Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          0+x+0CveOFPWcjn8lY90N/ZHH4Xh+UpIr6tBOCg2WAU=
Subject key identifier:   C4:7A:28:EA:3A:93:94:FF:69:E3:0F:6D:63:1B:DE:90:12:92:A4:4D
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       0196A7D48E8F0C6614062CAB724DAFD84C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          16
Signing time:             Tue 06 May 2025 23:00:47 +0000
Manifest this update:     Tue 06 May 2025 23:00:47 +0000
Manifest next update:     Wed 07 May 2025 23:00:47 +0000
Files and hashes:         1: Akp64JiXPw5xx332GRuPYCJ0yv8.roa (hash: q7vqZf3IzcgIJ116RXxXJ/Ot8N/TeIRTFA1YSdhKd28=)
                          2: FJ0LM5QkppmLkXmvBjJZbmHVnO4.roa (hash: AH4wLU/NNdSpA7PMHLLsRZ3gLPqLHQmT2fjdQWziC7U=)
                          3: OxbzZfM6eGBMt2Htfc8iTcB4FN8.roa (hash: w1BjLiiHXRTy1vzGjVBzhW5JGL5CFVx5GG/RTsxjdb8=)
                          4: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: 2gr7mT/yXAI/JK4Nyori445Iku/TQbjXmDSpfHbIOYQ=)
                          5: e69yRF9jq0kvATS93UMuU5k5MTM.roa (hash: KVuts8b6pLhMq8tSReMcp0sFF3h2CtSVlkwmP/Jy2SU=)
                          6: fkPctyPmNa-jHOMFlt54MEYI4-Y.roa (hash: kbI+XVxVhIkvFoyf5y5abPuJl3WbFcY/24KPezeLpg8=)
                          7: w844XuOWS4xgJaWU6wBqPuGGD6o.roa (hash: tkcsSjMgVKJnfMPG05Bnsj+h7R5KnTqnGHAZs+sMyGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:d4:8e:8f:0c:66:14:06:2c:ab:72:4d:af:d8:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: May  6 23:00:47 2025 GMT
            Not After : May  7 23:00:47 2025 GMT
        Subject: CN=c47a28ea3a9394ff69e30f6d631bde901292a44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:cf:83:24:b9:35:fb:55:61:95:f6:c0:3b:
                    77:c0:3b:34:48:23:e0:61:25:22:52:6d:36:45:da:
                    b7:7c:ab:a6:24:b3:50:fd:03:c6:31:e3:4b:be:eb:
                    db:96:d4:db:20:17:67:b9:37:48:71:76:03:0f:b8:
                    23:4b:e0:22:54:d3:9e:75:51:74:8a:f9:0d:d6:1c:
                    ea:dc:95:4b:ef:dd:f8:ea:2a:13:cc:ff:d7:7b:82:
                    db:ce:66:9d:ed:a8:be:eb:bb:91:62:ee:80:0d:26:
                    06:4f:e8:11:dc:ef:59:4c:c5:f4:09:12:7c:d7:ac:
                    08:83:4e:1d:9d:5d:1f:6b:f8:75:02:71:aa:23:83:
                    8d:63:51:30:61:db:38:90:ee:d6:2b:18:09:39:fa:
                    9d:6c:25:c9:1f:a4:c8:f0:06:03:2b:f5:93:c1:94:
                    36:17:cf:40:ff:ed:fe:fa:6c:46:9a:2a:cb:ee:52:
                    57:5d:22:ed:b6:54:cc:ef:c1:87:e6:a5:18:f6:a8:
                    2c:9b:83:ef:d0:e0:68:cf:b6:71:47:63:4f:8c:4d:
                    2b:d9:ac:a6:03:b4:57:d5:e1:62:71:f8:04:d6:a5:
                    6e:19:6a:20:0b:3c:43:86:45:eb:f2:bb:1a:d1:5a:
                    2a:c6:56:5a:cf:58:47:eb:6b:5e:87:83:d4:1f:f6:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7A:28:EA:3A:93:94:FF:69:E3:0F:6D:63:1B:DE:90:12:92:A4:4D
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:44:e6:d8:46:e2:be:c4:ed:0a:a8:08:2c:52:1d:e3:40:
         f2:1b:3b:4a:0c:6c:9b:7f:f8:80:41:b3:75:09:54:b3:1f:d0:
         a1:9f:24:b3:a8:55:5c:68:ca:58:6a:2e:bf:7a:9e:f5:99:64:
         f3:2e:33:a6:42:56:47:36:54:82:f3:0b:28:ce:71:34:85:44:
         70:fb:aa:30:76:04:85:27:c7:af:9f:11:62:53:5a:7d:ae:aa:
         f5:54:43:0f:62:02:0d:f7:52:d5:a3:21:f8:9c:11:36:4c:07:
         93:af:ac:9f:ab:f3:f8:2b:e1:ca:51:4b:21:27:f7:0b:95:16:
         ae:34:7d:2d:ba:10:ac:82:9c:ea:c2:ac:9a:60:5b:1c:a5:1b:
         7a:b4:68:dc:60:55:b9:91:3e:04:29:ec:56:55:6b:5f:3b:b8:
         31:e1:3f:69:b6:c6:64:86:4c:43:73:60:59:2c:88:f4:ec:4b:
         8c:06:11:43:7a:c6:56:34:24:c1:36:03:cd:5f:a1:69:ac:bf:
         87:31:43:45:c0:d4:1d:81:ef:ba:d0:0d:78:37:d2:e6:53:6d:
         46:4d:e0:57:09:4e:71:9a:a9:c8:8e:7d:6b:ec:4e:a1:c5:82:
         01:7b:a0:be:d4:63:ab:c5:4f:17:da:aa:e5:67:94:c1:88:ec:
         59:de:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:06:22 2025 by rpki-client