Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File:                     4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier:          Soa0wtY1Fv8nvET3LsWqtvWdlbUJty+0VSmSarueeLc=
Subject key identifier:   E9:2B:D9:84:1E:4F:5C:18:EF:2B:C9:98:4E:AD:1C:C2:4C:E7:F7:69
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer:       /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial:       0196B89122ABDD6BE6844235C254BAB402CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 05:00:41 +0000
Manifest this update:     Sat 10 May 2025 05:00:41 +0000
Manifest next update:     Sun 11 May 2025 05:00:41 +0000
Files and hashes:         1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: Q25V6RgRQUsaGJfyom1Oz1qh+0QFnnhDiq/6UxpAcyo=)
                          2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:22:ab:dd:6b:e6:84:42:35:c2:54:ba:b4:02:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
        Validity
            Not Before: May 10 05:00:41 2025 GMT
            Not After : May 11 05:00:41 2025 GMT
        Subject: CN=e92bd9841e4f5c18ef2bc9984ead1cc24ce7f769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:2b:49:5a:36:c6:00:f1:36:04:a0:13:ed:
                    a8:9c:b6:b0:7c:c0:1e:f9:46:0e:a8:a0:62:ca:ee:
                    2b:7c:1d:9c:e3:69:04:8a:8f:75:1f:67:48:dc:91:
                    77:c8:59:bf:0c:bc:f9:a3:47:c9:40:3b:cb:27:a4:
                    48:02:1a:97:37:59:d3:e2:da:0a:c1:29:93:d7:ad:
                    82:99:40:27:ca:55:ae:d9:31:94:f8:56:b9:07:36:
                    74:9a:6f:a5:f1:c6:02:4c:d1:2a:8d:79:d4:19:3d:
                    4b:ad:40:50:e4:86:fd:1e:8d:8b:41:0d:1c:b3:e5:
                    3f:73:8c:0d:3c:19:b5:7d:35:21:b5:21:1a:93:24:
                    87:d4:d5:52:8a:fb:cb:54:1d:c5:99:7a:a7:7c:bd:
                    d8:07:dc:a9:ca:ea:77:0c:69:62:73:09:42:3d:85:
                    70:71:2c:59:f8:47:a6:43:69:46:33:ea:6b:a4:75:
                    69:78:7d:ec:94:df:a3:a2:5f:c0:b1:61:21:63:12:
                    a7:06:c9:43:93:18:24:02:cc:bb:6c:ce:6c:dd:b8:
                    21:11:90:4c:f7:8e:57:d9:d0:c4:64:1f:45:41:88:
                    8d:88:2c:f4:ae:d4:3b:03:03:0a:18:d0:4a:b1:40:
                    e7:f7:76:ee:2d:d6:6b:f7:70:b8:f0:03:be:c9:db:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2B:D9:84:1E:4F:5C:18:EF:2B:C9:98:4E:AD:1C:C2:4C:E7:F7:69
            X509v3 Authority Key Identifier:
                keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:92:a1:c6:cf:65:6b:6e:d0:e4:9f:0a:6d:61:f6:cf:64:21:
         be:e1:97:99:34:8d:2d:76:f9:df:ac:4c:ab:74:41:66:ed:b4:
         b9:30:98:f0:0a:9d:13:a7:fb:1e:3d:7d:7a:cf:a5:37:f7:0d:
         ad:fa:0f:f5:03:a0:a4:98:56:53:bb:b3:df:b5:2e:77:2f:c4:
         7d:84:93:05:1e:26:c0:ac:8b:7b:e5:ce:31:df:ef:e8:91:35:
         0e:06:7f:05:b3:ec:1f:b7:cd:81:10:fc:7f:f9:21:b9:54:79:
         73:78:da:38:b6:c8:6c:b9:70:61:db:59:5a:a0:57:39:6d:82:
         9e:d9:56:3e:0e:ef:4e:c7:b4:a3:3d:ac:b9:10:39:ff:38:f8:
         f4:ae:db:ec:2d:1f:a2:a8:d5:e2:27:26:e5:da:aa:07:48:ad:
         fd:9f:6f:f2:fb:65:b8:12:ef:75:32:d1:d6:e6:2d:0c:8e:53:
         69:d7:bf:b1:b4:1c:02:64:4c:98:2f:fa:dd:c7:0e:65:6e:10:
         cd:fe:39:73:8f:1b:e2:7c:e1:57:49:71:96:c0:bf:ab:41:ab:
         ed:af:dd:76:d4:38:b1:51:0f:55:ec:f6:73:e4:4f:70:e8:61:
         bd:c6:93:e7:e8:da:47:5b:68:ef:61:61:f9:41:e4:7a:ab:3c:
         67:3e:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:49:06 2025 by rpki-client