Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          G2aKk0b6ZLb2lg77xjYdqYxlk7RcvT1YDuxcPP7emK0=
Subject key identifier:   D4:B8:69:78:C2:6B:0B:B5:0F:38:B8:41:3C:9B:5B:48:68:46:AC:0B
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       01963C1D30C7913B7BF0021187AED2382CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          14F2
Signing time:             Wed 16 Apr 2025 01:01:07 +0000
Manifest this update:     Wed 16 Apr 2025 01:01:07 +0000
Manifest next update:     Thu 17 Apr 2025 01:01:07 +0000
Files and hashes:         1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: k2eWcZ+2ZWzW4rJlV2uYzzGZMzBEJx0OYMASA3JdPtU=)
                          2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
                          3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
                          4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:1d:30:c7:91:3b:7b:f0:02:11:87:ae:d2:38:2c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: Apr 16 01:01:07 2025 GMT
            Not After : Apr 17 01:01:07 2025 GMT
        Subject: CN=d4b86978c26b0bb50f38b8413c9b5b486846ac0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:4d:ce:a8:10:a9:88:96:e3:6c:c3:ea:82:
                    c3:ec:45:f1:fe:70:cb:16:19:92:cd:b3:7c:4c:00:
                    42:5b:d6:36:c0:4c:97:83:ed:2a:e7:5c:32:71:c4:
                    37:11:9a:99:6e:35:25:a2:51:d2:6b:a2:70:a8:c2:
                    a6:44:3b:a5:c2:23:c2:9c:9f:d9:d1:e0:ff:2d:e1:
                    c9:93:08:31:1d:b3:bc:e8:7f:a1:ff:5b:06:51:d5:
                    23:24:c4:72:bf:55:ab:65:c1:ab:f5:46:0d:0a:a9:
                    c9:b2:1d:45:8a:59:82:f8:e5:4a:89:22:88:e3:ed:
                    8c:9d:a5:f7:95:d2:f9:b8:e5:05:5e:8c:ac:a8:ae:
                    57:27:02:b9:b3:35:60:f3:1b:6c:26:0f:c9:32:bc:
                    34:bd:24:46:25:de:39:05:93:67:6e:bb:b0:0f:d6:
                    49:df:60:92:e5:c0:07:bc:ef:a3:9f:a6:93:a6:53:
                    31:3a:5e:aa:3f:c5:2b:0d:a5:fa:4d:d1:8c:1d:73:
                    9f:7f:1c:be:3f:3a:c5:c4:5c:8f:5f:5c:f6:b9:9a:
                    f3:37:9c:ea:1d:f9:fb:9a:bf:70:68:3e:6e:4b:30:
                    df:61:21:1c:16:dc:9d:22:b8:d0:0a:09:ed:ef:21:
                    04:36:91:cd:65:13:3b:ab:b9:db:fe:bd:e7:46:61:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B8:69:78:C2:6B:0B:B5:0F:38:B8:41:3C:9B:5B:48:68:46:AC:0B
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:b8:bc:33:46:8e:9b:73:91:b1:b3:73:24:c0:92:9e:ae:
         06:9f:34:3f:13:d2:9b:01:09:8f:ca:70:19:3c:44:32:bc:b9:
         45:1d:98:9d:57:1c:94:a4:1c:f6:fa:bc:6b:34:cd:87:b5:08:
         d1:67:d4:2f:25:5f:4a:dc:6d:bd:f4:8c:7b:08:85:c2:c0:03:
         d2:e1:b4:fb:49:55:a2:66:ac:34:ab:0e:49:5d:88:79:0e:c5:
         41:14:7d:f0:39:73:56:8c:77:3b:b5:e9:f2:bf:3c:f2:05:f5:
         b1:2d:0b:90:b7:01:17:c5:86:9d:39:db:cd:9b:95:e1:61:a5:
         bc:7b:f8:1d:51:b6:df:67:b7:51:c6:50:91:59:af:e4:42:fc:
         39:1c:59:c0:f2:98:32:db:d7:c9:e3:9f:c3:55:47:4e:23:10:
         76:bd:04:cb:91:25:76:d5:44:88:ec:5b:48:b3:94:4c:2e:42:
         6c:1d:93:26:c5:6d:fc:39:39:ca:17:ac:3b:a8:f6:0a:35:f5:
         19:88:7d:2f:c0:de:09:64:99:d5:97:26:c7:26:58:30:f4:f0:
         0a:0c:0b:b9:9e:7e:20:3b:a6:12:69:a7:b9:df:18:fb:78:71:
         3a:99:3c:bb:9b:19:99:43:ff:ea:58:c2:99:b7:98:2c:3b:30:
         c5:a7:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:45:22 2025 by rpki-client