Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          MHohSNI3E42FSsjpfnYK+RbQqHkTRKOTbWWpIpnUmss=
Subject key identifier:   7A:09:DB:92:CA:BA:E6:B0:B6:00:60:FF:DB:16:2F:9E:08:D1:5A:90
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       01969E9AA1646C6B615D1035FE787C3DAA12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          1527
Signing time:             Mon 05 May 2025 04:00:55 +0000
Manifest this update:     Mon 05 May 2025 04:00:55 +0000
Manifest next update:     Tue 06 May 2025 04:00:55 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: aTrDIDuaBv/SAdObRKoCqQubSXvj6/Pv56F9zghW+JU=)
                          2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:a1:64:6c:6b:61:5d:10:35:fe:78:7c:3d:aa:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: May  5 04:00:55 2025 GMT
            Not After : May  6 04:00:55 2025 GMT
        Subject: CN=7a09db92cabae6b0b60060ffdb162f9e08d15a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:38:e8:c2:8f:df:27:f0:eb:5a:71:16:a5:
                    be:17:3b:65:39:b2:04:dc:d2:7d:01:07:b7:d2:2a:
                    e0:a6:12:4a:01:cb:54:cf:aa:54:9a:8b:65:4e:b7:
                    80:4d:ee:d4:f6:32:66:9a:b7:b5:19:bf:4a:7a:c0:
                    ca:89:65:47:56:d3:e6:ab:1c:a3:76:d8:ea:89:3f:
                    7e:9b:ea:45:e9:84:4d:88:21:d8:25:c5:69:75:a0:
                    44:c8:1c:42:54:c1:de:b6:1a:74:98:59:54:99:35:
                    2b:a5:02:41:30:8b:99:32:47:9a:c5:0c:6b:ac:9c:
                    81:c0:fb:f4:2d:4c:4c:11:bc:59:7e:44:15:18:89:
                    67:7a:b7:77:c5:4a:87:a0:4c:44:88:b5:bb:1d:bf:
                    57:c5:2c:5a:67:1d:da:b4:7b:32:56:af:ee:e0:5d:
                    27:6a:db:0b:60:35:55:dc:39:eb:3b:2f:10:f2:2f:
                    91:c3:86:70:22:2e:1e:49:ff:fb:4f:0b:a1:88:f3:
                    05:87:de:7c:ef:2a:af:ff:aa:01:7e:c4:a3:60:6e:
                    fa:56:a8:dc:9c:c7:61:d8:9a:7c:6d:83:60:99:a5:
                    9f:d3:64:1e:0d:2b:46:a9:70:88:a0:44:bf:d6:f0:
                    80:b5:00:3f:b5:89:a2:d8:65:2d:d5:f5:7d:66:2f:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:DB:92:CA:BA:E6:B0:B6:00:60:FF:DB:16:2F:9E:08:D1:5A:90
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:e9:39:f6:01:af:7e:00:7b:58:1a:75:05:31:d9:2a:4d:
         4e:39:3b:19:75:14:60:f9:73:b4:1c:1f:87:57:04:a2:84:69:
         2c:c2:b2:c8:a7:59:12:75:bc:7e:b4:51:d1:1f:f2:32:e6:39:
         06:ce:58:88:81:7d:5e:bf:d1:b9:92:ca:82:5e:34:ab:80:5f:
         fc:b1:11:f8:13:3e:a1:74:03:5e:00:79:df:ac:2a:6e:b4:40:
         df:0e:ae:c3:62:05:74:81:a6:6b:b2:41:4d:9b:c7:48:35:87:
         98:ef:c5:a8:37:f3:e2:dc:6d:ea:6e:c6:0d:f6:be:cc:0f:93:
         de:ef:cb:c7:55:40:77:ed:e4:90:75:da:c9:05:c5:15:71:7e:
         f2:18:22:a1:98:1d:05:ad:d5:cc:7f:6c:69:e2:cf:0b:8f:fa:
         f5:8e:a6:f9:d4:05:7b:88:72:6d:1b:e8:97:a7:94:10:0a:5c:
         02:4d:07:54:ab:b0:ef:c9:c8:39:24:a6:7e:3f:40:3a:13:e5:
         14:cf:36:ef:59:7e:67:5b:00:39:43:03:e3:6c:29:46:51:64:
         0f:66:94:9c:29:c3:b3:72:16:d6:2c:f7:88:3f:c5:a3:a7:9d:
         d4:89:61:ee:68:43:4f:d5:5a:b7:c1:64:09:7a:dd:7c:ff:86:
         9c:f8:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:07:00 2025 by rpki-client