Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File:                     5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier:          cfcNhtA10kZhk1oAeHKl2SrMjstXk8zDMqWm3Iky3U8=
Subject key identifier:   DE:62:9F:28:30:EE:68:86:DC:33:C3:81:30:38:D2:D9:02:F2:36:50
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer:       /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial:       01969E2C2889BF1E0242556E15F3209CDC08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number:          0A76
Signing time:             Mon 05 May 2025 02:00:16 +0000
Manifest this update:     Mon 05 May 2025 02:00:16 +0000
Manifest next update:     Tue 06 May 2025 02:00:16 +0000
Files and hashes:         1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: 8iT/pKQ58Segzc9Kd3bJIoO1fyuUnxwajge89ejhkxQ=)
                          2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:28:89:bf:1e:02:42:55:6e:15:f3:20:9c:dc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
        Validity
            Not Before: May  5 02:00:16 2025 GMT
            Not After : May  6 02:00:16 2025 GMT
        Subject: CN=de629f2830ee6886dc33c3813038d2d902f23650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:1f:b3:e0:68:c3:7e:02:5d:41:c9:ad:6b:
                    cb:7d:f4:bb:9d:a3:02:71:33:1e:bc:73:07:58:92:
                    49:7b:28:71:a9:a8:9c:cd:03:e4:4f:63:5d:45:5e:
                    e1:01:21:9d:00:de:78:57:a5:e3:36:1b:88:ab:f6:
                    27:62:17:d6:30:2e:b4:49:b3:94:64:fb:c9:17:1b:
                    a6:3f:f4:55:7a:cf:5e:81:8d:26:f5:92:0a:92:df:
                    0e:0b:90:d9:8d:42:95:82:85:07:6f:31:ba:09:cc:
                    a4:6a:8d:60:e3:f1:3a:8c:21:45:76:a4:8e:b3:40:
                    06:7d:48:dd:98:b5:c3:68:04:dc:be:5b:da:ce:38:
                    80:c4:c0:25:16:14:9b:a0:c2:fa:4a:38:f0:61:cb:
                    f5:ff:9c:07:ca:02:62:db:18:40:80:e2:ba:38:61:
                    1e:b7:bb:a5:ce:39:99:4e:18:a8:09:e4:a8:50:1f:
                    78:a5:8f:c9:11:0c:44:2a:37:e2:aa:59:b6:a9:9c:
                    5c:39:9d:8e:9f:a7:36:4d:74:1c:9c:84:24:e4:a3:
                    d6:14:80:62:8a:35:04:1d:05:d7:ba:6b:f8:83:b4:
                    99:09:c5:01:ae:e3:b0:b8:f9:d3:bb:6e:1d:29:66:
                    c0:ca:f7:31:10:14:48:86:e3:fe:d5:9a:be:43:a5:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:62:9F:28:30:EE:68:86:DC:33:C3:81:30:38:D2:D9:02:F2:36:50
            X509v3 Authority Key Identifier:
                keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a0:e9:25:e3:b8:3f:85:b3:16:02:b8:2c:bb:79:8d:6d:24:
         ff:0b:fe:cb:12:18:bb:fa:07:1b:f1:9e:65:1e:e5:98:78:2b:
         ec:7b:68:74:a8:31:f3:5d:f6:b6:ed:b0:d5:be:f0:1d:f4:d8:
         d2:2a:d3:5b:f4:81:32:a7:f3:0e:47:84:6f:51:bb:4e:10:29:
         e0:3a:a2:ce:50:08:2a:7e:f9:cd:74:8f:fc:c5:12:c5:a8:38:
         b6:ca:37:df:c6:47:60:27:97:d9:8a:5a:22:34:e5:05:0e:6e:
         c5:6d:1a:7f:86:25:0d:bc:ab:2f:62:d4:43:7c:ee:ca:96:e6:
         8b:79:0c:d2:07:4b:61:29:33:80:10:ce:88:0c:4b:93:7a:99:
         a3:f7:7a:33:b6:ac:df:92:43:41:a2:82:a1:0f:c0:d1:7f:92:
         e9:9c:5b:0c:d7:72:bd:75:95:f7:50:25:a7:f3:12:68:99:f1:
         ad:bc:ec:53:06:17:e7:ce:8b:7e:4a:e5:d4:06:23:d3:0a:47:
         10:d2:a0:05:5b:c7:88:1f:64:b3:b2:0f:e9:18:da:aa:9d:9e:
         9e:6e:5b:dc:32:3b:d6:24:ad:a7:27:0a:8e:62:5d:9c:38:47:
         fe:d0:49:cf:14:75:2f:b2:ac:e8:60:e1:c5:66:f1:d3:90:3e:
         40:b8:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:25 2025 by rpki-client