Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
File:                     5zil-TBkI5q0_3k9-Kh54bqo4cc.mft (raw, json)
Hash identifier:          X2tU84g1yi4qZpBAFKFtwDr6FP7zY2k/P5ZeSA4ElZY=
Subject key identifier:   EC:4F:E8:C0:D0:E2:56:F4:5B:03:CC:B1:37:8E:50:A7:FB:0A:CD:BC
Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
Certificate issuer:       /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Certificate serial:       0196D708F5AAA8CD7011BB3D8A2760CAA291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
Manifest number:          123F
Signing time:             Fri 16 May 2025 03:00:10 +0000
Manifest this update:     Fri 16 May 2025 03:00:10 +0000
Manifest next update:     Sat 17 May 2025 03:00:10 +0000
Files and hashes:         1: 5zil-TBkI5q0_3k9-Kh54bqo4cc.crl (hash: WRnFr2MQukJKRbi9KZtgVTfq74Bezgbl72YauJpuKc0=)
                          2: 8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa (hash: oPPydQy+Sv4ZpQjf6oDCm3YgcVIg/Za6wdL618vPB84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:08:f5:aa:a8:cd:70:11:bb:3d:8a:27:60:ca:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
        Validity
            Not Before: May 16 03:00:10 2025 GMT
            Not After : May 17 03:00:10 2025 GMT
        Subject: CN=ec4fe8c0d0e256f45b03ccb1378e50a7fb0acdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:db:f9:b1:bb:ad:c1:ac:2b:d9:5a:6c:d1:
                    65:2c:e3:50:73:59:e2:7d:39:7e:91:5f:34:4c:5c:
                    50:f6:b3:2c:1b:28:cb:1f:de:43:77:31:ef:00:14:
                    37:cd:b3:63:98:c4:6a:7e:01:61:a8:00:19:6b:1a:
                    5e:01:f3:8b:c5:54:8f:fb:c5:30:33:71:e9:e8:40:
                    ed:f2:3c:32:ea:be:ac:e6:7b:e4:2b:3f:1d:60:90:
                    5d:4e:40:06:53:f6:de:9d:08:94:94:4f:35:c4:89:
                    48:76:61:e6:6d:88:16:6b:86:a4:a9:8c:c0:60:57:
                    4e:9b:de:43:20:f3:44:6b:a5:84:93:4c:b3:92:c0:
                    bf:ea:bc:d7:3c:73:d5:5a:ec:d0:73:9b:f2:55:7f:
                    c4:18:c0:35:19:74:45:9c:20:c6:55:f5:c7:63:e6:
                    ef:b7:0b:57:0b:f9:32:81:13:bd:c8:d0:5d:5e:ad:
                    ef:bc:cc:30:a0:d3:fe:49:67:ea:c5:b0:08:97:37:
                    b0:8e:86:7f:fa:92:6c:75:c5:e5:13:ea:94:0d:8b:
                    2c:42:c2:d6:fb:c9:de:a9:ec:bd:7e:62:f6:be:e5:
                    a8:d8:c6:43:c7:38:f7:06:f4:ee:38:00:f9:7e:37:
                    42:c1:0d:79:b4:6b:b4:59:bd:27:7b:3b:3d:6c:95:
                    8d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:E8:C0:D0:E2:56:F4:5B:03:CC:B1:37:8E:50:A7:FB:0A:CD:BC
            X509v3 Authority Key Identifier:
                keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:da:be:19:07:67:58:4a:03:5a:71:f2:84:a0:34:1f:f4:f1:
         23:ee:b8:dd:32:f1:ac:f0:ce:2b:77:9a:aa:bb:59:d8:ad:9d:
         8e:61:0d:2d:e7:38:27:24:09:c8:a5:62:24:d0:d7:48:28:a0:
         e5:53:bd:0b:93:f1:11:85:e4:d6:eb:92:a3:e6:39:06:a4:8b:
         46:16:95:b5:b5:5d:48:8f:48:54:d0:ff:70:0f:04:70:17:a7:
         24:d7:a9:d2:3d:8e:d3:4d:2f:87:98:06:d8:4e:26:69:c4:00:
         91:d1:98:3f:63:9c:28:d6:11:dd:84:79:d4:16:d4:03:e4:0e:
         b4:db:e6:7c:e2:9f:75:91:cd:a0:bf:3f:b6:ce:34:7a:cc:e3:
         c2:2d:6e:2e:e5:8e:4d:f0:88:48:b6:37:cf:01:f7:aa:f0:4d:
         e6:27:bc:80:90:57:b2:51:94:92:5b:50:7b:7e:53:66:cb:6e:
         9d:aa:85:7b:3a:0f:cb:53:82:82:64:21:68:df:97:d4:33:da:
         9a:13:55:23:56:c1:36:21:ff:94:a1:8c:c8:0f:82:ab:48:06:
         4d:b5:65:fc:03:e0:ee:a7:85:e5:01:67:b8:61:8a:21:c2:fc:
         cc:04:47:55:01:bb:4b:04:7b:14:1c:3b:b1:56:44:52:63:9d:
         49:1e:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:28:33 2025 by rpki-client