Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File:                     5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier:          pc1IsKNe+q8sm6RKqj98xCGBGlcvDBF/i17NhRyHa+M=
Subject key identifier:   C1:9D:E9:66:65:A9:2C:01:D7:B9:D6:54:AD:FE:D2:43:2C:69:10:39
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer:       /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial:       0196A3C120CF2EF0FF9072513E3696C01217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number:          09BC
Signing time:             Tue 06 May 2025 04:01:05 +0000
Manifest this update:     Tue 06 May 2025 04:01:05 +0000
Manifest next update:     Wed 07 May 2025 04:01:05 +0000
Files and hashes:         1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: kmxcqzH2Mab+NnYWbzEY7HoFjpaV5z7k4JvZ/cxbmpw=)
                          2: ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa (hash: 6sUjW8COGptDdK0ohMchALwRnOd24SfrIMK9uss1g4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c1:20:cf:2e:f0:ff:90:72:51:3e:36:96:c0:12:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
        Validity
            Not Before: May  6 04:01:05 2025 GMT
            Not After : May  7 04:01:05 2025 GMT
        Subject: CN=c19de96665a92c01d7b9d654adfed2432c691039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:dd:8e:fd:ec:87:8c:1b:f3:d8:06:a6:e7:
                    6d:5c:6c:d5:f9:94:67:98:a5:ed:c1:f9:c6:18:63:
                    ba:f8:71:09:de:c5:11:ed:73:22:6e:c8:88:cd:ed:
                    e7:d2:a1:91:bb:a4:a5:04:5a:dd:a9:b4:e9:53:20:
                    f4:72:65:dd:57:d5:ec:53:40:79:4f:b2:fa:32:24:
                    32:a1:b5:26:bc:6a:b2:58:c1:b2:30:33:58:a0:61:
                    f8:69:4f:d6:79:58:70:a7:b2:9f:69:0a:03:f1:60:
                    67:a8:b6:ec:fe:2c:62:23:44:21:7f:6b:d8:e4:23:
                    02:76:34:14:65:af:e4:37:be:1f:d8:e0:65:8d:f0:
                    57:3a:0e:51:86:d2:41:fc:d5:32:5a:88:21:7d:b4:
                    81:53:8b:27:28:5a:4c:a1:6a:2a:6d:3f:ca:7a:f3:
                    8e:27:0d:4c:96:b9:20:8d:43:7d:75:34:1f:79:56:
                    fc:34:ff:b5:af:3e:da:69:b4:77:40:21:4d:88:99:
                    0d:c4:08:6a:c2:e2:ef:06:fd:50:91:52:ca:c3:b0:
                    f1:49:0c:8f:82:6c:7e:0f:9c:44:53:7b:f4:6a:23:
                    75:91:13:fa:d5:f0:ab:51:f5:47:ab:1b:e3:c7:2e:
                    20:b4:3d:73:e3:34:f9:df:c5:a7:54:e8:a6:20:ae:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:E9:66:65:A9:2C:01:D7:B9:D6:54:AD:FE:D2:43:2C:69:10:39
            X509v3 Authority Key Identifier:
                keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:6f:fc:b6:99:64:65:30:a3:a3:f7:1d:f6:ed:26:3d:72:81:
         dc:44:40:f1:23:05:cb:ab:07:15:4c:cc:d3:4f:c5:1a:f0:e4:
         c0:36:33:1f:e9:c8:fc:d1:bc:b9:c6:2b:6a:f6:f2:1b:42:46:
         18:49:ea:17:de:6c:97:04:0b:61:1f:0b:d6:0a:92:02:c0:5c:
         01:e4:00:f6:96:84:db:ab:5d:14:32:81:cd:32:7f:b7:17:cd:
         e0:8a:85:b8:91:b0:e7:a0:d2:7e:3a:b1:d0:24:bc:1a:b6:94:
         24:2c:a6:0a:0c:36:48:25:fa:ee:cd:a5:b4:97:66:35:e8:82:
         bc:a8:90:ce:6b:9f:25:09:cb:50:1d:ee:d7:d6:0f:ad:e4:f0:
         65:66:b8:22:55:8e:51:07:bf:76:e3:a1:99:7e:57:30:64:32:
         b1:6d:49:93:0c:28:c3:60:23:5a:fe:e6:37:08:9c:65:ba:fd:
         60:0f:91:02:b7:e6:6a:76:b8:93:b1:3e:f2:15:69:01:ad:41:
         1c:bd:87:d9:60:cc:d9:5e:ed:65:94:6c:eb:29:42:5f:04:a4:
         e0:7a:54:67:6b:6f:35:84:b9:a5:4e:85:88:5d:f0:d3:ae:5e:
         8d:c6:3b:48:79:06:45:cb:54:cd:fa:c1:33:df:aa:27:b1:b6:
         bf:7f:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:30:43 2025 by rpki-client