Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File:                     cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier:          PvjVnuKCRXlouC2mtGmuJL3GlKTgYlgBRYmQVTFvK0I=
Subject key identifier:   E4:B4:E3:0B:91:60:90:00:79:F4:CA:02:DF:33:20:05:19:79:E0:B9
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer:       /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial:       0196A68A959F37B477A3540D28A6DD5A2D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number:          0DEE
Signing time:             Tue 06 May 2025 17:00:22 +0000
Manifest this update:     Tue 06 May 2025 17:00:22 +0000
Manifest next update:     Wed 07 May 2025 17:00:22 +0000
Files and hashes:         1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
                          2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: L9LiFiBwj9giESufoUZ6AOLMu1BmSqgYFzWkc09VKys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:95:9f:37:b4:77:a3:54:0d:28:a6:dd:5a:2d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
        Validity
            Not Before: May  6 17:00:22 2025 GMT
            Not After : May  7 17:00:22 2025 GMT
        Subject: CN=e4b4e30b9160900079f4ca02df3320051979e0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:57:3c:8e:4f:6d:99:a3:1c:66:69:6d:a8:
                    b9:9c:89:c5:55:e6:aa:33:c5:57:9e:c7:43:1f:f7:
                    e7:8e:6e:90:f3:5c:61:dc:54:1d:68:fa:b8:e5:d6:
                    78:6d:cd:a8:18:18:54:2a:8d:74:29:21:ea:55:85:
                    93:73:b8:e2:a4:fd:22:e6:47:35:5c:1f:03:ce:5b:
                    70:ea:33:8f:15:47:02:3d:de:3b:4f:d1:41:d7:2f:
                    57:2f:f8:1d:e9:1f:13:b1:c3:ed:38:29:09:c0:0d:
                    c9:fd:96:1c:11:de:7a:0e:d2:43:f4:03:b4:08:70:
                    5b:6a:ce:aa:67:e0:1a:51:29:cb:25:15:a8:8e:0f:
                    98:6a:c2:43:47:1e:8d:e8:9c:5b:c2:b3:c5:4b:ad:
                    25:b0:be:b3:7d:7b:95:38:57:5c:64:88:60:5c:b4:
                    52:9a:a9:40:66:dd:29:4f:70:29:3e:82:36:65:94:
                    14:76:76:8f:a8:71:54:b0:f9:78:d3:6e:c1:61:49:
                    02:73:80:70:a5:bf:d9:d4:04:f4:29:03:0f:ef:09:
                    76:97:0e:b8:23:66:78:88:73:16:4a:0e:5e:5e:5c:
                    85:80:a7:0a:a8:5e:a4:76:b0:23:18:64:53:27:ff:
                    22:f7:f8:e9:3a:49:cb:83:3a:59:d5:e1:58:a2:1a:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B4:E3:0B:91:60:90:00:79:F4:CA:02:DF:33:20:05:19:79:E0:B9
            X509v3 Authority Key Identifier:
                keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c6:ad:82:4e:29:56:d1:d8:5b:e7:a6:8d:7e:36:c0:da:06:
         3d:66:d6:88:5b:65:92:86:39:1b:92:10:af:bc:3f:40:fb:49:
         cf:54:13:2a:8c:37:57:dc:d7:8e:1e:47:9b:9f:5b:d1:20:84:
         d8:59:cb:0e:9b:0d:5a:f8:7a:79:dd:81:13:7e:53:a6:6e:cd:
         76:61:87:2a:99:91:1a:b0:75:be:de:30:60:80:c5:a0:86:e5:
         0b:48:43:f9:0a:a3:4a:69:1d:8e:a2:15:dc:5a:cb:7f:54:70:
         fb:0a:99:9e:99:8a:6d:a0:d6:e6:37:e1:00:1e:ea:60:77:30:
         7c:6f:9e:53:9a:16:d5:a9:9c:99:de:44:1f:f6:40:84:23:1d:
         23:f0:bf:38:5b:f5:8b:06:21:97:10:7a:44:fc:79:c0:3c:d8:
         41:80:f4:f3:15:6a:14:1f:a2:6a:79:40:53:7d:bb:00:16:82:
         3d:b1:ff:a2:e7:34:62:e9:b8:45:cd:21:7c:45:97:4d:a5:4b:
         56:24:74:0d:e1:47:da:0c:35:63:2d:c7:19:73:3e:dd:c2:00:
         0f:00:5a:a9:75:3d:e1:ac:90:57:9f:ab:33:24:54:73:89:41:
         7b:5d:70:97:48:eb:bf:3b:59:fe:23:59:87:ee:fa:6d:26:a5:
         8c:81:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:56:29 2025 by rpki-client