Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier:          ydnoq6w8A7FfXjJNoJjPDMxPxk6cnyu58rvtz8Jkk8A=
Subject key identifier:   3D:30:A5:CA:A5:FA:E7:E7:F9:A4:41:16:5E:FB:4C:C6:4D:DA:2B:BB
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer:       /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial:       0196C728333A8E5F9F4F64DAC56FFD87C310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number:          1395
Signing time:             Tue 13 May 2025 01:00:22 +0000
Manifest this update:     Tue 13 May 2025 01:00:22 +0000
Manifest next update:     Wed 14 May 2025 01:00:22 +0000
Files and hashes:         1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: sr0ciGIQCknKkwnpU4b2FOf0lw5WXm2uzNx22yEb4YY=)
                          2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:33:3a:8e:5f:9f:4f:64:da:c5:6f:fd:87:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Validity
            Not Before: May 13 01:00:22 2025 GMT
            Not After : May 14 01:00:22 2025 GMT
        Subject: CN=3d30a5caa5fae7e7f9a441165efb4cc64dda2bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:b3:1f:d2:26:ee:a3:b8:72:9e:e3:ff:c9:
                    a8:6e:cc:b2:f8:23:ce:81:55:b0:13:b1:36:5a:49:
                    32:f5:4f:40:a6:fe:25:0e:b2:1d:e3:74:59:66:54:
                    b2:be:93:5d:c0:d2:8d:36:1a:7b:bf:1a:eb:66:02:
                    1e:e6:8e:bc:5e:e5:13:04:32:87:59:e6:03:87:f0:
                    46:38:16:35:75:fb:08:b3:b9:18:6e:97:f0:cc:10:
                    24:45:0d:75:1e:62:72:6b:fd:5a:9b:21:f7:a5:cc:
                    94:59:30:c3:96:c4:f0:74:6b:9b:1e:a0:bc:28:8e:
                    59:82:c4:99:c0:1e:e4:6e:14:fe:9d:90:84:f3:b4:
                    28:47:40:0a:6f:c6:1b:7f:0c:1d:5c:12:45:a3:a4:
                    eb:9e:a7:e6:7c:08:1f:cc:9a:24:cc:2d:b5:0c:3f:
                    d3:bf:40:df:64:4d:ac:25:55:db:9e:b7:ef:15:f1:
                    80:f8:4a:39:3a:9d:f1:c2:a3:7f:21:15:fc:9f:6b:
                    33:dc:dc:e2:da:16:8a:48:08:b7:b1:d7:c6:42:5d:
                    d0:a7:64:97:fc:24:dc:16:53:f9:56:57:bc:33:d0:
                    31:d9:78:1b:67:5f:c5:de:55:82:31:d5:1a:a2:a0:
                    98:62:24:34:77:40:67:fb:df:c7:b1:30:2c:2a:19:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:A5:CA:A5:FA:E7:E7:F9:A4:41:16:5E:FB:4C:C6:4D:DA:2B:BB
            X509v3 Authority Key Identifier:
                keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:dd:3a:61:15:66:e3:5b:c0:b6:91:6d:b2:2b:45:d9:52:
         95:0d:ae:ad:be:6a:d8:59:8a:12:29:75:4d:91:d3:f8:66:ee:
         88:05:01:eb:d1:05:c5:e3:af:0d:63:5c:84:1c:b7:3d:f8:74:
         87:cf:f1:b7:15:f2:87:0f:89:4a:f2:e4:85:df:be:c7:45:88:
         65:2e:df:94:17:27:c0:0f:9a:8b:07:c0:c5:8c:eb:94:28:9b:
         c6:dc:25:f8:18:b9:91:d7:3e:9b:4a:80:02:9a:53:76:e6:47:
         71:fe:e0:88:f4:6c:30:07:a0:01:f3:2c:9d:b1:7c:42:ba:d7:
         67:45:d7:45:9d:ab:97:77:1a:cb:ea:cc:85:34:ec:d1:91:95:
         dd:37:fe:87:4a:2b:74:16:21:a7:d7:32:37:11:a5:a8:5f:f6:
         af:15:e6:a1:d0:a3:e2:ad:9b:ec:c5:79:6a:f9:c4:c5:66:39:
         32:eb:9a:6d:55:c8:74:12:58:ac:09:48:7c:4d:9c:df:c5:28:
         cc:37:ef:d4:05:a4:2f:5c:aa:45:b6:3d:87:f2:bb:f7:b5:9c:
         e9:68:cd:04:cf:9e:6a:fe:04:20:b9:2c:99:63:30:3a:85:4f:
         98:ec:6c:30:28:ff:6a:8a:c9:1c:d8:9f:9a:11:85:5d:2c:5e:
         d6:54:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:13:31 2025 by rpki-client