Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File:                     eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier:          mxeTig/Pk9lC7cNMsSSntNlhegNTwzsv57GEGbaVCHo=
Subject key identifier:   20:AA:87:E7:58:0B:58:D1:17:CC:27:4A:8A:4D:A1:B0:2D:25:A7:A6
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer:       /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial:       0196C91700E1DBAB4B49311F0B11E5022153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number:          0B55
Signing time:             Tue 13 May 2025 10:00:49 +0000
Manifest this update:     Tue 13 May 2025 10:00:49 +0000
Manifest next update:     Wed 14 May 2025 10:00:49 +0000
Files and hashes:         1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
                          2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: 4j1+CMqJZl2vLIU2n5eP9feLL69MkFq+6AOn29HJOg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:17:00:e1:db:ab:4b:49:31:1f:0b:11:e5:02:21:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
        Validity
            Not Before: May 13 10:00:49 2025 GMT
            Not After : May 14 10:00:49 2025 GMT
        Subject: CN=20aa87e7580b58d117cc274a8a4da1b02d25a7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:77:92:88:35:de:77:b6:bd:44:51:4f:41:
                    93:3f:59:b8:f0:35:76:9a:1d:4d:f7:78:7a:ec:28:
                    81:a7:66:63:ec:35:1a:75:11:23:10:bc:c0:2d:0b:
                    ad:73:ad:83:0c:2c:03:40:e4:8d:60:ad:65:db:15:
                    af:53:6c:27:ed:e7:d9:82:23:30:47:05:c4:32:2c:
                    84:6c:d7:1a:9d:d3:5c:b4:64:29:d8:ef:3a:99:1f:
                    29:30:44:8a:7c:c3:1e:a0:ae:d8:5b:b3:96:41:08:
                    5f:c9:99:68:a8:4b:21:98:71:01:f8:01:3b:94:d2:
                    2d:8b:ab:6e:78:e1:72:b5:d9:06:8a:5a:fe:75:67:
                    ba:2f:1c:3f:b3:48:90:d2:70:1d:c0:ce:10:b1:39:
                    73:43:41:f7:ad:39:6d:f9:ab:8d:58:89:be:0e:25:
                    a9:15:b6:87:96:f9:b7:d6:10:dc:74:ee:15:a1:d6:
                    46:0b:61:2e:02:90:ae:ae:42:9f:4a:f3:10:c1:8d:
                    d3:0e:a5:80:91:80:53:c1:ad:6f:93:de:79:cf:3c:
                    a4:a7:c5:5e:70:ff:71:87:e3:15:b5:92:be:a0:4c:
                    9b:e8:b5:3d:82:c0:50:7f:63:85:73:78:e0:91:6e:
                    ce:39:a5:45:d9:cf:4a:49:a4:0d:02:d4:4d:a9:3d:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AA:87:E7:58:0B:58:D1:17:CC:27:4A:8A:4D:A1:B0:2D:25:A7:A6
            X509v3 Authority Key Identifier:
                keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2f:17:6e:23:ec:e0:c2:a7:a5:12:42:2e:82:a9:f8:b1:9f:
         7e:cc:7b:9b:2a:ab:cb:2e:45:45:3c:f7:84:3e:20:6e:0f:a7:
         d6:c3:df:4d:fa:f7:e2:2c:1f:67:11:6c:fb:be:28:6b:fb:13:
         b8:c6:07:6d:1c:53:ed:53:13:50:40:e9:03:9e:77:12:1f:82:
         55:93:04:e0:3e:08:17:6d:29:2a:aa:b7:15:d7:8a:a4:4a:0c:
         45:71:81:b0:0d:f4:b1:94:4d:34:ff:41:01:78:9c:ff:62:de:
         de:72:f8:25:81:df:f4:b1:42:40:74:ff:a9:bd:f5:32:58:dd:
         52:95:10:8b:33:0f:68:a4:59:ff:a0:ff:5e:38:cb:a0:b9:41:
         4a:3b:ae:f0:c4:1f:c3:4f:5e:2d:40:77:dd:d3:cd:9b:c7:b5:
         77:26:01:31:95:73:be:2c:ca:90:67:37:9e:7f:c4:16:f0:c3:
         52:0a:84:ad:42:4d:c0:78:b8:d8:2c:18:eb:11:a0:b1:42:81:
         71:8b:3d:6d:37:cb:67:e4:4f:72:8c:35:bd:f9:ed:67:89:76:
         83:f6:94:29:56:15:22:19:68:51:81:e4:af:66:16:ce:86:dc:
         33:83:d2:84:b4:af:d7:d2:bf:7f:ff:9c:79:21:58:1d:cd:c0:
         cf:6e:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:18:49 2025 by rpki-client