Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          zFNcTb1izEBtjqzPZu8E4QHbvAvHmQOU9VgIow+rUCk=
Subject key identifier:   E2:CF:3F:88:F9:A4:26:03:0C:59:76:EA:AE:20:5E:F5:0F:25:79:78
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       0196A98B97DBBD9455A04CBD1AF9B82142C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          0A95
Signing time:             Wed 07 May 2025 07:00:19 +0000
Manifest this update:     Wed 07 May 2025 07:00:19 +0000
Manifest next update:     Thu 08 May 2025 07:00:19 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: 7EOiuNTBXfyYTT99aHVu/utKCjIOUHn7+0txS9vMi+0=)
                          2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:8b:97:db:bd:94:55:a0:4c:bd:1a:f9:b8:21:42:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: May  7 07:00:19 2025 GMT
            Not After : May  8 07:00:19 2025 GMT
        Subject: CN=e2cf3f88f9a426030c5976eaae205ef50f257978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:de:e6:1b:bb:37:f3:ba:b8:a3:66:38:9c:8c:
                    6c:53:4e:e9:bd:7b:db:70:19:9d:f5:0a:9c:86:ed:
                    da:15:22:8f:f1:85:bb:f5:a8:7a:5d:70:1b:15:a2:
                    d9:f0:f2:cb:52:06:d1:83:6c:79:a4:cc:80:c5:58:
                    9c:7b:e3:5b:1c:b7:01:c3:6b:b6:6e:67:55:1f:07:
                    94:7e:27:b2:39:00:b5:36:b3:c2:9b:e4:bf:85:f1:
                    b5:b0:5f:c5:a3:87:aa:7d:b9:25:35:14:bf:74:f8:
                    4e:ef:37:f0:1a:35:84:dd:2f:7f:ab:1f:a5:9a:7c:
                    9f:3a:a2:0d:5f:b8:c9:e6:47:b4:9f:8b:20:33:8a:
                    11:4e:48:dc:b0:b2:55:7a:fa:60:67:55:b4:24:af:
                    f1:87:62:77:26:6c:21:b5:f6:57:80:c9:01:48:94:
                    63:96:97:b2:05:d5:c7:17:2c:d1:73:da:35:35:b7:
                    aa:e3:27:28:8e:cb:c7:89:fd:af:59:4d:28:ae:3d:
                    f9:70:e0:6a:50:24:7d:7f:0c:bf:56:36:63:b1:2d:
                    9d:fc:8c:c4:62:8a:52:6c:02:3f:4b:6d:40:24:0d:
                    6c:3a:99:05:80:a3:69:30:38:d0:33:d3:1a:45:75:
                    6f:4e:ae:b1:07:61:d8:7b:e5:9f:fa:5e:0f:02:8b:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:3F:88:F9:A4:26:03:0C:59:76:EA:AE:20:5E:F5:0F:25:79:78
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:56:5c:eb:d1:66:41:ab:9b:d9:c6:05:0f:a8:f9:29:5f:5d:
         a7:11:fb:cc:de:41:c8:4c:f1:0b:94:14:75:77:bd:13:0c:aa:
         90:7c:60:c8:cc:32:9e:05:c1:40:e5:f9:97:02:ba:39:5c:8f:
         1c:26:7f:b0:6f:34:e1:ab:07:6e:81:3d:ab:ae:ea:27:8c:10:
         d2:e8:4d:42:f4:2f:62:6b:6b:94:5e:6b:f1:4f:90:9b:05:f3:
         90:b0:95:e2:b3:a1:3c:15:e5:97:74:5d:e3:b9:6f:9f:3f:2a:
         62:50:16:cd:ab:b1:12:d9:8e:0d:8d:88:47:d8:57:b6:28:5d:
         78:36:fa:b8:ef:74:fb:07:0e:f6:48:ef:d3:b1:7a:63:35:26:
         06:f1:ee:09:0f:ae:c5:de:56:40:42:2b:f8:f1:a8:62:67:0e:
         0f:f8:da:c3:12:da:b8:48:71:73:cc:18:33:e6:43:d7:ee:e9:
         bf:58:5a:12:9c:62:17:16:e6:25:f2:67:2b:4a:53:db:ee:50:
         d5:97:f6:cd:cc:15:af:72:eb:dc:04:03:3a:bb:98:82:67:a0:
         b9:60:dc:4b:e6:5f:db:43:51:d0:e4:9f:b0:19:82:74:ac:de:
         b4:3d:0f:a6:ea:39:47:bb:20:ed:93:4a:de:d4:a0:90:11:51:
         1c:c2:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:50:44 2025 by rpki-client