Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File:                     5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier:          o7yP3DKwQpSVK8Fu21UboWAyMo4yEyFmCXWOo+3Nv2s=
Subject key identifier:   8C:F2:93:C9:A8:A1:C0:79:F9:8E:A0:8C:68:30:D7:63:AD:7B:98:6C
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       0196A5AEF9E23E8E13170E8A3FC505F2D827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number:          0FEB
Signing time:             Tue 06 May 2025 13:00:29 +0000
Manifest this update:     Tue 06 May 2025 13:00:29 +0000
Manifest next update:     Wed 07 May 2025 13:00:29 +0000
Files and hashes:         1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: 846l6WGQYsP2XCgEYl9gOMPgyAPT+apIZ4pEsYG8Rt8=)
                          2: hYFp2PLalLwxzZhV7wbRQcfYlV8.roa (hash: LW/5pSb1sTjsNP1WLARXiewkehoBnSZqbhX0D/WoNvA=)
                          3: kRaJhPTv6AA3evpLDRDPj-DpMRE.roa (hash: 7JRuwVtlOrNDlLTW+rHW8uN2fSnzcu7/YmU6Ma1CHpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:ae:f9:e2:3e:8e:13:17:0e:8a:3f:c5:05:f2:d8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: May  6 13:00:29 2025 GMT
            Not After : May  7 13:00:29 2025 GMT
        Subject: CN=8cf293c9a8a1c079f98ea08c6830d763ad7b986c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:75:ff:09:2c:bb:79:04:06:18:38:56:5f:
                    3c:a8:06:ed:79:62:88:78:3b:77:ed:3b:95:1b:95:
                    8c:bc:49:42:55:21:ca:ed:cc:12:26:78:ed:72:91:
                    50:b9:c4:4a:43:e9:83:76:13:3d:7b:73:4f:23:de:
                    31:3f:e4:51:c9:7d:0a:f3:33:6a:18:c3:86:af:3c:
                    8b:b3:16:f6:5e:48:53:46:4e:45:81:34:f1:f2:0d:
                    c5:23:b3:27:e5:4b:2d:68:99:91:c8:0b:50:4c:f1:
                    e6:87:09:cd:19:bc:fc:27:68:9e:34:34:86:98:73:
                    4d:2d:f9:62:80:67:d1:e4:3d:f2:88:7a:c8:be:05:
                    75:a3:b3:a6:b1:c2:cb:c7:60:c8:42:1f:92:46:6d:
                    d2:79:28:be:4f:67:09:e5:59:24:e8:06:99:b4:7e:
                    4c:eb:59:fb:0e:c8:df:04:f4:f3:33:61:c5:38:53:
                    c3:40:9b:e6:97:14:2e:d2:04:76:04:81:5b:49:ab:
                    61:78:1e:b6:6b:f7:2b:b0:75:fc:2e:ce:84:37:89:
                    ec:e0:7f:3f:f7:2a:38:91:8f:bf:66:ed:4e:7a:0b:
                    1f:17:3c:0c:d5:0b:65:5f:ab:59:12:c0:75:e2:f1:
                    bd:e4:bf:8b:fe:e4:c4:ff:33:31:95:80:83:bb:18:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F2:93:C9:A8:A1:C0:79:F9:8E:A0:8C:68:30:D7:63:AD:7B:98:6C
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:97:d7:37:92:82:0f:f3:c7:c4:28:5b:99:50:23:4c:4e:
         b7:b2:16:53:22:47:3a:f9:1f:84:db:c9:a3:ad:43:d5:c1:9c:
         fd:a8:eb:9b:41:ed:9c:e0:c5:71:f0:48:11:08:f5:95:84:86:
         8d:d0:24:09:41:9b:ce:9f:6a:62:85:43:fa:38:e6:f6:1f:1d:
         d7:e0:0a:1f:fa:9e:d7:d5:3d:0a:75:f8:dd:c0:9c:8f:2f:11:
         ab:ee:d0:2f:4f:d9:f0:bc:ad:bc:69:84:94:15:43:41:04:0b:
         be:8f:2a:e1:04:3f:73:b4:74:c8:bd:2b:2f:83:e8:ad:6e:42:
         da:6c:f2:9d:46:4d:db:40:4f:46:88:dd:2e:43:30:71:52:9e:
         59:eb:68:b9:d5:e1:6e:dd:78:a6:73:d3:e5:47:0a:3f:98:26:
         58:42:8f:d1:63:22:72:e8:0c:04:42:7a:32:a8:b9:17:6e:54:
         5c:d0:c4:df:f9:ab:b1:4a:d0:9c:15:ed:02:a6:db:a9:9f:eb:
         1f:98:1e:93:28:43:8d:38:91:b4:e8:9c:2a:b5:60:d8:20:3d:
         bc:63:f6:ba:48:3b:13:a1:ed:6f:b7:5e:c4:59:61:be:6f:e6:
         19:4b:32:08:61:a1:18:d3:18:ae:a4:28:66:25:b5:77:6e:d9:
         b8:29:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:20:50 2025 by rpki-client