Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File:                     Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier:          imHyw5gbvYsLRjk5RxasOpd3Zq7N3d8y83vOoN6puoQ=
Subject key identifier:   DE:B9:86:FF:C7:62:2D:D6:E4:43:C4:BB:1B:29:D4:79:6A:8D:61:1A
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       0196A352DB3529B356488C5E507871B09D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number:          05D5
Signing time:             Tue 06 May 2025 02:00:38 +0000
Manifest this update:     Tue 06 May 2025 02:00:38 +0000
Manifest next update:     Wed 07 May 2025 02:00:38 +0000
Files and hashes:         1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: yjxGBhvM+Aw6cU5CO3+MhJUrTFC/6k32/untnV3E0zQ=)
                          2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:52:db:35:29:b3:56:48:8c:5e:50:78:71:b0:9d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: May  6 02:00:38 2025 GMT
            Not After : May  7 02:00:38 2025 GMT
        Subject: CN=deb986ffc7622dd6e443c4bb1b29d4796a8d611a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:0d:39:fc:46:03:cd:a2:0c:43:ec:92:0b:
                    2f:dc:c6:ad:46:e1:49:5c:d1:d5:ec:5a:6e:0c:8a:
                    80:d4:e3:20:a3:76:93:1e:04:d9:0f:96:69:b9:58:
                    f6:85:8f:ce:06:8b:57:f7:b0:e1:f8:f4:22:91:7d:
                    15:53:ad:48:56:cc:14:25:6f:01:e6:4e:8b:b8:5c:
                    d6:30:8b:58:fa:70:35:6c:d6:66:97:a1:c0:11:44:
                    6b:54:fd:25:3d:d8:d2:1f:d8:94:5c:36:07:2c:41:
                    8b:ad:47:a4:ea:5d:fc:8b:b6:fa:74:5f:ef:93:5c:
                    3f:06:77:fa:f8:92:af:91:b5:80:e2:30:c5:57:4a:
                    49:d5:ec:45:79:c6:95:4f:24:0f:7b:ed:07:94:10:
                    8e:29:d8:df:de:08:cb:a8:ef:a4:27:96:f2:be:8e:
                    29:10:aa:71:71:18:b6:0b:6b:42:56:ad:85:f4:4c:
                    d2:6f:2d:9a:2b:ca:30:ea:cd:ce:55:ef:f3:67:1e:
                    9a:d1:9c:14:79:fa:3e:4c:6b:ad:30:09:af:37:f3:
                    eb:9d:51:79:19:ba:d0:10:15:65:05:74:26:bf:cc:
                    50:59:c3:97:f8:8d:4e:b3:23:09:9b:51:74:e1:e3:
                    4e:7e:fe:a6:29:9e:27:44:f0:08:b5:2a:ea:6b:33:
                    c3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B9:86:FF:C7:62:2D:D6:E4:43:C4:BB:1B:29:D4:79:6A:8D:61:1A
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:73:0b:82:a3:47:1a:02:60:0d:df:0a:0a:44:c6:d0:35:a0:
         bd:03:e1:3a:92:90:8f:01:a8:3e:02:95:e3:98:38:14:90:0f:
         df:f3:63:e3:31:8b:4f:05:da:13:12:4e:46:ed:04:36:fe:14:
         4d:32:95:12:c7:2a:91:08:b8:cc:c8:38:39:68:10:fe:75:2f:
         76:e4:c7:b7:f8:91:57:80:24:64:20:b1:fa:06:ed:14:1e:5d:
         a2:00:58:b8:7b:79:69:99:ce:d8:c5:bf:a9:ab:57:a1:9c:62:
         59:fe:f0:26:21:7e:bd:f0:03:0b:d5:0c:84:dc:73:f2:26:51:
         23:b0:f1:50:19:dd:5e:42:26:96:01:fa:e8:91:21:ab:d5:74:
         58:bb:88:e0:a0:58:29:64:8f:4b:a0:e3:15:64:a7:9c:d9:65:
         bd:ec:c0:91:d3:76:6d:a8:bb:ce:00:9a:af:0c:e9:bc:a0:3a:
         a2:eb:b9:d7:06:53:31:67:ec:99:6e:a6:73:78:cc:0c:1e:21:
         2c:e8:75:54:29:3c:a3:17:d4:21:2f:02:cd:54:c2:f6:fc:9e:
         84:7b:4e:4e:ed:73:c1:d8:f1:cc:2a:df:f5:ac:fa:8f:a6:21:
         dd:a4:15:7f:6c:10:1e:48:0e:04:f0:e9:b0:cc:ba:02:b4:0a:
         a7:27:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:14:34 2025 by rpki-client