Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
File:                     5iL2U5eBxQvEl8egtvXVBe-IudY.mft (raw, json)
Hash identifier:          0oFRkzczMgc/Q8Ruj5Wm5jukPH3gW6CSJ+5VP5v4o7E=
Subject key identifier:   0C:F0:CC:DA:96:A2:A0:28:18:F8:2E:9E:E4:C9:EF:92:53:40:EB:4E
Authority key identifier: E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6
Certificate issuer:       /CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
Certificate serial:       01963FF9DD94649D3036717E7D5C517D0524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
Manifest number:          1044
Signing time:             Wed 16 Apr 2025 19:01:01 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:01 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:01 +0000
Files and hashes:         1: 5iL2U5eBxQvEl8egtvXVBe-IudY.crl (hash: ATwueoTfC+kFTqx+6z/s+urEBa9ACftJIWL6xpDlOpE=)
                          2: 75gL-QM6p_WWaZpy6iMBTgopl4A.roa (hash: C70hkA6dezEt2xcdG5Lxg7y2p7KFd6680YSWy+fNqPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:dd:94:64:9d:30:36:71:7e:7d:5c:51:7d:05:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e622f6539781c50bc497c7a0b6f5d505ef88b9d6
        Validity
            Not Before: Apr 16 19:01:01 2025 GMT
            Not After : Apr 17 19:01:01 2025 GMT
        Subject: CN=0cf0ccda96a2a02818f82e9ee4c9ef925340eb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:8c:18:37:4f:08:f5:2a:bc:29:48:4a:23:
                    30:cf:51:b5:1d:47:02:c2:d2:09:3b:1a:1c:5e:60:
                    e6:38:24:76:cd:8b:ec:b6:d0:28:b3:01:e9:8f:47:
                    43:a1:6c:36:63:b6:4e:6a:8b:cc:24:40:38:8f:71:
                    f8:98:53:16:15:ca:70:8b:6a:f1:10:bd:ca:c5:6d:
                    29:1d:cc:b0:91:f8:f7:aa:7f:f1:c2:81:b3:68:74:
                    0f:7e:3d:b7:59:cd:69:31:8c:8a:6f:ee:f8:cf:29:
                    03:e3:4a:50:a7:2c:74:2a:54:66:8c:46:52:09:8e:
                    bb:6e:67:a1:7e:4a:fe:68:f9:4d:13:d1:69:f7:b2:
                    8c:36:90:9d:a3:51:e7:0e:a7:07:5b:82:94:64:d5:
                    ce:de:66:1a:ce:17:48:5b:96:7a:5e:0d:e7:67:57:
                    63:51:6a:50:0b:76:b0:63:f1:c4:24:2f:9f:08:c5:
                    07:84:f1:92:e0:b2:a6:a8:0d:99:c4:a1:5e:95:96:
                    0c:5e:7f:e5:a3:89:50:a0:fe:d4:15:88:2c:84:c4:
                    69:05:5e:41:42:d0:8b:f3:90:26:c8:6d:7c:21:55:
                    ac:0e:78:63:b0:54:03:4b:b7:dc:c0:09:43:b6:18:
                    ef:c5:19:f1:5c:57:dc:a5:06:58:6c:ec:f1:94:86:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F0:CC:DA:96:A2:A0:28:18:F8:2E:9E:E4:C9:EF:92:53:40:EB:4E
            X509v3 Authority Key Identifier:
                keyid:E6:22:F6:53:97:81:C5:0B:C4:97:C7:A0:B6:F5:D5:05:EF:88:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iL2U5eBxQvEl8egtvXVBe-IudY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/11aa8c-9591-4cc8-a76a-698e6a8e6708/1/5iL2U5eBxQvEl8egtvXVBe-IudY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3b:f0:86:71:fe:d9:2f:d3:95:d4:db:62:12:b8:93:04:b8:
         4b:c3:c9:93:15:5b:a8:ee:79:58:18:1e:19:50:95:6e:1b:c7:
         61:34:80:0f:ea:3e:db:b3:94:02:3b:65:49:ca:82:38:93:22:
         22:22:70:4e:e8:b2:0e:e1:4e:bd:c1:f1:fa:6e:24:a5:64:44:
         41:5a:59:01:4d:51:6d:79:71:af:57:cf:1a:4f:61:39:5c:73:
         82:52:57:5b:2e:ea:22:08:02:42:cd:d9:5e:d0:bf:d5:3b:81:
         4d:eb:40:16:87:d9:15:90:62:49:3f:42:98:98:cb:66:f7:7a:
         4c:5d:94:ea:ac:c0:05:65:bf:2d:39:fe:7c:3f:f7:e5:ee:73:
         1c:e8:c7:c6:d7:31:d7:7c:d3:a8:97:fa:ae:e6:17:29:80:20:
         54:f3:10:e8:02:cd:21:87:13:8e:5d:0d:a9:69:4b:ae:e3:b6:
         bb:0b:c1:89:dd:e5:5b:7b:60:e3:2e:2d:41:88:3f:34:f9:f5:
         43:3b:40:bd:60:fa:a5:eb:9a:d8:b1:f4:9a:9d:b4:10:f3:48:
         47:44:0a:85:2e:13:87:ef:07:ef:de:eb:e3:21:be:fd:dc:4f:
         60:c6:ee:30:34:c3:63:f9:a0:d8:23:72:97:c2:e9:26:67:5e:
         31:69:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:26 2025 by rpki-client