Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          3jhpz6mNOwiRcqPQV4kiii6fWx+5agQW3v0W6f2eBJA=
Subject key identifier:   D4:17:99:33:23:C4:2A:04:78:82:76:7A:AB:66:DD:6C:A0:0A:5C:4B
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       01969F768A9A1240CB461701F304DB21A180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          1528
Signing time:             Mon 05 May 2025 08:01:08 +0000
Manifest this update:     Mon 05 May 2025 08:01:08 +0000
Manifest next update:     Tue 06 May 2025 08:01:08 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: m/vR72E+5FyZY6snwCQV067cKEnX1pHBoDep+PhRnY8=)
                          2: uBEfWIHV8Ysgcm0WjhvS8qePbzM.roa (hash: g7l6o1+EK67dHVtVxC57iUhjiYlLOzwY9EalaarNVkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:76:8a:9a:12:40:cb:46:17:01:f3:04:db:21:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: May  5 08:01:08 2025 GMT
            Not After : May  6 08:01:08 2025 GMT
        Subject: CN=d417993323c42a047882767aab66dd6ca00a5c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:28:73:d6:9d:d1:dd:32:35:50:77:26:9e:
                    6f:90:3f:be:9d:36:80:9a:f0:85:61:24:3a:12:f0:
                    fe:75:1b:50:95:1f:78:4e:45:70:a0:e3:22:a6:c5:
                    ff:a6:21:ac:ee:cc:e1:f3:9f:37:2f:61:5e:8f:44:
                    c9:11:80:0d:0c:38:c9:ec:a9:b3:e2:a6:af:22:32:
                    fc:a1:bb:7f:f1:01:3e:30:c6:df:ee:37:b6:bd:e5:
                    65:28:67:5c:19:6e:30:fd:54:e0:d8:59:60:2a:a1:
                    e5:8e:41:6b:d6:35:2f:28:a5:80:25:03:74:87:8c:
                    9f:9d:fb:f6:08:59:26:b8:54:92:45:ae:b5:b7:24:
                    08:5b:b9:38:00:17:67:4d:4a:5a:c0:ae:33:05:7e:
                    a9:c8:dd:e9:70:78:ca:a4:56:24:a1:d1:91:ef:bf:
                    63:62:67:41:0b:97:3b:5d:9d:0f:c4:11:09:4c:a3:
                    6e:1d:16:d0:74:d9:69:2c:01:f8:81:a2:5d:d7:2c:
                    98:4f:d8:b3:d1:f1:06:3d:04:93:3e:72:e7:48:c4:
                    e8:5a:f8:4c:95:d4:30:42:12:27:eb:a8:54:3c:8f:
                    8e:62:2d:58:39:86:bf:ff:15:ed:77:7c:33:7b:75:
                    da:ef:90:06:da:91:5a:1d:a3:17:b7:44:bc:17:37:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:17:99:33:23:C4:2A:04:78:82:76:7A:AB:66:DD:6C:A0:0A:5C:4B
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2c:dd:6d:32:1d:96:46:55:24:0d:aa:2e:2b:52:6d:39:89:
         81:f8:dd:27:d8:b2:0c:de:70:a3:34:fd:37:90:30:a4:e8:13:
         74:5b:5f:34:02:cb:28:dc:ce:28:c8:fa:f7:cf:92:f8:ef:81:
         fa:6a:18:35:d4:45:19:03:fb:03:8c:ad:68:a1:9a:49:4a:70:
         a0:d3:4f:d8:ef:17:6d:03:72:b8:d4:08:2a:6b:b4:11:76:9f:
         a0:0d:59:20:0a:14:a9:cd:29:0c:4f:01:e9:04:6b:61:2a:6b:
         0f:c2:ee:47:66:54:d4:20:9e:7c:42:84:a2:4b:35:6d:96:c7:
         4f:55:33:54:1b:2c:e3:49:18:1a:2c:d3:7e:c9:84:5e:55:1b:
         e9:c1:0b:29:8e:2d:d5:fd:db:90:7d:1c:52:76:19:03:08:53:
         f8:ea:48:6d:9e:19:19:02:1a:d6:58:93:ff:3f:44:23:5f:cb:
         e9:18:9a:7a:08:e6:ed:e9:c5:0f:41:96:6b:02:20:4b:6b:b0:
         59:de:c8:7d:23:11:ef:3a:e6:c7:b0:37:2c:94:a2:58:c9:49:
         a4:ea:67:ac:14:95:3a:c2:ca:25:e1:d7:56:50:7a:7e:28:1c:
         08:5d:7f:85:47:63:06:76:ac:49:ad:8f:6f:84:ca:f1:2e:89:
         6e:8a:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:16:46 2025 by rpki-client