Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          zkhO+ZXLXOvda+XnkvoXvbtIzWE5/C0PYqsRbo1qP+I=
Subject key identifier:   C2:BC:E5:C5:72:06:CA:30:BC:D1:83:A9:1F:DD:0A:0E:7E:D0:50:77
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       0196BD124B222718524C54536A294D4A1D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          056C
Signing time:             Sun 11 May 2025 02:00:14 +0000
Manifest this update:     Sun 11 May 2025 02:00:14 +0000
Manifest next update:     Mon 12 May 2025 02:00:14 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: vMeprQu50LQv0EgKOrDW3ymSeZ0SlOJ81lkght3BRKA=)
                          2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:12:4b:22:27:18:52:4c:54:53:6a:29:4d:4a:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: May 11 02:00:14 2025 GMT
            Not After : May 12 02:00:14 2025 GMT
        Subject: CN=c2bce5c57206ca30bcd183a91fdd0a0e7ed05077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:c4:8f:c6:8a:8e:c9:df:21:05:ed:1d:36:
                    20:aa:23:41:5d:21:b8:99:06:f2:e6:d7:37:70:6d:
                    bd:85:96:97:18:dd:5c:df:e5:bb:c1:4f:39:66:f0:
                    d2:18:29:48:70:a5:98:e8:f7:1d:a3:dc:d5:29:2b:
                    e6:00:b3:78:df:cc:db:09:ac:bc:b0:1f:f7:83:40:
                    4c:84:c8:9a:71:3e:81:49:e2:0c:40:d1:22:ed:12:
                    43:b6:fe:3d:b0:75:c6:41:4e:59:37:2e:1b:59:76:
                    41:26:38:85:2f:60:8e:38:83:0e:4d:a4:70:db:08:
                    76:c4:6b:90:64:25:a0:98:93:8e:7d:5c:32:c5:00:
                    84:31:2e:03:70:45:fc:e6:12:af:38:ba:d4:85:22:
                    8d:f2:06:6c:8e:57:d8:c5:d7:a0:fc:95:d1:62:9b:
                    d5:e1:58:a4:44:ba:e0:ca:3f:45:c2:ea:55:9d:02:
                    99:3a:ad:2f:fc:aa:7c:87:96:5d:31:5a:11:cd:f2:
                    f4:1d:20:01:7a:00:9b:5c:9a:45:12:b0:56:32:c7:
                    9c:d4:ae:10:5b:4e:bf:ec:d6:01:36:71:ae:ec:73:
                    6e:35:e8:f8:f9:85:40:08:a4:99:d0:64:59:ee:c3:
                    3c:22:65:31:05:5b:c8:31:a3:30:cd:b2:90:b0:6c:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:E5:C5:72:06:CA:30:BC:D1:83:A9:1F:DD:0A:0E:7E:D0:50:77
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:de:34:47:20:58:0f:80:b3:83:47:2c:bc:96:35:69:a7:d6:
         7f:1c:a0:73:4c:3e:da:6b:e6:8a:18:38:f4:66:e1:a0:3f:96:
         04:70:d9:98:c9:af:ca:08:c7:9c:57:61:a9:d9:c4:54:aa:87:
         04:dc:d8:9f:f9:99:6a:0f:60:f4:ef:b2:38:80:24:22:1a:b2:
         dc:cd:f9:9c:58:e9:5e:09:df:c7:06:1d:90:dc:0f:f4:74:f4:
         66:a2:91:7a:72:a8:81:b9:ad:65:c0:61:b6:9d:95:b9:ad:91:
         46:2d:1d:f4:a1:e2:ed:9f:53:1c:b2:e1:95:52:cf:14:cc:37:
         07:61:b9:83:af:21:85:6a:42:3f:f8:1e:83:d1:5c:60:2b:13:
         29:48:a9:6a:7c:40:c0:7c:e8:2d:05:db:6a:7f:61:71:d6:d5:
         ce:87:4b:4e:b7:bf:54:9f:7f:40:7e:25:a4:eb:62:30:15:6a:
         fd:f3:02:3a:12:7f:4d:0b:63:b8:47:e8:09:a9:4d:24:00:71:
         48:c1:4e:25:60:d2:da:55:4d:3a:45:a9:f3:b8:1f:cf:4a:2e:
         32:42:7b:4e:0e:b6:54:35:4b:5e:f9:3a:35:ff:9c:5d:ce:a2:
         d5:77:b0:dc:fd:01:36:cb:7c:a1:7e:50:34:b2:d7:ed:c7:1d:
         03:5e:ee:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:33:35 2025 by rpki-client