Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File:                     5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier:          6NdxDFN74VCCVgCKRmYFYvhnKBfBd8++9Za6FrPBYEY=
Subject key identifier:   AE:67:A2:8A:BC:7E:4E:94:1F:2B:CA:99:CE:3F:F8:84:C4:B0:09:5D
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       0196BAED723BC8B9C34DE793C5D6C8CEFE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number:          15AD
Signing time:             Sat 10 May 2025 16:00:45 +0000
Manifest this update:     Sat 10 May 2025 16:00:45 +0000
Manifest next update:     Sun 11 May 2025 16:00:45 +0000
Files and hashes:         1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: yX4sdSbW6lWedNTy5JHFigZQKBbDpBLZZTgtYyzN4lQ=)
                          2: SXG-e2hHIIAl-yj4qBi6FUi9wGY.roa (hash: +fTL7yItTRc/AAESJMlIEyzwJCD39qE6Ysoda7xR64c=)
                          3: mKq_xfX4GR_sRnKxaF_Jb4hVjPc.roa (hash: IBzPrlYvpdl22I7A6wpS6qZk+JSBkD6G1y12ddxaVGI=)
                          4: w7Fbo3W0AkoJQABo1dgJ37JPic8.roa (hash: gD8RrhuF7+lyzMsNkWMV653nJuELIlwIESwEiuq+hP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:72:3b:c8:b9:c3:4d:e7:93:c5:d6:c8:ce:fe:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: May 10 16:00:45 2025 GMT
            Not After : May 11 16:00:45 2025 GMT
        Subject: CN=ae67a28abc7e4e941f2bca99ce3ff884c4b0095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:6d:f0:85:97:cb:79:94:43:50:c1:7c:1f:
                    f2:43:14:5d:22:80:eb:cd:99:95:c2:bd:d1:45:90:
                    8f:bb:70:e1:90:3f:b3:70:9e:a5:13:a8:81:4a:53:
                    08:ea:7c:3c:7e:a0:3c:c4:f6:af:b6:1b:7d:8a:b3:
                    e6:39:23:22:6c:cf:f8:5a:99:f2:e0:4a:ed:e9:3a:
                    e3:fb:a3:7a:6c:f4:aa:2d:5a:34:73:57:69:c4:08:
                    81:1f:fb:e3:cb:ae:10:85:b9:1f:fa:2a:6a:b5:32:
                    85:e4:34:be:42:e7:2b:94:f9:d6:7e:f3:9a:53:88:
                    6d:1e:10:1d:77:87:1e:d8:9a:5e:90:de:9c:60:6c:
                    0e:64:df:6a:1b:5d:fd:9d:fc:57:e4:4d:6a:34:46:
                    bc:e8:95:64:e5:84:0c:d3:ea:39:15:f2:ca:25:73:
                    9f:58:cf:93:ee:b6:4e:20:d4:a3:5e:52:03:58:18:
                    ba:77:d6:75:ba:f1:bc:e8:00:4a:2e:66:db:1c:ac:
                    6c:e3:66:47:82:9c:c3:96:1d:38:ec:6f:75:54:a8:
                    57:51:b1:ff:18:fd:5e:76:fe:49:51:33:ae:6a:b9:
                    27:52:4a:90:a3:be:30:86:91:63:36:c2:6e:f2:ae:
                    ca:86:6f:a3:7e:2e:40:2e:cb:9c:37:6d:19:0c:d2:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:A2:8A:BC:7E:4E:94:1F:2B:CA:99:CE:3F:F8:84:C4:B0:09:5D
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:08:c5:30:6b:c6:ca:cc:8a:2f:8b:5e:ee:25:99:89:ce:
         31:0c:bd:23:84:e8:b4:d1:08:93:16:b3:e1:da:2e:2d:15:1b:
         d1:df:02:3e:dd:39:7b:97:90:80:98:69:53:84:b7:cb:d7:39:
         26:95:f2:ac:e4:33:5e:23:34:b2:f6:4b:54:4d:41:7e:77:f8:
         0a:b7:81:09:f4:5e:65:97:57:4e:9f:90:b9:79:67:f4:8b:85:
         67:97:d7:8d:b4:d7:a7:e4:35:1e:80:5e:91:bb:3d:d5:92:8a:
         67:d6:96:a1:29:1d:15:79:b5:d6:5b:47:34:73:8b:2c:71:0e:
         85:32:f3:69:ee:ac:81:d1:21:b6:13:a7:f8:f5:12:d3:83:1c:
         d3:8f:af:76:19:65:2c:8b:69:3d:f3:54:1b:9c:5a:71:15:0b:
         39:41:2f:a5:75:03:cc:8c:bc:4c:d2:95:41:11:e8:95:7f:4f:
         86:36:69:7b:16:64:66:67:f4:43:29:96:37:b2:1b:0e:71:37:
         50:51:cf:ab:41:76:4b:ef:db:dd:e1:ac:7e:df:01:dc:0f:ff:
         c5:22:38:c7:05:70:9e:c4:e3:3f:8a:2a:6a:ea:e9:ef:56:db:
         1b:43:c7:61:60:94:de:b4:b1:6d:d3:e2:91:92:f7:a8:39:3b:
         a2:19:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:53:27 2025 by rpki-client