Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File:                     5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier:          GyOYus+nPkXWMW0H8faq4Y65yaRSWbizc3nMGUfCsyU=
Subject key identifier:   33:FF:AC:C0:A5:AC:A6:1D:A2:5E:B2:ED:BF:B3:C5:A7:53:96:15:94
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer:       /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial:       0196A46645D71613C115B4C21AD405A33994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number:          0759
Signing time:             Tue 06 May 2025 07:01:28 +0000
Manifest this update:     Tue 06 May 2025 07:01:28 +0000
Manifest next update:     Wed 07 May 2025 07:01:28 +0000
Files and hashes:         1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: /mQAGPteBrpeBJmIml3l69j/7vh8C3i9EGwpSip0Zlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:66:45:d7:16:13:c1:15:b4:c2:1a:d4:05:a3:39:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
        Validity
            Not Before: May  6 07:01:28 2025 GMT
            Not After : May  7 07:01:28 2025 GMT
        Subject: CN=33ffacc0a5aca61da25eb2edbfb3c5a753961594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:48:67:76:fd:26:b0:be:1f:b0:38:28:21:
                    ff:a2:dd:cf:07:9d:85:d4:4b:32:62:7a:0a:e5:c8:
                    b8:fd:77:47:fa:eb:b4:59:8f:37:3d:63:b6:9d:7c:
                    86:4f:26:99:6f:f0:5a:ed:3f:9c:14:16:0c:51:b0:
                    8f:bb:7b:be:7b:af:55:1f:9d:7d:20:21:a8:f5:09:
                    ca:55:cb:24:11:aa:f1:78:1b:9f:d5:22:92:de:34:
                    6c:2e:a8:4f:89:5e:e0:69:21:cc:e6:af:c3:68:e1:
                    26:42:e3:f0:3a:b7:ce:7e:56:ac:32:0d:a5:a2:18:
                    cc:ee:c5:e5:f4:ee:10:c2:80:8b:a5:28:c2:c1:d9:
                    b0:c7:37:25:4d:2c:6c:f9:b3:13:ce:40:2e:0e:07:
                    ff:27:df:2e:05:65:a2:05:c1:12:e4:d6:bd:66:16:
                    26:da:fb:79:62:dc:d5:36:4e:a2:c6:f8:ae:2d:d6:
                    ae:15:7a:7d:c0:fd:e8:f9:ef:57:56:be:9a:69:2a:
                    cd:5a:ba:f2:a2:93:07:4c:29:45:96:07:e6:41:a4:
                    b0:5f:a0:92:cc:9d:41:e8:dd:b9:1c:ea:33:95:27:
                    cd:c2:02:22:07:33:89:32:a5:72:1e:9b:05:24:e9:
                    05:ab:99:24:60:a4:63:15:39:86:0d:e3:03:ec:36:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FF:AC:C0:A5:AC:A6:1D:A2:5E:B2:ED:BF:B3:C5:A7:53:96:15:94
            X509v3 Authority Key Identifier:
                keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:48:2a:0a:d2:1f:1f:59:1e:84:d7:ba:18:bd:ce:ce:ef:
         79:15:23:86:6b:48:bd:c0:24:b1:ab:e1:41:68:a0:35:db:14:
         43:a2:9c:1e:e8:f2:0f:6f:36:a1:6d:77:bb:2a:55:e3:86:8e:
         b9:91:c3:65:28:3f:fe:ce:e8:d0:71:5d:80:8e:58:5c:fe:f2:
         2a:63:bb:d8:a7:42:64:10:d3:94:f6:99:cc:d6:41:fb:5f:38:
         1a:30:72:3c:38:19:c4:69:ba:7d:f2:ce:63:0e:cd:a9:3a:a4:
         52:fc:cb:c4:c0:a8:e8:4c:d4:9d:73:08:66:c0:2f:2f:cd:82:
         16:c6:24:05:10:c3:68:49:1c:13:23:58:49:2a:38:51:1d:fb:
         64:ef:e5:37:6a:2d:82:28:23:48:39:d6:e6:36:3d:c1:64:e1:
         46:2a:56:b7:93:21:a9:39:b1:2b:dd:36:1a:af:ba:e7:ed:5b:
         f7:8e:9b:a8:96:34:e5:9e:cf:52:2f:b7:55:1a:ca:ab:47:b9:
         ca:b7:a7:ed:c0:02:eb:17:07:98:a3:aa:9f:14:9a:af:3e:01:
         98:2c:e1:4d:31:82:45:3c:32:59:c8:d2:34:50:59:fc:cd:74:
         cf:01:96:e9:94:07:21:a2:e9:5c:7f:61:1a:92:29:c8:cf:17:
         c9:77:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:17:18 2025 by rpki-client