Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File:                     K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier:          BKeyRZCeQ14qhUmXyqt8Goh4Fgq4YiAFpmHjNOjxbM0=
Subject key identifier:   3F:D9:43:89:54:7D:2A:11:9A:7E:30:E4:48:A2:F0:0E:3B:51:C9:16
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer:       /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial:       0196D81BDFE78C1A8991ABEA8BB38191D1E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number:          47
Signing time:             Fri 16 May 2025 08:00:27 +0000
Manifest this update:     Fri 16 May 2025 08:00:27 +0000
Manifest next update:     Sat 17 May 2025 08:00:27 +0000
Files and hashes:         1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: tT/C8OSuDvIcToqBaKPvTci/egcju9QlykSkrkTTyQM=)
                          2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d8:1b:df:e7:8c:1a:89:91:ab:ea:8b:b3:81:91:d1:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
        Validity
            Not Before: May 16 08:00:27 2025 GMT
            Not After : May 17 08:00:27 2025 GMT
        Subject: CN=3fd94389547d2a119a7e30e448a2f00e3b51c916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:8a:05:6e:4a:11:3e:bd:74:62:08:09:1d:
                    0d:2a:8c:aa:67:e8:37:aa:33:50:20:29:d3:50:ed:
                    55:87:f7:69:db:78:ad:b6:0f:6a:d1:2c:80:b3:4f:
                    cc:f4:9c:06:58:0a:d5:d8:ae:ff:71:e0:0f:0f:28:
                    8b:9a:c9:b6:1a:20:b0:76:06:7e:13:5d:ed:17:6e:
                    56:9d:ef:68:d8:79:15:11:13:94:65:5e:7b:63:44:
                    50:b6:8a:8d:57:23:00:d2:34:64:24:2e:2f:48:20:
                    44:06:6b:84:8b:f1:7c:cc:4e:04:31:af:db:61:99:
                    35:4c:05:bf:65:50:52:5e:a1:2e:4d:66:b2:05:67:
                    04:d6:3c:62:71:57:0d:00:60:2c:6a:98:cf:3c:c2:
                    1c:c5:3c:84:08:f9:4e:dd:da:16:ca:91:44:86:79:
                    d4:b4:14:4a:6a:c0:17:be:72:ec:52:29:f4:fb:cd:
                    73:a9:64:77:a2:7c:c4:cf:0d:a7:9e:2c:06:e5:8a:
                    2e:b8:6b:93:27:5b:ab:5a:b3:35:27:59:a5:40:3a:
                    de:94:54:63:02:e0:25:f6:13:18:7f:60:fb:0c:14:
                    65:fc:b5:ca:bd:b1:d2:68:2d:71:91:15:2f:89:7f:
                    19:d7:13:78:04:81:33:cd:2c:68:a8:fe:48:86:03:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D9:43:89:54:7D:2A:11:9A:7E:30:E4:48:A2:F0:0E:3B:51:C9:16
            X509v3 Authority Key Identifier:
                keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:93:4c:7d:4a:a1:c4:c1:b4:44:91:c4:2c:1e:d4:6d:ae:
         ef:e8:04:76:9e:22:00:20:65:01:9b:0a:c7:51:29:ad:7c:da:
         f3:ca:52:f8:be:74:19:82:2a:a4:4e:23:0c:4e:cf:84:94:79:
         5d:53:af:d7:e3:07:97:73:77:01:31:7b:a8:ce:ba:b8:82:eb:
         9b:71:2b:27:cd:b9:a7:4e:4d:df:c0:5f:66:d9:8f:81:d1:61:
         06:f0:8c:1c:54:17:96:2e:39:33:9f:4b:4e:1f:0a:4f:18:88:
         6c:b5:a7:f1:1f:50:39:93:a0:6b:a3:9c:d1:3b:41:ba:ba:de:
         05:e9:25:e4:da:e2:21:23:a1:82:3c:07:1c:56:51:77:b2:ef:
         ae:3e:bb:cd:b7:73:2e:03:9a:7d:2c:ed:54:50:c7:dd:b5:e2:
         87:22:79:da:bc:12:2c:fd:4b:fc:fe:b2:da:92:c7:52:29:dc:
         7a:d2:d6:13:c0:5c:66:df:fb:bf:6d:4a:d3:55:27:d6:4d:da:
         59:fe:31:6a:d5:b3:84:41:0b:1f:6c:24:65:6a:ff:ed:9e:51:
         b3:b2:dc:b5:89:5f:c2:bf:c8:2a:92:f4:26:90:47:73:1b:ae:
         eb:c0:ae:4c:1a:ed:39:2d:c8:03:73:0c:97:cc:78:3e:d6:fb:
         ea:ec:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:40:10 2025 by rpki-client