Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File:                     5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier:          p3Pymctla8ObzMxjTcw9USEegzLVxuM9F98HIOkNWyk=
Subject key identifier:   00:1A:F7:ED:11:3F:00:1E:95:03:7F:52:DC:CB:54:6A:17:3D:23:5A
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer:       /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial:       0196A465C2AEA70AF7B50EA5D0A666FD877B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number:          0B15
Signing time:             Tue 06 May 2025 07:00:54 +0000
Manifest this update:     Tue 06 May 2025 07:00:54 +0000
Manifest next update:     Wed 07 May 2025 07:00:54 +0000
Files and hashes:         1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: 25bO3ygXcjTHO6Kj7lP2aTVR9DTbfr9x+GnWqJwBw1A=)
                          2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:65:c2:ae:a7:0a:f7:b5:0e:a5:d0:a6:66:fd:87:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
        Validity
            Not Before: May  6 07:00:54 2025 GMT
            Not After : May  7 07:00:54 2025 GMT
        Subject: CN=001af7ed113f001e95037f52dccb546a173d235a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:46:6f:ed:d9:c1:bd:8b:69:38:04:fb:44:
                    85:bb:b9:d5:7d:f0:7b:91:26:fb:e5:5e:2e:90:9c:
                    de:cb:5b:cd:41:e0:04:0d:41:60:48:19:6a:af:01:
                    0b:29:31:7f:55:bb:25:aa:1a:cc:09:9f:c1:32:7e:
                    26:1e:69:d8:b5:04:87:c2:c8:d0:9d:94:f5:48:3f:
                    3d:98:14:eb:4c:07:e7:7d:9c:a5:bb:d5:70:32:c3:
                    70:cf:d4:61:42:fe:5c:4f:81:53:c9:df:4c:38:b8:
                    cf:72:83:c6:22:72:bf:5d:e5:e6:c7:d2:84:2c:f8:
                    0a:e7:d7:34:be:7d:c0:19:d1:d5:ac:14:d6:9d:56:
                    89:4b:4e:43:a7:ad:ad:80:40:a0:af:77:8f:ba:5d:
                    0e:02:98:b8:ac:1b:bd:2a:fe:14:c6:2a:39:cf:00:
                    41:65:e0:57:9f:c6:61:8e:27:fd:43:29:f7:fc:50:
                    00:99:25:3f:c8:76:99:90:1c:4c:d7:37:1e:f0:b9:
                    93:1a:9f:c6:c1:11:57:82:93:b7:12:f5:44:c0:e8:
                    c0:3b:f1:2c:00:80:a6:5d:f9:c9:c6:9d:7f:17:5f:
                    2b:9a:1c:dd:70:16:32:45:ff:17:c0:81:cd:c7:d0:
                    a2:a3:2d:79:cb:6f:3e:35:87:fc:c7:cf:ee:d5:f1:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:F7:ED:11:3F:00:1E:95:03:7F:52:DC:CB:54:6A:17:3D:23:5A
            X509v3 Authority Key Identifier:
                keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:87:69:d3:3e:39:35:09:3e:51:f9:9e:01:9d:42:36:a3:f4:
         d4:2c:1b:c1:87:5d:ce:b8:03:a9:8e:c6:f4:5f:57:86:9d:e1:
         0e:ac:bb:d9:91:17:8e:52:be:fe:1d:18:2e:6c:1f:23:df:5c:
         6b:6b:5b:d6:84:02:c6:18:51:30:41:23:d7:d6:4d:19:a4:ae:
         1f:65:bc:03:3a:1b:56:1c:19:56:d2:bc:8b:d8:55:d1:e8:ed:
         e6:93:5b:2a:01:0f:a6:bb:f8:b1:4d:1c:22:c4:99:7b:74:3e:
         e2:a8:c3:d3:a7:95:c9:06:a6:8b:17:9b:0a:db:82:83:3b:8c:
         49:30:be:a4:bd:4d:52:63:08:4c:aa:0e:f4:bb:1d:c4:4c:25:
         24:51:f9:2b:8c:85:c4:2d:ab:e2:66:b1:1f:8d:88:a1:c2:31:
         58:fe:ed:60:ee:b0:5a:e8:2c:fd:1d:50:dd:f7:9b:14:82:b9:
         4a:ef:9f:d2:08:00:f4:ac:09:ea:50:d5:83:41:e7:3b:ab:25:
         e4:84:71:f8:6b:2c:58:5e:af:76:f4:b6:da:c2:a6:2c:c7:42:
         cf:6c:d2:dd:3b:9f:33:ef:f4:64:05:eb:f5:de:a4:54:47:01:
         fa:56:98:f6:d2:a3:eb:0a:c5:c8:b0:a9:40:79:c4:51:18:5e:
         10:4a:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:43:42 2025 by rpki-client