Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
File:                     5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft (raw, json)
Hash identifier:          wvQf4gO4ydkpiLCdvoH9eSMU4qvQu5AYp19PjZcYfiM=
Subject key identifier:   D6:2F:7B:A9:82:51:DB:B4:35:D6:C5:8E:27:E5:71:89:EC:55:A2:3C
Authority key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Certificate issuer:       /CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Certificate serial:       0196C79681D258A129C2CDE96546B56904A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
Manifest number:          147A
Signing time:             Tue 13 May 2025 03:00:51 +0000
Manifest this update:     Tue 13 May 2025 03:00:51 +0000
Manifest next update:     Wed 14 May 2025 03:00:51 +0000
Files and hashes:         1: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl (hash: hhacvzbrtZ2p5BgP9iPd4NbBKlM9+Pt7/r25Bn9/mEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:96:81:d2:58:a1:29:c2:cd:e9:65:46:b5:69:04:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
        Validity
            Not Before: May 13 03:00:51 2025 GMT
            Not After : May 14 03:00:51 2025 GMT
        Subject: CN=d62f7ba98251dbb435d6c58e27e57189ec55a23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:6c:82:63:3a:56:b2:58:c0:f4:9e:c2:3b:
                    e5:a9:36:5f:6f:a8:8c:97:1b:ec:dd:8c:88:cd:87:
                    39:3c:4d:9b:b9:5b:e7:54:c8:5c:22:f4:bc:d1:a6:
                    f4:99:70:df:64:95:51:56:f2:49:f8:4e:52:62:e5:
                    63:c0:8e:e1:8e:ca:90:1a:69:16:82:0d:97:3b:8c:
                    eb:45:eb:11:4b:e8:15:22:48:b2:18:fd:50:1a:c3:
                    98:7c:e8:c9:9f:09:34:c0:c3:83:75:63:a5:90:54:
                    ac:70:41:6a:bd:7a:05:5e:fc:f4:93:ca:e0:c3:1c:
                    7d:a2:90:4b:07:77:e5:4e:0d:4f:e1:f2:c3:1c:bc:
                    13:53:33:03:b6:f1:cd:1b:ac:e2:ed:79:cf:7a:13:
                    3d:20:77:ff:48:1f:68:ef:a7:20:aa:51:32:f6:ed:
                    42:64:58:40:c5:a4:f3:cd:64:7c:b9:fc:2d:fb:a5:
                    c0:f7:bd:aa:f5:18:99:81:2e:30:f1:0b:c4:66:98:
                    49:77:77:75:f7:52:59:9a:db:15:25:1f:48:f6:45:
                    b7:0e:77:9d:56:47:0e:31:c2:02:0c:29:5f:34:d6:
                    f5:99:51:a2:b7:f9:e1:ea:a8:9a:ad:77:be:23:aa:
                    20:e0:3a:d8:6f:e1:ae:7f:c4:49:47:18:2d:fc:ad:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2F:7B:A9:82:51:DB:B4:35:D6:C5:8E:27:E5:71:89:EC:55:A2:3C
            X509v3 Authority Key Identifier:
                keyid:E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:7c:5f:15:43:a9:2a:8e:3b:89:26:57:c4:16:6b:75:e4:
         ec:dc:76:0b:7c:7a:b7:df:bf:43:99:c3:0e:21:9d:8c:7c:c4:
         eb:96:d6:c9:3d:11:3c:0b:51:fa:a6:2d:e6:ed:0a:ac:f2:86:
         f6:ba:b8:b6:9d:96:9b:2a:8a:15:3a:9f:0c:ae:04:bf:3a:cf:
         c3:fc:dc:f1:58:a9:aa:db:73:3a:aa:12:e5:57:5a:33:b7:95:
         a4:af:61:15:f8:38:9c:72:3a:92:97:eb:08:d5:9e:79:76:b9:
         b5:86:86:7e:04:2b:16:8c:16:fe:4c:3a:48:d9:a5:ee:8d:6f:
         ec:fb:d9:e4:83:3c:a8:b9:89:7a:2b:c8:d8:c9:e0:5b:7c:5a:
         c3:f5:d8:3b:39:bf:a9:2c:71:81:5c:58:0a:af:fa:1d:0d:38:
         ad:5e:0b:a5:2a:bb:dc:f6:d2:45:31:48:f0:c1:63:45:a9:65:
         83:ad:06:51:56:bc:4b:a8:4b:4e:94:b2:3a:d9:dc:b6:fc:6c:
         d5:9d:1b:ba:70:9a:c5:fa:bd:71:4e:23:ca:e4:2f:c5:e7:27:
         52:f7:20:af:70:3b:b2:85:52:d2:2b:10:b9:da:43:43:f2:a8:
         c7:f6:31:b0:54:24:f1:14:ab:c0:6e:fd:f8:68:d3:df:57:be:
         e3:27:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:19:27 2025 by rpki-client