Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          JIunAsfn9IyBuVDBauZa9uKuPDRIfGDD6rSdG+UhCjk=
Subject key identifier:   52:EA:14:7E:AA:E1:58:A9:07:12:82:3C:83:DA:43:C0:8C:47:89:48
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       01969E6355948C115D30D8FBC528D46E590A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          144D
Signing time:             Mon 05 May 2025 03:00:32 +0000
Manifest this update:     Mon 05 May 2025 03:00:32 +0000
Manifest next update:     Tue 06 May 2025 03:00:32 +0000
Files and hashes:         1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: DIPry9ugAksrFo2LJVFQl1uE5MxgniGnWSFSeZZ4q1o=)
                          2: 8vBjC53BVW8zj4fBkE3UHTZwiNk.roa (hash: 1PeNucpAjZUP2ujHYN11UYlssoeYcm9jeCslEET3UiI=)
                          3: 9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa (hash: aMPoo7LYnaS7eWYIaQDX/Es2RSQYrk3CqkkwnLvbGQ8=)
                          4: UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa (hash: KrGL3wXFY6k1GlYSZENHPy6IRLA8cwbf0xkJCypiFE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:55:94:8c:11:5d:30:d8:fb:c5:28:d4:6e:59:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: May  5 03:00:32 2025 GMT
            Not After : May  6 03:00:32 2025 GMT
        Subject: CN=52ea147eaae158a90712823c83da43c08c478948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:9c:4d:18:c4:d2:24:98:75:04:04:51:f4:
                    70:7b:de:b3:d3:28:2f:43:1f:e6:b0:c4:06:a5:bc:
                    db:9b:88:0d:1d:f3:11:36:a0:6a:98:94:2e:58:c9:
                    c8:0e:8e:f8:a2:b2:fc:92:21:54:08:a7:b8:d5:f5:
                    b2:f7:5a:e6:0e:a1:a2:37:c8:f2:c0:52:4d:83:47:
                    81:1f:57:aa:f0:e6:a3:e2:6d:6c:12:e0:73:69:e7:
                    2e:ab:a9:92:42:fe:42:be:6c:b3:9f:72:31:9c:24:
                    c5:4e:bc:e7:b5:f4:61:57:1e:ec:c0:47:c4:0c:c8:
                    6c:45:29:ae:f3:b6:a8:53:54:a1:e0:80:15:12:52:
                    84:aa:ce:58:84:46:0d:b5:46:be:3a:0b:95:e3:b2:
                    84:2d:b6:65:f1:0f:e8:ac:6b:c9:92:8c:b2:ca:f4:
                    74:4e:fb:cd:e3:00:02:dd:fa:30:5a:ba:ea:af:a2:
                    68:3b:9a:70:cd:ba:79:eb:ce:cc:60:9c:76:8d:73:
                    c5:55:60:3a:9b:0b:54:4e:19:71:2b:e8:c5:93:3c:
                    8c:bb:94:ee:11:3a:02:14:00:1a:60:a5:49:7e:99:
                    32:1d:b0:77:aa:e3:26:12:a4:6b:80:fb:0b:25:11:
                    42:62:a7:97:c0:4e:d9:d5:0e:58:2d:d4:00:fb:e0:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:14:7E:AA:E1:58:A9:07:12:82:3C:83:DA:43:C0:8C:47:89:48
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:af:4e:25:86:10:c8:71:92:79:ee:c6:c3:db:2f:19:7d:39:
         2a:d3:8e:67:af:f4:47:61:32:49:39:08:14:fb:86:f5:89:bc:
         fc:ee:95:1f:41:9c:68:2d:78:eb:35:38:32:22:7f:23:98:ea:
         5f:ac:cb:09:05:3e:38:5a:26:e3:64:0e:5b:b3:ef:e9:01:53:
         0a:46:a8:96:48:6c:b3:47:32:16:c8:58:de:fd:7a:de:ee:e0:
         a7:73:1b:96:81:3a:9e:8d:40:57:58:0e:37:f8:f8:af:b3:03:
         da:bc:08:cd:f2:b1:d9:fb:47:bc:dd:94:0a:de:80:ba:a9:8b:
         c2:f3:67:37:25:dc:46:e1:af:5d:ff:41:6d:8a:bd:cb:79:6d:
         d7:66:3e:2f:a8:f2:87:d6:2a:90:b4:6a:f4:b3:3a:d1:9a:4a:
         63:e3:29:0e:81:f1:53:21:08:da:8c:72:e5:c3:bb:56:73:69:
         16:da:63:5c:f5:db:1b:5c:17:66:99:67:66:39:c2:63:c6:24:
         82:5f:9e:9e:b3:a9:91:5b:c1:38:75:0a:af:04:22:ff:e5:7b:
         a2:23:ba:a6:26:b4:e8:37:2c:bc:27:54:3d:38:de:44:60:8e:
         19:aa:ed:96:29:fa:2c:18:04:ec:f5:79:cf:0d:1e:76:aa:8d:
         94:82:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:29 2025 by rpki-client