Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File:                     4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier:          FbDo6HyPefGp0Wwqc4ANXd2RtjkkV/wFmyjQRWKloDA=
Subject key identifier:   5E:A3:C3:04:B8:43:20:17:2A:85:D1:20:28:DA:79:C0:25:EC:7B:94
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer:       /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial:       0196B93574802D9D3E37F4F8768D49F6F13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number:          0B85
Signing time:             Sat 10 May 2025 08:00:10 +0000
Manifest this update:     Sat 10 May 2025 08:00:10 +0000
Manifest next update:     Sun 11 May 2025 08:00:10 +0000
Files and hashes:         1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: 59CkccVRwt//4lm5CTDhXH3F7tR+WyuBOiUR8mpH/Mg=)
                          2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
                          3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
                          4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:35:74:80:2d:9d:3e:37:f4:f8:76:8d:49:f6:f1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
        Validity
            Not Before: May 10 08:00:10 2025 GMT
            Not After : May 11 08:00:10 2025 GMT
        Subject: CN=5ea3c304b84320172a85d12028da79c025ec7b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:0b:f6:26:e4:5c:c4:5e:3f:f5:16:17:23:
                    2f:5b:b2:d3:66:9e:76:ae:87:bc:f4:7a:00:17:15:
                    ae:09:a1:9e:20:4c:e9:3f:a8:c3:07:aa:71:14:52:
                    fe:76:b0:f8:38:a7:62:2f:73:d3:34:cd:f4:79:b5:
                    38:01:62:e2:4f:e5:d6:64:5b:3c:56:68:3a:89:49:
                    9d:57:74:43:f6:a5:a6:6c:5b:b5:f1:48:7c:c8:26:
                    5f:ad:61:dc:1d:90:29:f4:92:a7:9d:d5:2c:02:cc:
                    bc:df:2c:99:98:9d:97:22:f5:b2:86:80:23:ba:b8:
                    3a:a7:13:60:61:a7:1a:d1:c5:2f:23:87:f3:55:b1:
                    cd:2e:80:c8:bf:c6:2c:2a:f7:a2:f6:6f:fb:41:33:
                    8e:8b:07:d3:57:74:87:25:db:5f:08:e2:5e:f6:b2:
                    1f:9f:8f:e8:e8:27:47:fa:9b:97:0d:f2:66:a0:b6:
                    4a:83:53:06:3a:ed:fd:84:d9:5a:57:a2:2b:8d:9d:
                    d3:56:32:b2:24:63:bf:47:34:84:34:0b:49:d0:0e:
                    c9:b1:9a:7b:5e:d1:9a:20:e5:5f:1c:d6:73:50:25:
                    c9:36:3d:57:a7:59:3e:9a:06:79:86:28:33:59:32:
                    f9:ae:b7:48:5b:7f:6f:27:b0:db:22:8d:ff:7a:1b:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A3:C3:04:B8:43:20:17:2A:85:D1:20:28:DA:79:C0:25:EC:7B:94
            X509v3 Authority Key Identifier:
                keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4b:0f:94:65:f9:2c:11:ae:5c:1a:ed:ca:7a:ba:bf:ad:d5:
         1e:94:b4:c9:82:22:b0:91:9c:2a:0d:f7:dc:3d:5f:0e:19:5e:
         4a:55:53:18:17:f0:92:db:27:68:c6:c8:d6:e4:df:89:1b:68:
         50:79:d1:31:7f:79:eb:4c:cc:d3:b6:8e:6c:7c:4c:81:9e:87:
         5f:3b:ed:21:9f:50:35:b7:ab:4d:03:54:4c:9e:ea:1a:50:c9:
         85:d8:39:68:04:38:8c:5b:a5:dd:c6:ae:93:d6:86:02:7e:7f:
         46:4e:ef:78:f3:30:f7:93:ce:1a:2d:30:a0:b9:d7:93:fe:66:
         5b:8a:da:5d:a0:a6:a8:f9:d3:77:3d:f8:1a:02:a2:4a:c9:31:
         fe:b9:30:55:7e:2a:3c:9e:b6:21:8d:e8:4e:fb:05:4a:20:8c:
         cb:c2:46:9e:a2:0e:6b:2e:43:94:6c:3d:1c:18:8c:06:13:6c:
         dd:4c:56:0f:01:e1:9e:72:54:eb:14:b0:da:37:c9:ef:29:87:
         89:cf:5b:96:59:5c:0c:27:0c:06:d7:b2:06:cd:f8:44:86:ed:
         19:4b:e9:17:83:54:ae:6e:13:68:9b:45:80:4e:a5:0e:4a:0a:
         49:8a:e4:32:35:e4:c7:a6:f7:cc:ed:d1:f9:99:6e:ac:b3:ed:
         b1:18:37:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:41:27 2025 by rpki-client