Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File:                     4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier:          Ls9cQh3xVOoAITavrojUPhNHUmLcTF41VoSEbwr/tiQ=
Subject key identifier:   24:55:1C:15:9F:2E:4B:E7:82:87:4A:55:71:9A:FE:37:50:90:F6:C0
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer:       /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial:       0196CA2999C579230390A17CBDFB6EC2E768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number:          0E62
Signing time:             Tue 13 May 2025 15:00:45 +0000
Manifest this update:     Tue 13 May 2025 15:00:45 +0000
Manifest next update:     Wed 14 May 2025 15:00:45 +0000
Files and hashes:         1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: yW5taDcW3trBzlEwEbsqts0vdfoLVmoKuOyHvHtLxo0=)
                          2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:29:99:c5:79:23:03:90:a1:7c:bd:fb:6e:c2:e7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
        Validity
            Not Before: May 13 15:00:45 2025 GMT
            Not After : May 14 15:00:45 2025 GMT
        Subject: CN=24551c159f2e4be782874a55719afe375090f6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:89:19:0f:e8:ec:bd:01:97:8e:8e:cd:50:
                    ac:89:d0:be:b0:cd:47:a1:79:27:90:e7:63:1b:30:
                    1f:74:79:af:ea:c6:15:bc:aa:ec:1d:d6:27:3a:6a:
                    33:4b:f5:72:2e:3a:44:cb:c3:85:d8:14:25:de:08:
                    c9:a7:da:3e:55:95:7e:58:d6:c1:05:30:42:10:4e:
                    e1:f8:00:ac:44:1a:1d:2e:30:95:15:c7:53:f4:e9:
                    d2:7f:b5:80:bf:cf:51:82:bd:4c:71:18:16:29:d4:
                    38:c5:f4:ce:a4:e0:ab:c8:d4:e2:99:3b:f7:bd:a8:
                    21:1f:27:20:c9:27:dc:57:e3:ea:e0:37:3c:bb:a3:
                    d3:cb:a9:7d:8a:a5:ae:a0:40:c2:77:28:90:ca:9c:
                    c8:b7:27:fd:eb:0f:82:d5:f3:4a:0a:60:84:8f:e2:
                    b4:d9:c0:83:55:54:38:d7:6d:7b:c2:f1:68:48:aa:
                    df:4e:9c:91:96:a0:0b:41:ea:38:27:4e:7e:84:eb:
                    cf:bf:e6:19:5e:dd:71:f1:fd:75:52:fd:eb:93:7e:
                    41:74:1b:c5:d8:89:8b:d5:13:30:24:14:95:87:d7:
                    1d:ea:24:e7:72:44:87:2e:3e:f9:58:7f:ac:4e:77:
                    6e:66:14:5f:fb:e7:4a:75:96:b4:ce:49:ff:b2:b3:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:1C:15:9F:2E:4B:E7:82:87:4A:55:71:9A:FE:37:50:90:F6:C0
            X509v3 Authority Key Identifier:
                keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:18:79:0d:df:ce:dd:ab:56:41:2a:ad:67:ae:2d:2d:49:a9:
         bc:b9:f8:ee:10:95:af:e4:45:d2:f6:d6:a2:24:1d:d3:f0:60:
         9f:1a:0e:69:77:f1:fa:5f:9f:3d:ce:e4:de:80:fa:ff:da:8a:
         c2:40:3a:3c:fe:ae:3c:68:47:b6:78:96:6f:4a:f6:ef:82:3c:
         bb:b0:11:63:97:73:fa:2f:8e:ab:2f:fb:ab:c4:68:4a:51:d7:
         b4:df:9f:fd:ac:20:41:ca:07:d9:cd:c7:0e:d3:19:1e:b2:c5:
         d0:e7:6a:11:ef:32:98:d6:95:1c:9e:ca:bb:95:47:1c:b2:76:
         97:63:bf:c5:d3:55:78:f4:a4:ed:7f:ef:51:b6:63:be:0a:a0:
         9a:cf:61:6e:b6:f3:a1:c6:10:d6:21:aa:57:ee:61:bd:29:16:
         b5:ef:2d:f9:88:b3:0e:40:3c:ca:3b:25:7a:2d:a9:31:4b:d9:
         26:d5:23:f8:ce:cb:12:cc:c2:ef:97:27:c4:cf:d7:d9:e3:f7:
         58:8e:7a:5b:ac:07:f9:98:35:81:1b:61:a2:8e:a7:9a:c0:07:
         ed:1f:52:71:8c:27:27:88:91:f1:bd:8a:25:61:7f:ea:60:ba:
         36:39:52:df:d7:07:cc:a7:9f:eb:af:c4:76:09:75:71:b7:76:
         0a:00:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:14:58 2025 by rpki-client