Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          1VtyxtwsLYaI6oT9To2tjlAELcUqNIewji4O6hkZAik=
Subject key identifier:   EF:4F:A1:55:04:44:31:C6:A3:0C:F3:F9:CD:5C:78:F0:68:BC:0B:0C
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       0196C2393211C665D18A413172D2FD728096
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          127D
Signing time:             Mon 12 May 2025 02:00:50 +0000
Manifest this update:     Mon 12 May 2025 02:00:50 +0000
Manifest next update:     Tue 13 May 2025 02:00:50 +0000
Files and hashes:         1: 1Hdm4Yb6uudKtF7Z6GZsQybyHjU.roa (hash: W7Iji0sZOuTaW08iAlZ0I50hV2fJR5fIhMcUjQTgllQ=)
                          2: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: Od5FBuhe3C6SA1MuBCoCrjpZSPHIwHJpnzj6TmQ63yw=)
                          3: fP9KcS2nAtlzdr_4yXDxYjDynAI.roa (hash: FSiW33FPGzpnEA+aiBD/xZClQVX484dW+n0rQsuAQfU=)
                          4: w_7-SYv5bHiwdydNGFlWuXsDXgg.roa (hash: KW5l2Z272khkMu93M3YIBl32KtQLTDgrGalDxIjvjZI=)
                          5: yIqAKJ9ffBRI_JVyvb32ZGXo-Dk.roa (hash: Ncm1UuYwpN7GicMBHimmdKJ9awoqjLXc5cMuP8gJQm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:32:11:c6:65:d1:8a:41:31:72:d2:fd:72:80:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: May 12 02:00:50 2025 GMT
            Not After : May 13 02:00:50 2025 GMT
        Subject: CN=ef4fa155044431c6a30cf3f9cd5c78f068bc0b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:26:0a:cd:03:14:25:9f:0c:22:b7:4b:b8:
                    e4:9e:53:c4:11:28:12:d9:42:66:2c:19:79:88:f9:
                    cf:5c:45:fe:d0:b8:26:81:b9:3d:82:79:34:9c:44:
                    17:44:c3:b0:32:81:f1:3e:6a:ea:63:d2:2c:fd:54:
                    0b:94:da:c0:e7:c3:d6:20:2d:2a:c4:dc:37:90:a1:
                    cd:d0:44:d3:93:8a:09:3d:dc:48:fb:0d:7e:c3:4c:
                    df:92:a9:23:d9:a0:78:2b:eb:05:b0:bb:f1:6c:6b:
                    06:bf:ff:b4:6c:ad:96:56:7e:63:69:3e:88:50:10:
                    6b:c8:5d:37:7e:95:d7:47:2d:73:3b:8d:f6:6a:f7:
                    7c:b6:8c:d6:63:5d:90:ef:7c:17:a2:d7:99:cd:2b:
                    45:71:89:c8:fd:e8:c7:30:12:f5:99:94:ee:b0:ff:
                    1e:e7:36:4d:fe:37:2b:5b:d9:36:e4:7e:2f:b6:34:
                    e7:45:e1:cd:5f:14:29:90:d0:60:5b:11:b9:da:3a:
                    80:d5:63:62:29:ef:b1:ed:c2:5d:cc:e0:fd:f7:3d:
                    74:5c:f3:86:a0:c8:7b:e5:bd:60:52:81:14:9c:00:
                    08:db:b7:22:65:1f:86:42:f8:18:55:70:f4:2d:07:
                    be:80:0f:3a:77:88:5f:7b:dc:d4:82:1b:8f:8f:73:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:A1:55:04:44:31:C6:A3:0C:F3:F9:CD:5C:78:F0:68:BC:0B:0C
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:af:af:b7:23:44:ec:e5:af:7e:ca:96:05:c4:7d:65:57:2b:
         63:56:20:90:77:93:78:b6:be:4d:38:c9:f5:60:ba:5a:93:a0:
         8d:39:e9:25:9b:2a:f4:85:7f:76:96:6d:19:51:69:36:bd:86:
         74:5e:de:ab:57:8d:23:75:72:e1:9f:86:d8:bc:8c:9d:42:a6:
         70:32:da:93:61:72:7c:d2:48:d6:47:30:6c:61:da:da:ce:2a:
         9a:12:0e:cb:0c:85:43:8f:69:23:ec:21:f9:f2:ae:7f:20:3f:
         91:28:bf:00:54:2a:74:53:29:e7:82:2b:c1:2a:74:77:e6:ce:
         a2:e9:a0:0d:21:fd:80:96:18:71:9b:dd:e7:96:4b:0a:3d:df:
         1a:ef:d0:d1:d1:52:6d:03:86:e4:6d:ca:c5:92:93:ec:c2:f2:
         c1:08:cb:e2:5c:a9:aa:7e:2c:7b:9c:9a:9b:97:87:73:43:00:
         57:2b:89:90:12:e9:d1:b3:5f:19:d6:da:a0:31:b7:5a:57:0c:
         e3:97:c6:d5:e4:56:41:94:aa:b3:14:ef:2b:7f:0c:c3:c9:20:
         e3:37:fe:4e:58:dc:7b:9f:01:98:2f:7a:63:2b:5f:15:af:9d:
         0b:20:5f:e0:98:b9:e6:19:07:24:ab:ec:b7:17:bc:d4:65:9b:
         ca:33:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:19 2025 by rpki-client