Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
File:                     zeHP7MkrEE_Pqe_saljwwZeQFlI.mft (raw, json)
Hash identifier:          b0Rd6pwzXY0iaRrCe16K0Dh4kXbd6BWFbrG/ZtpzKxo=
Subject key identifier:   48:C9:8C:51:C1:BE:4A:D3:6F:0B:8C:1A:E3:36:88:85:36:5B:0C:C3
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Certificate issuer:       /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial:       0196C98535172B81C86FE863309449B36FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
Manifest number:          04E7
Signing time:             Tue 13 May 2025 12:01:12 +0000
Manifest this update:     Tue 13 May 2025 12:01:12 +0000
Manifest next update:     Wed 14 May 2025 12:01:12 +0000
Files and hashes:         1: 1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa (hash: yS33rGnHpW6HJXuqZSuiPg2Imum1UpLaSAJvk6KL/qY=)
                          2: P1bLQZtUuJyCpYxMgBMGx1ZJUng.roa (hash: m9T9zLQ/HMGQbc2J9yvmErwcUnY6b6rs3FjEYV4pKxg=)
                          3: t5moBycZzdoljDyxSfMleeT1QmQ.roa (hash: OjS5x25lUmVQxo2WB7ZV1aQad26d91TsKsihXCHFfH4=)
                          4: zeHP7MkrEE_Pqe_saljwwZeQFlI.crl (hash: MXykbfyvG+mbtbn2urgwUxs003zCaGXC7yGX+ge5DPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:85:35:17:2b:81:c8:6f:e8:63:30:94:49:b3:6f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
        Validity
            Not Before: May 13 12:01:12 2025 GMT
            Not After : May 14 12:01:12 2025 GMT
        Subject: CN=48c98c51c1be4ad36f0b8c1ae3368885365b0cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:3a:d2:92:e4:0b:7e:c5:a4:cc:71:b0:84:
                    90:b9:0b:e3:59:d3:48:e3:2b:8f:a0:c0:25:06:9e:
                    9c:1f:88:36:94:1c:27:da:d6:d5:5b:a0:46:e6:87:
                    cf:3a:68:c7:73:07:f5:5f:97:e1:f3:0b:fe:29:30:
                    5a:bf:0b:6e:72:3c:d5:00:3e:fa:ed:b5:c3:2e:84:
                    50:df:ba:69:98:6c:6e:3e:25:71:4d:3d:47:ea:52:
                    5b:de:39:69:5c:d4:70:90:60:79:b1:3f:a5:78:e7:
                    78:0b:2c:68:75:40:3a:69:23:5f:13:d6:fd:f1:b9:
                    fd:1f:95:68:de:d8:9f:af:2d:ed:94:4b:0c:9d:2b:
                    e0:73:6c:73:ce:f5:81:70:de:21:93:61:53:5a:b4:
                    26:7b:5b:9b:84:d8:f4:3d:8c:17:6a:1e:8a:4e:97:
                    bc:8f:f8:2a:64:7e:7d:a2:2d:ef:14:c7:a8:e9:72:
                    19:c4:ca:dc:10:e3:4d:43:89:0a:ec:05:01:fb:aa:
                    7a:3c:91:10:66:4f:13:ac:36:f2:0e:98:ce:0a:01:
                    db:8b:d7:e9:07:e9:de:da:9c:38:81:80:e5:2a:aa:
                    59:46:b4:a9:9a:cf:4f:3b:c2:3b:0d:3a:fa:e8:28:
                    0b:c5:89:35:cc:25:16:aa:9a:3b:f8:f2:6e:75:0c:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:8C:51:C1:BE:4A:D3:6F:0B:8C:1A:E3:36:88:85:36:5B:0C:C3
            X509v3 Authority Key Identifier:
                keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:35:f5:d0:00:18:8e:3c:47:1b:31:92:0b:86:a6:2d:88:
         4c:4e:3e:99:31:d8:11:02:7d:c9:9c:67:fc:56:2e:19:69:ad:
         7f:0f:ef:35:b2:4d:59:a0:63:2e:3c:65:a7:8e:a0:48:ca:82:
         33:88:c5:b6:96:93:34:6c:c2:5b:65:e2:85:86:4d:5a:e6:9a:
         2d:5d:dd:37:23:a0:87:08:15:38:11:eb:47:9e:20:f9:18:1f:
         cf:3d:65:1b:31:f3:1d:97:51:53:68:aa:e6:b1:63:3c:55:9d:
         c5:eb:43:78:8a:8a:7a:89:ed:f6:84:0b:73:30:a5:bc:75:a2:
         8e:70:01:20:92:d7:ba:79:96:44:78:2b:3f:7d:c7:a9:da:37:
         93:a3:fc:bf:91:c0:70:17:38:0e:02:c6:3f:ba:5f:a6:d8:1c:
         47:f8:d3:f2:7d:64:30:d0:31:96:1d:7a:e1:01:0e:37:a5:0b:
         4a:8a:ba:6a:a9:5b:21:80:15:3b:9c:0e:ce:22:b5:3c:b5:23:
         c4:7c:7e:2b:0a:5f:68:a1:f9:cd:51:94:14:ae:3b:55:4d:a1:
         5a:54:5e:3b:75:8f:ed:50:0e:a2:ed:f3:ea:b9:91:4d:64:95:
         5b:ca:b8:54:9f:14:3e:08:9e:5c:f4:4c:7d:7f:67:a4:65:06:
         e5:f1:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:39:11 2025 by rpki-client