Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File:                     E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier:          z2Oqg4rYkJoF41/cEzPOCVO5i6xqZkbmkbH0hhQiWO0=
Subject key identifier:   12:24:5C:50:C2:CE:52:A1:27:76:21:F8:A6:7E:8A:35:0C:6A:6A:26
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer:       /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial:       0196C872424BDD181F3BD9F49B90C8050030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number:          147C
Signing time:             Tue 13 May 2025 07:00:53 +0000
Manifest this update:     Tue 13 May 2025 07:00:53 +0000
Manifest next update:     Wed 14 May 2025 07:00:53 +0000
Files and hashes:         1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: quM36KlAX058AdHcssdYHbN2p2eSGgYzDCoG+JNmiuM=)
                          2: jScU1zFVjCaRKrDbPPQusY4_bns.roa (hash: 4SG9zb228Iu48jTcU1xr7DFLeKIwml/oUjk+0F3n0UE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:72:42:4b:dd:18:1f:3b:d9:f4:9b:90:c8:05:00:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
        Validity
            Not Before: May 13 07:00:53 2025 GMT
            Not After : May 14 07:00:53 2025 GMT
        Subject: CN=12245c50c2ce52a1277621f8a67e8a350c6a6a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:da:0f:35:00:f8:75:10:7a:d5:4f:3d:23:
                    3d:13:01:32:4a:6d:2c:46:9b:2a:16:5d:6b:83:c0:
                    f6:93:c9:2b:f5:fc:a5:10:da:07:3d:21:29:71:1d:
                    55:a1:21:ea:d5:6a:ea:cb:2d:63:e3:78:af:f8:e7:
                    4c:7b:ed:df:6c:81:c9:af:06:0b:00:86:8f:25:5b:
                    a7:9a:7e:30:50:fd:4c:4e:a0:a4:b0:b5:1c:50:86:
                    c5:bb:cc:25:85:83:a6:1f:f7:a3:c0:c5:ca:de:e8:
                    07:14:2a:16:d0:01:d3:f0:e0:89:8e:a3:eb:8b:61:
                    cf:b3:6a:b4:10:9b:37:6f:00:d6:0f:be:21:a3:ee:
                    1c:32:e5:85:d7:5b:a4:aa:36:0a:da:8d:68:ca:64:
                    88:11:85:b5:c3:37:cf:f1:b3:11:bd:5f:0f:5f:c5:
                    d5:a6:78:23:86:46:2f:9c:e3:84:36:17:6b:0c:f5:
                    80:4d:82:2f:bb:98:3c:14:01:8a:1f:a7:ef:a6:ca:
                    42:96:e4:aa:1a:63:81:ac:6e:b0:22:01:3d:c3:42:
                    4a:c8:c5:50:05:82:d8:d4:e3:22:71:db:46:72:96:
                    4d:32:3d:62:89:9a:81:d1:d9:25:12:1b:38:44:2a:
                    89:6b:2b:8d:d1:38:09:b6:83:0b:99:e2:da:fe:84:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:5C:50:C2:CE:52:A1:27:76:21:F8:A6:7E:8A:35:0C:6A:6A:26
            X509v3 Authority Key Identifier:
                keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:85:cd:d2:dd:02:46:67:88:ee:b8:4e:90:78:b2:d9:ef:8d:
         02:24:bd:64:2a:27:be:51:29:72:82:c8:e0:bd:12:db:e6:1a:
         5b:ae:b0:41:30:37:64:2a:7d:ef:70:45:4f:c8:55:97:45:36:
         5f:3f:1d:12:b1:28:77:09:d4:6e:ea:38:aa:6d:12:ec:0c:f6:
         17:ea:df:44:a9:65:f7:0b:30:5d:94:f1:8b:8d:71:a0:6a:ac:
         1a:ba:67:fd:e4:3d:42:9c:b6:e6:77:f6:7d:c0:75:97:b6:71:
         63:36:45:73:3d:e1:25:52:f2:19:fd:d1:fc:9d:de:9e:9a:0d:
         d9:37:85:5d:77:4f:38:77:90:28:5d:d2:ba:cc:4b:15:1d:2a:
         75:30:e9:b5:de:23:6a:7b:a1:de:40:33:14:39:c4:38:20:af:
         2b:21:b3:14:c1:38:89:2e:46:21:b4:6e:bf:a4:24:1c:c4:f1:
         fd:eb:c7:21:ec:88:2a:4b:02:85:43:3a:1c:3d:91:29:91:6b:
         de:25:14:99:e0:3c:a0:2d:5d:65:51:d2:19:bd:05:84:19:c6:
         86:a0:0f:d4:49:03:d0:8d:3f:f5:03:7e:9b:0d:cf:9e:88:5a:
         e9:02:4c:73:0c:1b:21:10:6c:1a:7f:44:c2:85:a5:c9:e5:3f:
         9a:0a:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:51:52 2025 by rpki-client