Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File:                     eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier:          ik8FFPrHCxMsnf3P1K6v613nHOIUTEgHxmja39TgMcs=
Subject key identifier:   7F:58:62:CC:1E:8D:FD:B3:AB:F2:EE:B2:32:BC:EC:4C:18:61:4E:25
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer:       /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial:       0196C3F0E365B471E75CD3467BEE13539B19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number:          1495
Signing time:             Mon 12 May 2025 10:01:06 +0000
Manifest this update:     Mon 12 May 2025 10:01:06 +0000
Manifest next update:     Tue 13 May 2025 10:01:06 +0000
Files and hashes:         1: 87kSYonFcZwIXqn-oUHMTUjS7ZQ.roa (hash: r4G2JQElUAKaln7jVsL6rlmZ7oG6sWqE3/UqSsTnjMU=)
                          2: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: 0W14prQMc5dqt0+yxraeqf7FILB3lluMmIOb6L6Ecos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:e3:65:b4:71:e7:5c:d3:46:7b:ee:13:53:9b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
        Validity
            Not Before: May 12 10:01:06 2025 GMT
            Not After : May 13 10:01:06 2025 GMT
        Subject: CN=7f5862cc1e8dfdb3abf2eeb232bcec4c18614e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:b5:55:9c:47:34:0d:a5:09:f8:64:3f:4f:
                    6a:5b:5e:1b:4e:00:88:5b:12:22:72:3b:3d:26:1d:
                    ca:6a:99:9b:71:f0:72:2e:26:fc:b0:ae:1e:55:00:
                    ae:29:ba:26:a5:19:6d:6e:a9:92:a1:39:f6:13:1f:
                    fc:dc:85:61:74:31:5f:b2:a4:42:e9:68:12:04:1c:
                    40:46:83:c5:88:a5:dd:7a:f9:84:0e:f6:64:e6:0b:
                    ca:9b:a3:38:03:5d:70:3e:99:c1:41:81:57:06:25:
                    0c:cb:bd:97:f6:9d:36:4c:11:f9:d9:5d:2c:39:40:
                    aa:85:e9:73:4e:9d:16:fe:d6:b0:0c:63:81:aa:fc:
                    17:e4:60:27:24:e3:c6:e1:ba:bc:37:a4:20:eb:a1:
                    5e:b2:4c:a7:d9:04:fb:6e:05:55:b9:18:95:e9:9d:
                    12:b5:f8:76:b8:b5:0c:63:7f:c6:70:68:8b:f8:ee:
                    23:b9:2b:e1:33:fc:0f:2b:cb:f3:3e:f7:b9:f2:b8:
                    8f:ec:f1:8e:fc:d1:30:ec:74:83:f6:fa:48:22:00:
                    a6:71:5b:33:75:4a:af:ce:ec:18:df:0f:11:77:05:
                    3e:ca:63:d8:87:7c:14:c5:ff:fe:d7:33:e0:4f:1b:
                    bd:2c:14:cf:53:ec:5c:33:e6:11:29:c4:30:c5:61:
                    15:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:58:62:CC:1E:8D:FD:B3:AB:F2:EE:B2:32:BC:EC:4C:18:61:4E:25
            X509v3 Authority Key Identifier:
                keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:96:76:9f:24:4a:23:ef:ad:82:ed:f5:43:15:ad:93:80:
         86:70:c3:b2:e6:e9:1c:95:58:42:5c:7f:ee:6f:e8:7e:d2:63:
         4f:b6:71:5d:ab:28:e3:c3:61:97:2a:11:4f:d6:ab:0c:95:fe:
         57:71:5c:77:b5:90:5c:52:f2:b7:0d:52:8d:be:9a:17:9b:7f:
         b4:b2:e2:dd:06:de:08:7a:56:b3:09:dd:ef:a4:b9:61:21:ed:
         a8:1b:e7:6c:a6:4d:ce:48:f6:ff:81:42:4f:48:aa:67:76:a5:
         e7:b4:c6:8a:18:3e:0f:97:ad:29:62:ea:d3:7d:d1:87:68:17:
         f4:07:e8:b2:52:2e:dd:80:57:cc:d5:58:a4:73:af:ca:c0:37:
         36:94:e1:cc:0c:1b:86:b4:65:15:4a:d4:55:72:7e:bd:82:cb:
         1a:d7:db:af:95:75:c4:6d:58:8b:06:7e:4e:99:cf:b1:4d:4b:
         5a:12:af:23:f8:50:00:f3:43:0b:f0:0d:a1:af:d3:87:7a:67:
         8e:2b:cd:f5:23:c7:a1:82:8d:b0:c2:c4:67:1e:3d:09:f4:05:
         fb:45:35:8a:70:d1:40:96:95:d7:15:11:ba:99:ff:b0:4c:35:
         d0:42:8c:ad:16:95:0f:c0:3c:fc:62:9e:4f:af:97:9c:f9:d7:
         85:ba:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:58:10 2025 by rpki-client