Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
File:                     e0iUW51xbNR_veKGDYEA_NqYdJY.mft (raw, json)
Hash identifier:          WwaS5xJxuvu9IrB1UaH4w+r+Q+sjuQ1AGqnWFHWe4iM=
Subject key identifier:   51:FF:5E:6F:C4:A8:B0:9B:FA:63:10:DE:50:8E:8D:C8:25:EE:D7:40
Authority key identifier: 7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96
Certificate issuer:       /CN=7b48945b9d716cd47fbde2860d8100fcda987496
Certificate serial:       0196AB7A2C169D6F271E9A27706A64F6B345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
Manifest number:          0FEC
Signing time:             Wed 07 May 2025 16:00:32 +0000
Manifest this update:     Wed 07 May 2025 16:00:32 +0000
Manifest next update:     Thu 08 May 2025 16:00:32 +0000
Files and hashes:         1: B4orFeIWC5coFv0DXPFWV6bX2TA.roa (hash: QvvdOu/flX7Du+SLiSNrRfEvw1jIp3bm67X+T+zP1MI=)
                          2: OjOSiVLO01NbQEy7fCWWb1dleI0.roa (hash: 1R3ScnGJJHnWlOylikh2Ppg5Q/7g7edL0CQoeTE72rs=)
                          3: TqGaZ21iO7PpNxKcdbTDvHNWI5w.roa (hash: TA9bnT0BdnbGAPvTvVqQo9iBMjThLUbF7MsSEuMnyLI=)
                          4: e0iUW51xbNR_veKGDYEA_NqYdJY.crl (hash: kkNzxU+uZRSGz0T6o0FvyTWZ2ysVQNLR6WJVkU9ZEkA=)
                          5: tNVymaqEMA53YlfZDB8JJ8aafJI.roa (hash: dVF8IWQWb1ioPcMe+UkAzFVliOSu7mCkktpnx4UARn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:7a:2c:16:9d:6f:27:1e:9a:27:70:6a:64:f6:b3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b48945b9d716cd47fbde2860d8100fcda987496
        Validity
            Not Before: May  7 16:00:32 2025 GMT
            Not After : May  8 16:00:32 2025 GMT
        Subject: CN=51ff5e6fc4a8b09bfa6310de508e8dc825eed740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:90:df:e6:ac:44:75:d7:ef:bb:9d:bc:e8:
                    38:6b:62:af:ab:2b:02:df:22:2f:7c:d9:2f:a0:2f:
                    aa:97:65:6b:9a:d2:9e:39:3e:19:c6:aa:0f:bf:9b:
                    1f:6c:a9:94:71:a5:29:c6:b8:19:47:df:c6:78:87:
                    9e:6b:41:14:1d:e7:5f:2a:73:91:df:ee:50:06:cb:
                    d5:0b:fc:c9:da:20:ed:0e:6d:3d:eb:4f:c5:54:2f:
                    c7:16:31:bf:61:ae:39:35:79:84:45:49:80:4a:d6:
                    cf:56:a8:e1:02:db:31:7a:42:dd:c7:e7:7e:04:a9:
                    89:75:d8:6f:3e:24:60:1c:23:aa:2d:71:3e:04:28:
                    09:b9:f3:12:20:1d:33:2b:0f:10:ed:12:20:e6:51:
                    2b:33:c5:6a:21:a0:58:38:05:9d:56:a2:ce:f6:03:
                    27:5a:58:ee:f3:6d:4a:18:70:81:48:04:61:0b:80:
                    9a:80:95:6e:57:61:78:89:79:6f:47:58:ca:1d:89:
                    38:a6:04:6e:7a:63:2a:fc:13:52:84:7e:bf:a8:96:
                    ad:9f:22:eb:3a:30:70:69:88:f1:b4:9d:a2:15:5d:
                    9a:6b:83:c0:04:c6:66:5b:24:03:a0:5c:f8:2c:d7:
                    35:84:9d:04:9d:53:3a:eb:2f:03:00:c9:dd:38:1a:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FF:5E:6F:C4:A8:B0:9B:FA:63:10:DE:50:8E:8D:C8:25:EE:D7:40
            X509v3 Authority Key Identifier:
                keyid:7B:48:94:5B:9D:71:6C:D4:7F:BD:E2:86:0D:81:00:FC:DA:98:74:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0iUW51xbNR_veKGDYEA_NqYdJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5b6b06-9af6-4026-b47c-4e85897f309c/1/e0iUW51xbNR_veKGDYEA_NqYdJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:ae:6e:5e:3a:cc:2d:65:6b:d6:c5:06:47:f2:bf:a5:5f:
         c4:76:33:61:84:b0:58:91:f0:f2:6c:52:cd:e2:8d:6d:87:b4:
         8c:91:63:5b:e7:88:f0:29:f6:3c:67:fa:ab:50:30:92:5d:d3:
         db:be:4e:ec:9e:80:28:41:17:12:c2:24:64:fb:fd:dd:66:ee:
         4e:73:18:17:d9:74:ce:7e:cf:45:15:a9:02:7f:ee:cc:ef:cb:
         f5:fc:df:1b:a7:42:23:ae:0c:da:9b:b6:3e:d9:44:4c:9b:04:
         ee:2b:19:46:b7:11:b3:54:f6:6f:90:83:4c:d3:74:51:cb:c0:
         11:7c:15:9d:60:56:dc:12:3e:b9:a2:a1:cd:3e:ab:a8:c1:f6:
         c7:05:b1:5a:9f:0d:6d:6e:81:98:ef:d6:d9:8a:21:1f:0f:f1:
         f2:c4:bb:88:7e:d7:58:41:14:cd:c6:86:d4:ff:c6:f3:85:31:
         bf:3a:42:48:fb:e1:20:1f:64:7d:e2:14:11:05:00:59:23:6f:
         a4:d1:ae:4a:a2:cb:63:18:11:51:05:aa:a2:4e:30:f6:6e:17:
         29:64:77:9f:54:42:35:82:3b:b8:90:2a:0e:d8:97:85:a4:35:
         a3:12:18:37:b7:b9:88:ca:24:ae:f8:2a:01:89:d9:3b:2d:2f:
         fb:d1:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:35:19 2025 by rpki-client