88:ce:df:dc:87:65:70:fb:74:35:b9:8d:fa:
                    e3:3f:30:81:8a:02:7a:cc:0c:42:30:e3:44:44:7d:
                    05:ca:21:10:f2:d4:0d:be:a6:c8:c9:09:99:5d:67:
                    50:06:3c:b3:3f:06:04:ab:c2:2b:3c:a0:4a:63:25:
                    8b:cf:db:43:50:e2:01:61:0b:1f:97:c7:a4:01:c0:
                    9c:6a:96:ff:92:9a:fd:c7:25:36:ed:29:f4:8e:72:
                    aa:bd:f7:7c:e7:5e:39:55:50:2a:d5:4e:74:a5:59:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:AC:AF:54:9C:88:18:C1:AE:DA:E4:B9:91:1A:B0:BC:45:60:42
            X509v3 Authority Key Identifier:
                keyid:E5:48:4A:B7:50:9B:CB:BD:A3:51:E2:00:09:17:42:D4:33:66:B3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UhKt1Cby72jUeIACRdC1DNms0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/5UhKt1Cby72jUeIACRdC1DNms0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:db:b2:30:5e:ba:72:13:7e:12:f9:f9:f0:5e:a2:b9:23:f9:
         18:a3:e3:a4:c1:53:e1:84:e6:67:69:8a:27:3e:87:68:cd:be:
         93:36:5c:74:96:5a:45:bf:8c:5b:23:ad:5c:35:0f:1d:16:00:
         d8:32:47:c0:4f:b0:4f:a4:9e:70:84:d1:60:3c:43:f9:11:48:
         8c:1f:5d:71:93:17:48:b6:3c:2a:d4:48:d7:eb:5c:af:76:4d:
         d0:a6:74:5c:27:2a:ce:80:a6:b4:1d:81:fc:c7:8b:5e:44:b1:
         64:1d:9a:ba:88:1f:06:4b:85:eb:06:2d:11:c3:f3:2c:9c:58:
         c3:de:9b:ed:86:ca:5d:57:c5:6a:ab:d0:fa:48:d3:8d:80:70:
         97:0d:a1:61:ac:b7:4f:6c:db:8f:4f:6f:b5:aa:a9:5d:47:80:
         59:75:a0:54:7c:f7:92:20:ed:23:7e:5b:3c:12:29:44:05:f9:
         45:80:36:fe:d3:2c:d0:c4:44:a1:ea:ed:be:c6:95:dd:e3:15:
         29:2a:3d:7d:8a:10:4b:bc:7d:4b:25:fe:bd:8c:2d:ba:2b:4b:
         b7:a7:50:37:0c:96:b5:d9:9a:57:73:92:5b:1f:7d:6d:4b:09:
         37:9f:3c:68:42:36:b0:6f:75:ca:88:d8:40:28:d6:bb:58:a3:
         c1:5b:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:19 2025 by rpki-client