Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          eoUzx8cY2Pg/fCqI4KBDI2X6748wkpncBnInU3QfErI=
Subject key identifier:   59:4A:7C:27:44:F9:13:21:88:AD:B1:4D:FC:EA:A3:A7:53:AC:55:F5
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       01958C60BA89B6F9D35B516093EF5B173EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          1497
Signing time:             Wed 12 Mar 2025 22:01:44 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:44 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:44 +0000
Files and hashes:         1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: PryOcl7wHboJbOCm2wB6DbbzKhz1HSB7yBiKKqbSWp4=)
                          2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
                          3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
                          4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:ba:89:b6:f9:d3:5b:51:60:93:ef:5b:17:3e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: Mar 12 22:01:44 2025 GMT
            Not After : Mar 13 22:01:44 2025 GMT
        Subject: CN=594a7c2744f9132188adb14dfceaa3a753ac55f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:5d:58:72:bd:cc:8c:5b:a8:c0:17:09:b3:
                    5a:c5:42:fc:95:64:4f:0d:0f:a7:96:0d:e5:7d:3e:
                    3b:df:3f:05:69:70:77:fe:1d:e1:ed:79:3d:8b:4c:
                    06:13:11:b3:43:aa:95:a9:93:19:24:20:55:9f:b6:
                    e8:e7:d5:2a:b5:55:ec:41:26:6e:dc:bd:f9:c7:9d:
                    f5:ba:5b:03:72:05:50:73:dc:ef:76:41:3e:3b:b6:
                    ec:9b:5e:00:3a:62:5b:25:39:7f:b5:9c:23:7f:fd:
                    44:09:dc:35:84:6c:16:33:72:2a:cc:cf:62:c1:10:
                    6b:99:b1:01:85:35:b6:bc:03:c2:61:82:3d:0b:5b:
                    ea:e2:c9:5d:2b:19:e6:30:66:4e:6e:24:8c:f0:5d:
                    0a:43:75:0e:24:8b:65:a0:7e:74:30:86:7d:a4:0b:
                    77:09:96:8e:60:a1:4c:cb:aa:f3:10:7a:ca:1e:35:
                    3e:6c:7a:2c:12:ee:b8:68:de:82:95:0b:65:92:2e:
                    0f:fd:6a:ea:f2:ba:7b:21:65:4a:f3:55:c9:9b:9d:
                    0f:76:87:e8:b3:07:77:93:2e:8f:db:79:06:3e:34:
                    ff:7d:29:f6:1e:cb:55:4a:10:5f:05:eb:58:e2:c9:
                    f6:dc:34:ce:ff:da:a0:17:89:6f:06:7e:48:fe:26:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:7C:27:44:F9:13:21:88:AD:B1:4D:FC:EA:A3:A7:53:AC:55:F5
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:1d:e4:44:12:a3:71:c5:4f:bf:86:f7:43:2e:eb:77:f3:
         fa:b5:29:07:b8:fd:62:7c:f0:6a:99:25:84:db:39:bb:45:e9:
         d5:5f:07:56:21:70:7f:94:3d:43:8b:3f:4e:35:33:3b:5b:a0:
         60:a9:b7:66:a1:19:b3:9e:34:1d:04:f9:17:8b:01:ab:1a:d7:
         cf:5a:27:a0:7f:93:79:77:41:1f:c7:62:2d:96:46:a8:8b:0c:
         62:a3:56:d6:ea:82:ed:55:f9:ee:b3:10:54:50:8e:c4:af:47:
         c2:9d:97:b5:eb:c6:45:59:91:ee:8b:b1:80:5f:7d:e0:77:94:
         21:f2:96:c0:99:9a:40:f9:2a:8d:b2:f5:cb:d3:3e:38:61:6b:
         0b:a5:84:de:5c:c1:1e:73:67:ee:dd:93:77:b1:77:58:58:f3:
         c8:85:d6:6f:24:cc:4c:52:7f:5d:97:32:6b:dc:aa:b8:1e:fb:
         e0:80:21:a0:c5:0e:e8:3d:75:c8:57:53:a2:48:70:8f:2c:e7:
         dc:06:59:af:06:65:96:a0:c5:ce:3f:66:4f:cc:b0:a7:e9:fc:
         fd:e3:7b:95:dc:b0:d9:b8:4d:70:92:e6:d7:8e:1a:59:e3:3f:
         60:a1:a6:e1:c0:83:22:5f:7d:b3:b8:c3:df:1d:41:bd:32:aa:
         05:a7:a3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:33 2025 by rpki-client