Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          HOyYLWsK6JK4MQH1jgZrkbUFkPe2ty0uBB5HmiN+flM=
Subject key identifier:   89:4C:C1:7F:56:E1:2C:3B:3B:26:D4:0D:4F:44:74:8A:D1:5D:B5:86
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       0196BE5C0E6155F6E0FBEC072AA216CF0283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          1578
Signing time:             Sun 11 May 2025 08:00:26 +0000
Manifest this update:     Sun 11 May 2025 08:00:26 +0000
Manifest next update:     Mon 12 May 2025 08:00:26 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: lYGofJwVoOBpSLf2UZMnylCgcvSAxf7cVrEHOI44Nek=)
                          2: 7VOnScmIfl5YQtcTz2D26XQWq5A.roa (hash: vu7qmzFO2z4PAZA8cHegYQseVd1YfdVKwhox9azJUJs=)
                          3: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
                          4: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
                          5: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:0e:61:55:f6:e0:fb:ec:07:2a:a2:16:cf:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: May 11 08:00:26 2025 GMT
            Not After : May 12 08:00:26 2025 GMT
        Subject: CN=894cc17f56e12c3b3b26d40d4f44748ad15db586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:6a:b4:78:a4:1b:50:dc:50:46:b9:19:7c:
                    e0:c6:7c:64:a9:c3:72:ef:90:6e:c5:d3:f0:f2:1c:
                    89:93:bb:f4:d0:37:17:44:81:51:59:b2:93:a5:45:
                    5f:38:55:4a:14:7c:51:c1:ed:9b:40:32:7b:94:f4:
                    fa:69:f0:5c:73:4e:72:38:2e:f2:70:4f:3c:47:2e:
                    c7:90:23:a0:de:df:72:38:1c:d3:12:a8:05:c6:47:
                    3c:90:6d:85:62:b5:c0:f1:58:39:3e:2e:13:ae:e5:
                    0a:2e:93:f6:d2:37:01:b2:3c:37:6f:6e:b5:19:45:
                    24:d8:f8:e0:75:70:4f:91:1f:ce:1a:1f:cc:0f:75:
                    0b:60:c8:86:1a:e4:37:6f:a2:7e:a6:e0:aa:77:a4:
                    fd:66:c4:23:dd:29:ef:8b:dc:67:7c:81:38:97:44:
                    22:fd:1f:79:f6:38:7e:7f:d7:8f:b8:2c:71:76:f8:
                    06:9b:40:f9:de:70:95:e3:ec:48:f2:4c:92:56:d1:
                    6e:3c:06:9e:5b:0c:cb:2c:df:90:8e:5f:ee:e6:81:
                    01:94:50:bc:0f:fa:df:3d:96:8e:da:6c:c7:17:76:
                    bd:35:bd:da:5a:f9:3d:60:0e:f3:f4:f2:af:6f:6f:
                    00:2f:84:bd:f0:2f:6a:e6:53:7d:9e:b5:a2:91:68:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:C1:7F:56:E1:2C:3B:3B:26:D4:0D:4F:44:74:8A:D1:5D:B5:86
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:91:4a:7b:24:65:e1:9d:b7:a3:5b:73:e2:ec:54:7e:e8:
         f9:9b:fc:f6:a5:42:23:18:a1:cd:c4:09:98:fe:cd:b1:ae:73:
         54:a2:54:4c:cf:9a:2c:54:97:0f:18:18:0f:bb:75:b1:ad:d3:
         d6:6d:e7:9a:06:22:9e:67:4a:fe:cb:58:fa:d3:c2:4f:3f:91:
         1f:bf:e6:8d:37:03:16:56:56:35:af:ba:3b:82:ee:09:a7:7e:
         8a:ca:5c:49:aa:bc:5e:1e:ee:40:79:b6:b3:5d:a7:d9:12:a0:
         8b:7b:ee:b1:fc:ea:08:ab:bb:19:5f:07:de:f6:5b:ce:17:0e:
         d6:dc:4b:a1:d9:9d:8b:cf:5a:c8:03:d1:d5:3c:a6:7f:d1:70:
         eb:65:25:12:ed:f3:b8:7b:aa:7b:ae:a4:3f:59:eb:2c:31:66:
         cc:3a:85:f7:66:84:31:9d:4c:b7:f8:e8:52:53:09:84:4b:7b:
         1c:4d:b8:fc:5c:73:a9:b1:60:c6:d9:b3:27:ed:7d:6a:9c:67:
         52:c1:2e:56:2a:1d:0b:48:fc:cf:8b:b4:a3:a5:e7:1a:fc:12:
         8d:89:32:8e:d3:44:65:39:1c:ad:c9:37:a8:2c:dd:57:8e:66:
         09:f3:31:f2:28:7d:88:18:04:94:c8:e8:4b:22:c3:85:8e:a9:
         af:9d:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:04 2025 by rpki-client