Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File:                     xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier:          N0XfICRodptrS4q2n9NitJIZQ2lrzr7nObo426bTIt4=
Subject key identifier:   C5:77:5A:FF:0E:6A:01:7D:B9:FF:1E:49:7A:FF:28:4A:93:A8:BA:11
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer:       /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial:       01964C6B90A5CA1D37705EC96C518287FB43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number:          0E26
Signing time:             Sat 19 Apr 2025 05:00:39 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:39 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:39 +0000
Files and hashes:         1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
                          2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: SxeKFiV8eu4AVG05vgUsD9pmoUAn5Hll2RYYvfUoWXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:90:a5:ca:1d:37:70:5e:c9:6c:51:82:87:fb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
        Validity
            Not Before: Apr 19 05:00:39 2025 GMT
            Not After : Apr 20 05:00:39 2025 GMT
        Subject: CN=c5775aff0e6a017db9ff1e497aff284a93a8ba11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:95:25:85:8c:84:75:aa:55:47:16:df:22:
                    67:38:47:98:00:76:ab:1f:fe:7b:f7:da:6d:d3:31:
                    23:32:ee:0c:38:ce:22:ba:68:aa:9f:6e:84:43:26:
                    99:6d:91:05:61:e3:2a:a2:f0:c7:e2:b8:7e:8f:e8:
                    1d:93:b9:33:37:4a:7a:c5:fa:f5:d0:8f:b2:58:af:
                    f0:76:e2:5d:09:26:4a:8b:e0:d5:8c:2c:0f:55:b0:
                    c8:64:0b:e8:15:1e:c9:8f:0d:d9:17:8c:42:11:21:
                    0f:4d:82:35:a8:df:13:f6:77:e9:30:4f:28:24:56:
                    30:c0:ab:2e:bc:0c:f9:58:1c:e6:1f:65:bc:55:6b:
                    e4:5d:05:45:11:66:a5:db:7b:ce:d4:7a:7b:45:2a:
                    f0:95:ed:6e:57:12:3a:43:12:2f:5f:77:92:3b:c9:
                    cd:67:e2:44:76:b3:ef:23:bc:67:4f:cc:0a:0f:7d:
                    34:a6:cb:fb:8f:7f:c6:3a:00:c7:b9:a2:17:da:e9:
                    a4:4d:ee:f2:02:4e:99:e3:8b:68:c9:bb:4a:b9:54:
                    4d:c2:da:2b:e6:d3:99:ad:10:d1:7d:ab:68:fc:c7:
                    70:17:f2:6b:17:74:16:d6:fe:7b:9b:5f:16:13:ad:
                    83:3f:97:a0:96:ee:45:ed:6e:b8:4d:46:45:6a:d0:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:77:5A:FF:0E:6A:01:7D:B9:FF:1E:49:7A:FF:28:4A:93:A8:BA:11
            X509v3 Authority Key Identifier:
                keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:08:bb:3e:31:33:ac:45:b6:70:87:57:d3:a5:93:ae:ef:4d:
         b0:c6:69:72:0a:b9:2a:2f:60:f9:45:fb:b5:52:4c:e3:f2:6e:
         7a:0e:e8:13:fe:3c:46:8e:75:de:72:9a:85:3a:0f:9c:ad:46:
         63:ca:eb:3e:90:73:6c:29:42:e8:fe:5a:99:34:8f:a8:98:51:
         56:2f:60:3d:27:06:64:bb:c3:1a:d3:14:de:fb:b1:69:28:7b:
         e1:0d:66:41:ff:2f:b8:e3:08:10:9d:c8:ba:a8:e8:07:2d:68:
         2e:2e:fe:d6:fc:67:e8:42:17:d8:a9:4b:92:01:45:2a:05:aa:
         8f:eb:63:8f:ad:7d:06:ae:a7:52:40:1b:c5:52:40:c8:75:b9:
         a1:03:1d:d2:2f:5e:23:58:48:cc:95:34:ae:b8:cd:12:67:9e:
         dd:fe:3c:92:1b:ee:ec:72:d1:13:1c:35:fc:11:5b:d6:aa:92:
         45:35:f6:dc:38:a2:8f:9c:ac:33:ce:ed:4f:eb:5f:30:8b:52:
         e8:ac:48:c0:10:84:e0:f1:6c:e0:7f:d5:cd:8d:23:e0:c0:6a:
         5a:70:e5:a6:19:86:1b:cc:3b:87:ef:21:57:94:69:63:5b:58:
         e5:9a:ef:e7:78:1b:f4:5a:7e:da:b6:33:a2:01:c9:7a:04:8e:
         09:53:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:09 2025 by rpki-client