Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          LAWZ8E1D8KQ6wmZH54dy5rUFECrnmyh87VMBcrRgT64=
Subject key identifier:   16:79:A9:49:A6:FA:50:56:FA:22:9F:BF:F4:AB:35:52:50:E8:3E:4F
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       0196ABE7CB1045EB0F04D36CF01DCCC55755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          114E
Signing time:             Wed 07 May 2025 18:00:16 +0000
Manifest this update:     Wed 07 May 2025 18:00:16 +0000
Manifest next update:     Thu 08 May 2025 18:00:16 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: R5fQU0dTTnVnNgQ30WMmc1z9aXTxJ/HAZ3OlUiCrKZo=)
                          3: 9F7dZYjOPi3rs5NLZXUfov8PBWU.roa (hash: j/9WP0wPl17yaC72aPiHSbkKMZUDz6oycbmdGLPUu6A=)
                          4: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          5: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
                          6: jt3uxkc0nzbTvWbsX7a361YE_o0.roa (hash: DdTJIeWIH2giv5XExuVH/S2lYFHAruTpFnXLNoUPjwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e7:cb:10:45:eb:0f:04:d3:6c:f0:1d:cc:c5:57:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: May  7 18:00:16 2025 GMT
            Not After : May  8 18:00:16 2025 GMT
        Subject: CN=1679a949a6fa5056fa229fbff4ab355250e83e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:a6:49:c6:ff:fb:b4:ae:b8:cb:f9:bc:a9:
                    22:cd:0d:8a:f5:bf:3e:ff:91:a2:c6:09:e9:a5:d5:
                    cc:41:45:04:f7:77:7d:de:2c:2a:1f:d7:03:60:d6:
                    59:52:33:74:41:10:fa:9f:07:7b:3c:4a:02:a4:86:
                    f6:1d:fe:11:e4:23:c5:13:19:54:7e:e6:9f:2f:68:
                    4d:3e:15:0a:8d:54:c7:45:d3:cf:20:f2:25:ca:c6:
                    38:73:2a:f9:78:83:9e:1d:83:8a:f3:b5:4e:52:11:
                    74:30:6d:86:b9:22:59:c5:d5:a1:88:1f:e9:0c:50:
                    61:1e:ee:a3:38:17:33:91:fc:80:d1:73:df:6a:b7:
                    58:d4:e6:a1:35:95:7d:14:b5:99:b9:d2:05:8f:c7:
                    b3:67:52:97:13:86:70:56:ae:05:d9:61:56:5a:3f:
                    11:0c:3e:dd:54:6e:75:36:35:79:ab:65:e0:14:bb:
                    09:59:53:2c:4d:54:2b:5d:29:54:c1:57:e1:f5:5d:
                    ae:44:02:a2:ab:55:a5:71:8c:68:eb:73:50:da:af:
                    eb:ea:5f:8b:43:9f:78:9c:90:33:81:43:fa:15:90:
                    f8:88:2e:70:fb:e3:34:9c:4a:84:4f:28:49:34:35:
                    a3:80:66:a3:49:3c:fb:40:70:eb:23:09:4f:71:c1:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:79:A9:49:A6:FA:50:56:FA:22:9F:BF:F4:AB:35:52:50:E8:3E:4F
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ab:0b:f3:1f:28:79:5c:3f:a8:50:cc:e2:16:4f:0e:62:ab:
         e1:bf:d5:45:7e:dc:1f:66:3e:8f:42:f3:58:79:fe:a3:89:3e:
         6b:67:2c:64:59:a4:5c:29:db:53:16:d1:d6:35:d9:8a:0a:12:
         82:f9:1d:6a:f8:13:fd:29:1b:24:fe:8b:55:ad:47:d9:52:d5:
         0f:db:2c:6e:46:13:99:2d:50:4a:b5:a7:ad:67:07:c5:a5:03:
         48:a8:26:11:49:36:8c:41:8d:3b:e0:23:80:f2:51:4c:c7:b8:
         7a:79:a4:59:92:85:93:22:8d:e2:3d:53:4a:30:26:de:52:7d:
         50:d2:90:ff:72:dd:cc:ad:4f:f7:b6:52:de:c4:17:9c:e1:77:
         a2:ab:94:81:d0:86:33:0f:85:33:56:27:9a:86:4c:30:3f:48:
         90:2c:e6:0b:7b:ec:5d:c5:fc:78:22:60:b2:ae:1a:be:ef:1f:
         11:51:cf:5c:b2:18:2a:28:99:71:8f:88:06:23:24:99:f3:36:
         ea:f5:7b:0d:b6:a4:0b:9b:a8:78:ed:03:a2:4d:c6:77:c0:09:
         e8:41:b8:d7:10:f6:b0:e3:52:4b:20:49:7b:3c:5f:07:f3:00:
         b0:cd:90:a2:b4:59:f3:b8:7a:3f:73:c2:17:56:2c:ae:fb:dc:
         79:7f:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:10:45 2025 by rpki-client