Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File:                     rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier:          xOVDQ6SOtIATo6InvwSRYY0cvrB7f2hE8sKNqumUwUQ=
Subject key identifier:   5C:06:08:76:81:4E:FF:7E:CB:69:B7:12:DC:AC:00:C5:0A:E8:59:F3
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer:       /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial:       0196BBC8BAF608C4C169A19A2D4351E4148A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number:          09DE
Signing time:             Sat 10 May 2025 20:00:16 +0000
Manifest this update:     Sat 10 May 2025 20:00:16 +0000
Manifest next update:     Sun 11 May 2025 20:00:16 +0000
Files and hashes:         1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
                          2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: BloQiTwCx/eA5+4avQcYtIYyBbcwXoeyOF1QZ3N0fnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:c8:ba:f6:08:c4:c1:69:a1:9a:2d:43:51:e4:14:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
        Validity
            Not Before: May 10 20:00:16 2025 GMT
            Not After : May 11 20:00:16 2025 GMT
        Subject: CN=5c060876814eff7ecb69b712dcac00c50ae859f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:e5:d4:4c:46:77:72:f0:55:f8:3c:c2:b4:
                    e4:1b:bc:89:bb:7a:c6:89:e1:dc:0b:9e:04:79:99:
                    a6:e1:a5:55:9f:c5:da:6e:e7:d7:ae:eb:58:f4:eb:
                    6d:a6:64:ea:30:fe:53:9b:53:93:b1:45:c5:76:61:
                    ea:cf:6c:b9:8c:04:ff:32:27:09:c9:26:22:af:7b:
                    e8:c4:dd:81:c8:fe:5b:c5:b7:10:43:b3:e6:3d:ed:
                    52:7c:51:19:dc:72:2d:cd:16:ca:3c:ce:f8:a1:53:
                    ca:57:8e:9a:07:b4:96:d0:07:44:d1:29:d7:3f:7d:
                    27:96:37:00:fd:63:e8:d1:ec:18:95:b8:fc:ce:44:
                    df:f5:b7:4f:96:95:fa:de:f3:75:f6:72:48:6a:c6:
                    27:0a:20:4b:90:44:37:a3:93:ed:06:6c:35:a9:57:
                    61:99:bc:e8:2d:97:05:ab:2f:ed:bc:d2:6e:f7:07:
                    10:34:f5:0d:52:98:2f:e6:c6:6f:79:33:ed:bd:1a:
                    b6:74:a8:f3:ab:81:81:4a:26:c6:12:9d:e2:c6:e8:
                    72:b9:da:e0:46:cc:2c:67:72:29:63:85:21:4d:5b:
                    fd:a3:ea:17:60:44:88:ae:7b:e5:4a:09:00:19:1f:
                    10:81:67:b5:b0:c6:29:84:15:90:84:22:63:bf:0d:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:06:08:76:81:4E:FF:7E:CB:69:B7:12:DC:AC:00:C5:0A:E8:59:F3
            X509v3 Authority Key Identifier:
                keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:83:34:19:ee:22:f1:c7:69:e1:4f:2c:a5:aa:d2:d5:19:2f:
         b4:f3:3f:d8:34:ad:1a:4e:b3:52:5b:c6:1c:fb:31:15:76:08:
         f6:7d:6f:95:c0:95:eb:80:0a:b7:be:4f:28:d0:f6:57:81:7b:
         ed:aa:cc:54:1b:fb:07:23:b3:d1:86:be:37:8d:09:a4:3c:6d:
         d6:14:a3:da:40:9f:44:dd:4b:c1:a9:b2:6e:6f:4b:ec:e9:c6:
         04:32:26:eb:f0:8f:13:0e:14:f4:c6:a6:a7:66:80:07:35:bc:
         74:11:7e:1c:ce:e2:ec:a2:62:10:12:09:5c:29:f5:3b:b3:27:
         eb:2d:c0:05:7e:ce:87:14:e6:a0:02:ba:57:14:21:13:cb:da:
         14:c9:3c:8d:33:a8:44:2a:f7:18:ed:2b:d6:3c:f1:65:2e:ea:
         c7:4c:b4:d9:e7:1f:46:5c:f9:14:fb:91:8f:c8:71:74:73:71:
         c1:b5:9e:45:14:80:12:8a:7a:16:db:cc:9d:55:ac:04:ce:41:
         cf:14:30:4c:86:28:a7:b9:cf:ae:29:f1:fc:fa:4e:06:ae:73:
         f4:b0:a5:0a:dc:63:f9:ef:e6:82:b4:d4:c7:91:c4:6f:9a:07:
         d4:eb:a5:1b:73:a7:5d:21:fd:ab:dc:2a:7b:7b:08:3a:19:0b:
         22:bf:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:32:13 2025 by rpki-client