Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
File:                     ezF1mINz5Wtv_gsVofx11Gk64sA.mft (raw, json)
Hash identifier:          TPPPSOMENBdoFMSdDi3is2FuAS5qirbDjVk5VuggE+E=
Subject key identifier:   CE:B1:44:81:B5:67:6B:55:B4:ED:E5:8F:4D:18:3F:9F:B3:59:5B:9B
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Certificate issuer:       /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial:       0196CF189536B067982653ED8F0447E8EDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
Manifest number:          153C
Signing time:             Wed 14 May 2025 14:00:16 +0000
Manifest this update:     Wed 14 May 2025 14:00:16 +0000
Manifest next update:     Thu 15 May 2025 14:00:16 +0000
Files and hashes:         1: ezF1mINz5Wtv_gsVofx11Gk64sA.crl (hash: 5kc6VM8QI0ysHrz4K+EEXVP6HNGFsQuJg39LEm4GLX4=)
                          2: lkZuAh9g4ZICrk8Syf8Tn6WXaNo.roa (hash: dET9fwU/izT2anivq0drVs4rmphGQ9LJ15mQDS+rUvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:18:95:36:b0:67:98:26:53:ed:8f:04:47:e8:ed:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
        Validity
            Not Before: May 14 14:00:16 2025 GMT
            Not After : May 15 14:00:16 2025 GMT
        Subject: CN=ceb14481b5676b55b4ede58f4d183f9fb3595b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:62:bd:05:f9:6c:19:da:e1:f8:eb:94:5b:
                    64:58:b4:1a:c0:62:31:65:73:42:2f:57:29:1a:69:
                    ef:34:b2:fc:31:a1:cb:37:b7:c2:1c:9b:b5:04:30:
                    6e:04:94:0e:65:22:44:8d:98:22:3e:a5:44:7b:83:
                    89:d1:07:34:4e:61:97:83:1a:6b:5f:4f:a7:40:54:
                    b2:25:b4:86:2a:f7:98:7a:ab:4b:a7:8b:3b:86:91:
                    57:8b:05:f7:7a:fe:14:5b:cd:a1:2e:b4:a2:9c:2c:
                    8c:96:62:b0:95:11:80:16:60:d7:3b:c5:45:8c:13:
                    0b:81:88:d4:f2:3e:b6:36:23:7f:f5:8f:e8:45:4f:
                    8a:4c:34:61:31:74:f2:ab:60:b8:fd:93:bf:77:a9:
                    53:c7:cc:d1:ac:87:53:a6:d2:91:ae:56:09:9b:3b:
                    a1:de:dc:2b:18:7e:73:5d:18:bc:3d:7a:ed:22:00:
                    a9:04:2e:5e:35:99:98:6a:ba:63:16:b5:7d:8c:34:
                    15:1e:11:57:17:19:41:06:a7:f5:c5:5f:81:7d:ae:
                    07:18:f2:61:46:81:7d:61:dc:f7:31:74:0a:ac:56:
                    7e:6b:a8:55:4e:06:a0:be:e0:61:50:5f:4c:32:0b:
                    39:7c:61:6a:d6:9a:3b:83:5f:21:9a:84:9a:8d:be:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B1:44:81:B5:67:6B:55:B4:ED:E5:8F:4D:18:3F:9F:B3:59:5B:9B
            X509v3 Authority Key Identifier:
                keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:60:2c:66:d9:74:9d:7f:30:87:8a:6d:59:65:d7:26:19:
         d1:0e:c8:fe:ab:01:37:93:cc:6c:9a:8e:aa:29:a3:cd:5b:c6:
         31:9c:2c:37:eb:8b:43:50:fc:66:00:0d:d1:bc:c2:92:85:06:
         a0:c8:b5:0f:c6:77:29:c4:43:e5:b2:93:84:02:3a:20:7f:16:
         e9:aa:78:86:f2:c4:ad:cc:2b:14:a2:e5:e6:6f:94:7a:48:63:
         d8:c9:7f:b3:a4:6c:2c:ae:12:a5:7d:f9:18:a2:0a:01:f2:ac:
         80:f6:2c:09:96:68:e3:6e:f6:a0:74:0e:7e:7b:51:2c:e3:50:
         21:74:12:67:15:76:75:8f:0e:78:96:1a:54:be:a9:17:8a:e2:
         5f:3f:30:0d:6d:9d:70:34:7c:a2:43:c1:dc:0f:bd:f4:d0:ad:
         d0:db:16:61:a5:25:08:13:52:ca:94:3a:00:17:45:56:e5:b5:
         a0:b7:f2:3e:d1:15:18:26:b8:e3:59:42:32:07:9d:1a:35:a8:
         75:89:2c:40:aa:d7:5d:20:89:56:69:27:10:07:7a:df:93:fa:
         66:05:ca:71:ee:19:89:c9:81:f5:30:0a:7a:eb:4e:a1:34:22:
         17:b1:ca:b5:9f:76:e4:d0:37:15:25:f5:1c:68:42:bf:06:2b:
         8a:df:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:46:31 2025 by rpki-client