Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File:                     5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier:          JTAq11+5nqgk94/uOU4MDvqO+FRfo42SPfkAqhvMtlc=
Subject key identifier:   6A:DC:47:BC:AB:E8:66:8C:78:50:D3:5B:13:0A:A3:FC:09:A8:2A:C7
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer:       /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial:       01964D7EA3745C4B45A9CDAF3174EE9FF062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number:          0841
Signing time:             Sat 19 Apr 2025 10:01:06 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:06 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:06 +0000
Files and hashes:         1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: XB8CWzJGI47/4iJ2Xb8gSjbCARIuW4/0GgHuuuiRI8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:a3:74:5c:4b:45:a9:cd:af:31:74:ee:9f:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
        Validity
            Not Before: Apr 19 10:01:06 2025 GMT
            Not After : Apr 20 10:01:06 2025 GMT
        Subject: CN=6adc47bcabe8668c7850d35b130aa3fc09a82ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:82:aa:53:11:d6:a6:c8:95:7c:fb:7b:e5:
                    a7:ee:0c:ec:82:7d:8a:37:f1:8b:cf:b9:0a:61:ba:
                    94:dd:b4:70:8e:9c:9d:32:b4:2e:9b:5a:b1:fe:c5:
                    88:61:45:34:3c:5e:2d:1f:67:a9:cf:7b:4d:b7:15:
                    17:b9:16:3d:44:2f:c7:68:02:fe:7a:59:00:f3:b0:
                    21:ab:8b:35:c8:bf:20:f1:0a:ee:79:92:47:8f:6d:
                    46:6f:a3:58:44:14:e4:b0:40:7d:c3:1d:8e:2e:1b:
                    20:c8:7d:88:aa:ee:47:73:b8:0c:4a:5a:6b:f8:1e:
                    43:03:98:b8:8f:d5:0c:bf:5c:34:78:ae:eb:63:ca:
                    e9:dd:74:82:ae:06:26:67:6e:eb:d7:ca:10:2c:89:
                    eb:20:ab:0e:19:98:49:3c:c8:46:f8:0c:24:b2:19:
                    7c:27:5b:0f:23:55:b1:5f:ab:45:76:b0:0c:ec:cc:
                    66:3e:5c:9a:38:ad:56:45:42:fd:14:6e:70:ec:4d:
                    28:ff:98:d9:ad:cb:04:9c:23:50:39:b3:4c:67:4a:
                    cc:3a:ff:65:a0:a8:05:8f:39:9f:f3:e3:4d:e0:36:
                    e2:d9:81:8a:0d:62:07:d1:dc:64:7a:f8:fe:29:d0:
                    58:f4:50:2e:e6:c3:84:a6:2f:77:1c:bc:89:d6:a4:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DC:47:BC:AB:E8:66:8C:78:50:D3:5B:13:0A:A3:FC:09:A8:2A:C7
            X509v3 Authority Key Identifier:
                keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:e8:2f:ba:8a:17:0a:66:25:22:46:c2:ba:6c:16:90:3f:
         fd:f6:63:4b:14:54:b3:aa:c1:ac:63:31:f9:10:fb:e0:36:c6:
         65:2b:b1:a8:9f:bc:23:eb:b3:cd:be:30:d0:10:fb:8a:59:94:
         28:41:ac:d7:e7:99:3f:55:10:93:89:1d:5c:0e:c8:72:77:0d:
         f6:c1:69:b9:17:9c:2c:a2:14:b4:4a:7e:56:22:d1:82:d8:a2:
         c4:64:9f:8e:13:d0:65:80:5b:84:ec:3e:de:ae:24:86:59:62:
         b4:49:ca:70:1b:40:2e:dd:78:cf:ca:ba:fc:dd:ae:1f:f6:85:
         a1:f0:7c:a5:52:58:9e:cb:5c:87:a1:7a:36:c1:89:20:21:7e:
         c8:50:d8:62:8e:bc:a3:19:48:bd:38:e6:e0:27:4b:21:9e:d8:
         c5:69:70:18:29:6a:31:28:4c:10:a2:b4:8b:09:93:bc:4e:f7:
         b8:48:b8:c2:87:e9:f9:46:b0:7e:ee:1d:0c:fc:e1:bf:b8:a9:
         f2:f7:4a:f9:b4:21:a4:fc:d3:fd:23:92:db:1e:9d:c5:a0:21:
         05:90:95:e1:c1:cb:10:7e:05:08:d6:d5:2e:36:68:f6:f9:c9:
         1e:43:88:9b:02:c7:32:0f:b1:e8:96:75:32:6a:20:c7:22:a8:
         fc:59:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:20 2025 by rpki-client