Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          8N6lFXVi5fZ5jph9U96dnA62W8wD4jHlagRUcaisvjo=
Subject key identifier:   B4:67:3D:B9:39:3A:4A:9C:5D:F3:8A:B4:FA:A3:25:18:4D:DE:5C:8B
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       0196A68AD9B05283A7D162D000C7EC481429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 17:00:39 +0000
Manifest this update:     Tue 06 May 2025 17:00:39 +0000
Manifest next update:     Wed 07 May 2025 17:00:39 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: rqoVQnRx4DZxyBtuoL81ZHw4xUs9x7Mw3TYcjr/Ch2w=)
                          2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:d9:b0:52:83:a7:d1:62:d0:00:c7:ec:48:14:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: May  6 17:00:39 2025 GMT
            Not After : May  7 17:00:39 2025 GMT
        Subject: CN=b4673db9393a4a9c5df38ab4faa325184dde5c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:aa:0c:f2:de:c1:40:c8:cb:3e:5f:83:b6:
                    9b:03:3a:e4:11:fa:eb:6b:fc:47:bd:40:6d:a2:48:
                    e2:0c:a8:49:fd:61:ba:a5:fe:b6:0e:5b:c4:08:89:
                    b3:6d:9b:b8:a7:69:c6:30:e3:df:6f:49:4c:c2:38:
                    40:d0:de:1f:06:2b:88:65:97:23:b4:25:5c:3e:76:
                    1b:de:dd:0b:80:b3:f9:ba:40:68:13:dd:1a:dd:6e:
                    b9:53:d3:56:e8:3a:10:4c:de:44:f5:13:3a:51:2b:
                    67:0b:10:ae:c3:2a:ab:27:24:be:63:65:86:09:c7:
                    f9:64:0c:a5:6a:26:ac:9d:08:bb:dd:ec:89:e6:95:
                    d6:4d:81:0d:79:56:34:78:28:5f:68:4d:66:e1:75:
                    20:6f:25:66:94:83:99:7d:3a:47:7e:b1:f7:05:8d:
                    a5:bd:0e:63:55:e9:d5:84:f1:ab:2b:65:89:19:98:
                    55:d1:e9:14:be:5a:3a:b2:15:06:c8:f3:4b:15:79:
                    4a:78:b6:af:11:c5:1b:c5:cf:a5:b5:ca:b9:93:ee:
                    7d:68:8b:6d:c8:ad:a4:65:bc:82:dd:2f:93:74:a9:
                    53:8c:98:aa:b3:11:e0:71:e5:45:78:59:50:e0:62:
                    5f:68:80:1d:52:d0:50:94:33:c8:18:28:38:b5:88:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:67:3D:B9:39:3A:4A:9C:5D:F3:8A:B4:FA:A3:25:18:4D:DE:5C:8B
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:96:85:17:c5:82:1c:5b:d6:81:46:a7:f2:ba:0b:65:d6:
         05:84:75:bc:13:7c:32:5b:9e:7f:70:09:69:23:29:11:da:f2:
         b4:9d:0b:81:bd:f8:17:03:82:5c:ab:72:93:ae:e6:56:2b:f0:
         01:c6:48:81:73:f0:01:c6:d1:b8:72:d6:b2:9a:98:16:64:fe:
         7d:6d:23:70:56:e3:9e:48:bf:b0:80:a7:3b:7f:c2:b2:40:12:
         0c:4d:7e:fc:45:9c:75:1b:a6:f6:df:25:c2:4d:90:59:09:76:
         2e:95:6b:eb:e9:03:1b:72:18:3f:29:81:4b:14:8e:39:d4:97:
         18:66:b4:12:b3:c9:db:dc:26:a1:35:98:7d:1e:85:2c:81:0f:
         de:bf:9d:86:f7:fc:6e:24:76:00:2a:35:75:e2:9e:7b:7e:cb:
         bd:40:82:d4:69:b1:b8:8b:c6:a4:98:9e:e1:95:a4:3e:60:82:
         01:f7:fd:ce:72:0f:a1:4b:db:5d:6b:b3:e6:40:74:93:57:92:
         4d:47:69:1d:cb:7d:11:40:17:cf:1e:db:28:73:9c:66:9a:1d:
         22:be:c4:7d:f3:b3:76:91:db:ae:e9:4f:c0:07:6c:06:b7:9f:
         c3:1b:ed:50:7f:db:62:6c:a7:19:92:b0:95:a9:a5:67:6a:38:
         9b:7f:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:49:55 2025 by rpki-client