Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File:                     CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier:          KSH7dxdWAKcyGr+M8mtCXA2v5ZIZxFg+PXPnUTvavEE=
Subject key identifier:   94:4D:EC:F1:0E:63:86:5B:0E:1E:11:0F:88:C6:E6:7D:F5:12:09:DA
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer:       /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial:       0196BA1215DBDE87CDA5F4AE63FA78A9A77C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number:          1536
Signing time:             Sat 10 May 2025 12:01:09 +0000
Manifest this update:     Sat 10 May 2025 12:01:09 +0000
Manifest next update:     Sun 11 May 2025 12:01:09 +0000
Files and hashes:         1: 0SF7pOBg_ur6TuAnhKZvtMcmyMw.roa (hash: 5nIyMEgIsmgFGVdTMcAMulKSrVsz482NfoizOY2OUOA=)
                          2: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: WCHSywijdWDoFT6Tx6VCtPdnPMSDePutOtD0nyU9ZgE=)
                          3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
                          4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
                          5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:12:15:db:de:87:cd:a5:f4:ae:63:fa:78:a9:a7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fe040242651353d556b8c4240082190f271d13
        Validity
            Not Before: May 10 12:01:09 2025 GMT
            Not After : May 11 12:01:09 2025 GMT
        Subject: CN=944decf10e63865b0e1e110f88c6e67df51209da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:14:0c:2b:34:d0:31:28:73:65:d8:92:9b:
                    33:15:10:ed:1d:75:69:7a:31:11:37:62:82:19:5e:
                    a1:36:96:2d:56:fd:9a:27:00:93:ae:32:e8:12:eb:
                    d0:1b:f2:d4:56:f2:a1:47:0e:83:ca:7a:93:39:bc:
                    c5:55:e9:54:c8:6a:9f:44:65:1a:fb:c7:f2:c0:c1:
                    e0:27:75:f3:a7:1e:48:18:ce:8d:0d:59:35:64:a5:
                    f4:b6:aa:a0:17:75:2c:fe:76:67:a8:ba:30:e5:1a:
                    cb:ae:8d:d9:09:50:4a:8e:62:6e:a2:b4:75:dd:d7:
                    aa:58:9e:5f:7f:c8:a1:29:98:54:2a:b2:99:e5:61:
                    c6:a8:10:d4:81:47:69:16:84:1f:99:d8:92:87:e6:
                    20:85:65:ef:31:41:c4:08:7a:6e:c2:44:3a:ed:c8:
                    f1:e3:5c:fd:5d:18:b0:ec:23:1c:55:bd:5f:55:57:
                    dd:e7:58:b1:5b:0f:a9:cd:4c:60:f9:4b:c9:3c:18:
                    54:26:30:16:22:b2:09:8d:1f:06:cf:e2:18:73:37:
                    c1:21:30:b4:69:fb:18:84:07:9f:23:2b:69:6e:37:
                    a0:1b:fc:3d:8b:af:45:e6:4f:21:4a:00:4f:9d:a3:
                    2a:be:81:b1:49:cd:8f:ea:67:39:32:f4:a4:8f:b8:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4D:EC:F1:0E:63:86:5B:0E:1E:11:0F:88:C6:E6:7D:F5:12:09:DA
            X509v3 Authority Key Identifier:
                keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:7c:54:39:f0:d1:80:f9:74:d5:8d:7d:fe:3f:55:56:60:0f:
         57:04:9c:4a:58:3d:37:56:bd:fc:72:43:ab:77:7f:f5:8e:85:
         67:a9:8f:82:bd:9b:97:b5:6b:30:be:8d:12:0d:9a:4b:84:02:
         80:68:53:d4:3c:65:52:c2:4e:2e:f6:e1:f0:5a:53:52:18:b4:
         ca:d5:de:d4:6f:a6:b4:db:bb:e8:f5:f9:66:c4:cd:8f:14:ba:
         f5:78:39:44:dc:74:53:35:43:b8:be:22:35:6e:3e:4c:92:49:
         e8:e9:87:21:21:ef:44:cf:67:6c:44:66:19:90:ab:6d:1e:32:
         4b:99:fa:d5:a4:97:65:a6:57:33:2d:44:94:ec:0f:f4:c1:d4:
         02:b0:93:27:5f:ae:47:6c:1e:1f:ed:46:4f:02:61:49:5d:de:
         68:6a:b5:b3:b9:23:89:f4:3b:eb:d6:ee:c2:52:fc:8a:8f:66:
         34:6e:98:42:72:09:cc:f1:f3:b7:bd:90:38:d0:a2:3e:6f:7f:
         5b:19:b0:84:ac:3d:f4:14:9f:67:32:bb:04:a8:e8:27:54:5a:
         ae:ab:71:21:09:9d:ed:79:9b:c8:1a:fb:8c:d7:4a:95:22:ed:
         6d:76:1b:87:cb:ab:4b:a3:1c:a3:da:df:9a:12:09:39:6f:da:
         5a:b7:11:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:59 2025 by rpki-client