Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
File:                     eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json)
Hash identifier:          /ZUS+EI5iNllpe1MCiHWNzZRBA3CKPSm5jhnsonWpjo=
Subject key identifier:   3C:B6:C9:A7:A4:B0:A4:A4:32:45:FF:45:43:3D:9D:94:C1:DF:E4:70
Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F
Certificate issuer:       /CN=78d32c121735449f1538ff0036f4abd0600a825f
Certificate serial:       0196C7287F928D0B7E7A9D6978AB7975B836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
Manifest number:          DE
Signing time:             Tue 13 May 2025 01:00:42 +0000
Manifest this update:     Tue 13 May 2025 01:00:42 +0000
Manifest next update:     Wed 14 May 2025 01:00:42 +0000
Files and hashes:         1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: J+b0dU12AhUX2zmsX3e+HxArRdkLRJIbp4HBjpXJe84=)
                          2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:7f:92:8d:0b:7e:7a:9d:69:78:ab:79:75:b8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f
        Validity
            Not Before: May 13 01:00:42 2025 GMT
            Not After : May 14 01:00:42 2025 GMT
        Subject: CN=3cb6c9a7a4b0a4a43245ff45433d9d94c1dfe470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:9d:95:f7:8a:fb:01:c9:a5:8d:40:92:73:
                    85:df:83:9d:25:86:34:8c:03:f6:7c:a0:aa:36:f2:
                    1c:9b:27:5d:ab:bd:48:10:96:f6:a8:68:68:72:49:
                    37:d2:8b:eb:cd:2c:97:93:80:16:97:cc:da:e6:61:
                    15:b8:f0:6b:16:71:33:54:41:1e:f1:62:b0:50:f1:
                    ea:f4:45:56:b4:06:14:3d:f9:66:d1:9f:e9:8b:44:
                    3d:18:52:e8:bb:39:c1:a3:fd:52:c0:7a:ae:1a:bc:
                    e1:85:df:42:d8:dc:98:88:f7:88:91:25:36:06:61:
                    70:54:6b:6a:57:a3:93:82:f0:b4:7a:6a:ba:f9:32:
                    43:6c:73:09:35:94:6a:57:35:0a:b6:75:d8:25:ef:
                    d0:c6:93:b3:a3:42:17:ed:11:bc:bd:d7:9f:ef:d2:
                    d0:62:db:ab:3b:24:cb:9e:ff:5e:0a:7d:dc:2e:8e:
                    4c:15:7b:a6:09:a7:68:9e:65:a7:10:71:d1:0d:6b:
                    ce:d2:4a:8e:98:8e:a3:6f:db:7b:4c:8c:01:ff:4e:
                    cc:ee:66:07:23:28:51:a7:29:bf:fb:c0:e9:6e:48:
                    ae:25:c2:db:f5:e5:8d:5c:bb:c0:44:41:f9:b4:f9:
                    e1:62:02:91:e3:2a:e8:13:1d:6d:ea:09:4d:24:bd:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B6:C9:A7:A4:B0:A4:A4:32:45:FF:45:43:3D:9D:94:C1:DF:E4:70
            X509v3 Authority Key Identifier:
                keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:af:e3:6e:72:86:2b:b6:15:11:79:31:b9:55:18:fe:35:
         0a:95:e8:13:8b:1f:85:ff:58:93:da:c1:87:af:58:ee:ec:22:
         f2:9c:25:96:11:9f:b0:fb:33:78:c5:99:db:75:40:10:33:47:
         5a:e4:16:57:ca:33:0f:e2:ab:df:7e:2b:61:00:4f:d6:2c:d0:
         e5:c0:88:69:e8:2d:18:25:ec:73:77:c6:65:09:49:a1:37:22:
         1f:4c:db:c9:e8:35:16:f6:af:3a:b7:14:0f:32:69:ab:77:d4:
         2a:e4:3a:1f:06:be:44:6a:2c:75:e9:7c:99:79:6c:bd:08:57:
         83:1c:c3:ed:cd:6a:f0:e2:66:1d:84:57:41:ef:aa:ca:79:52:
         1d:e0:db:3f:01:d7:f0:02:d7:a7:5f:e7:ad:38:76:d5:61:67:
         9f:ac:ca:5f:0a:79:5d:0b:df:86:c8:92:04:73:9b:d3:32:8d:
         2c:f1:0b:70:23:e3:a1:b9:59:39:86:58:08:26:0e:d8:9c:6c:
         bf:04:cb:98:1b:a5:9a:52:d2:b6:5b:59:15:82:e7:4a:64:3f:
         33:c2:c0:2a:c4:d8:a4:f7:b5:34:ae:9a:4d:79:0f:a7:a4:4d:
         5e:74:1b:a0:8a:77:2d:9d:cb:59:35:6d:40:8a:23:84:23:89:
         b1:27:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:01:37 2025 by rpki-client