Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          mdpKbLtoDxgnfbzEW9KitJN0iO/OwZhj9c0qNwxrbmE=
Subject key identifier:   06:CE:A2:1F:44:78:38:7C:C7:12:5D:4D:ED:44:7A:B4:C2:24:B6:9F
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       0196C42708DE79D02513E61EF4FDF355A97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 11:00:14 +0000
Manifest this update:     Mon 12 May 2025 11:00:14 +0000
Manifest next update:     Tue 13 May 2025 11:00:14 +0000
Files and hashes:         1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: 66dvz8E9VaaeJV2Z6BUjT7EQ7U0xnM91bGqDxdhs4fc=)
                          2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:08:de:79:d0:25:13:e6:1e:f4:fd:f3:55:a9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: May 12 11:00:14 2025 GMT
            Not After : May 13 11:00:14 2025 GMT
        Subject: CN=06cea21f4478387cc7125d4ded447ab4c224b69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:7d:e6:69:86:e7:80:02:32:51:7d:2a:6d:
                    e8:b7:91:b1:ca:36:2c:ce:26:a0:a9:c3:35:4a:d8:
                    e0:e7:3c:c3:ed:4c:a5:d6:45:ee:9c:de:26:f2:dc:
                    fa:c5:85:58:69:3b:e6:5a:b2:8c:aa:bc:75:e3:5b:
                    7e:a0:9b:2c:72:5b:6a:2c:20:9a:fd:e4:2a:24:8b:
                    f3:c3:50:f0:db:89:82:66:78:ed:99:35:82:5e:59:
                    d4:47:ac:d3:32:12:b9:e8:00:11:bf:11:3a:5d:3e:
                    60:da:c1:fc:c4:da:cc:af:bb:ae:95:39:72:59:43:
                    28:3a:ca:58:6c:70:57:1d:a6:a8:35:63:7f:ec:eb:
                    6b:fb:41:94:27:a6:05:4f:89:74:54:5a:0b:28:77:
                    ff:07:7d:f5:7a:7d:42:8d:1a:12:67:98:89:68:e5:
                    5b:9b:af:a2:ab:8a:bc:9a:fe:68:de:b2:f2:1f:34:
                    e6:a4:a9:76:32:71:ec:1b:dc:8c:6f:2a:00:0f:22:
                    31:66:55:38:74:e8:be:ee:b5:c8:2c:58:7e:e4:d2:
                    1d:ad:9c:20:bc:56:a4:fd:1b:d7:c4:20:d0:16:61:
                    a2:b8:39:3a:4f:6f:32:aa:35:98:3f:d3:1b:1a:7f:
                    b8:13:2e:40:25:1d:f1:13:01:b6:03:cf:6c:1e:8a:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:A2:1F:44:78:38:7C:C7:12:5D:4D:ED:44:7A:B4:C2:24:B6:9F
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:e2:d4:95:68:09:25:73:32:65:d3:38:76:91:14:8e:47:
         a7:c1:f9:71:bb:bb:f4:f3:91:e5:73:b1:4c:a9:59:ea:36:05:
         16:ef:54:ea:b9:93:83:7b:c9:a0:28:ab:97:0a:e0:e4:2c:86:
         bb:4b:58:04:c0:84:a0:bd:2e:6f:5d:48:bd:5d:ab:a0:3b:e5:
         c2:9d:0f:dc:aa:86:fe:45:86:be:b4:81:5b:ef:ba:60:15:6a:
         71:ff:70:c4:76:50:08:06:65:54:c6:73:94:0a:5c:67:72:2d:
         9a:73:00:ae:88:7f:02:a9:0f:a4:82:b4:ef:ca:2a:9f:58:a2:
         4a:8a:fe:28:97:64:85:c4:63:c2:9b:eb:2f:13:90:38:b1:cb:
         a5:26:ca:88:e6:72:7e:bd:1c:bf:6a:5b:65:c8:e3:ec:bb:2b:
         fb:9e:0a:79:41:a1:23:63:aa:eb:78:ab:ce:86:f4:5a:8e:a2:
         fc:05:b2:28:2b:0f:d6:24:91:77:2f:32:7b:4e:63:2f:78:93:
         35:ff:48:94:a3:e1:64:a2:13:3b:94:4c:7b:ee:bc:64:9f:b2:
         45:38:8c:25:67:c1:95:c2:20:61:33:7a:da:0d:a5:27:a2:3f:
         2b:d2:a2:ee:6f:d2:fc:90:c2:e2:66:31:d5:05:5f:aa:5f:11:
         85:45:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:42:31 2025 by rpki-client