Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
File:                     cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json)
Hash identifier:          5dx3biBRt9jh36C8YXJAVfG9BH3A3KGg+CyO1ZR8dzY=
Subject key identifier:   9E:14:8E:08:60:D1:CF:07:31:8D:AB:33:EF:AA:FC:36:00:1C:D2:11
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Certificate issuer:       /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial:       0196C6BAE50AAD399C824E0F1D2717071370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
Manifest number:          030D
Signing time:             Mon 12 May 2025 23:00:59 +0000
Manifest this update:     Mon 12 May 2025 23:00:59 +0000
Manifest next update:     Tue 13 May 2025 23:00:59 +0000
Files and hashes:         1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: HGRfGmXfGzj+zDEB7DvQacj3A7xRjggPUQIJEiI//Ac=)
                          2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:ba:e5:0a:ad:39:9c:82:4e:0f:1d:27:17:07:13:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
        Validity
            Not Before: May 12 23:00:59 2025 GMT
            Not After : May 13 23:00:59 2025 GMT
        Subject: CN=9e148e0860d1cf07318dab33efaafc36001cd211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:1c:91:03:6b:b1:f4:a6:c5:b0:fb:fa:13:
                    61:cc:79:8e:3e:b5:f0:0f:40:9a:64:ae:9c:8a:c0:
                    9e:fe:a1:b6:eb:d1:c6:87:f6:9f:85:4e:d0:63:16:
                    51:da:a3:a4:e1:bd:0f:08:d8:5e:e5:08:62:bf:a3:
                    c6:5a:5f:68:25:d7:c8:bc:60:c5:ad:00:c2:4e:7c:
                    5b:49:1a:14:89:97:d6:e0:72:cc:67:54:85:86:c3:
                    3a:64:8d:df:f6:ba:60:51:f6:6f:26:76:58:93:bb:
                    48:63:95:76:19:2a:9e:c2:fa:b5:d0:7a:07:6e:3c:
                    fc:87:57:ee:5e:5f:fc:7f:92:6f:bb:b0:d5:38:96:
                    e2:61:bc:79:2f:88:ac:d1:f7:87:4f:44:2e:c1:eb:
                    33:e2:3b:bf:ae:70:8f:2e:47:0d:39:55:58:25:2f:
                    3d:7d:6c:6a:a0:c0:05:b5:b8:34:fe:e0:e7:b7:95:
                    a5:1e:f0:a7:42:31:d5:ed:e2:e1:a6:f9:2c:33:98:
                    27:87:b6:0c:c1:18:4b:e9:32:13:55:d0:4c:e4:2e:
                    bc:b6:0b:b2:d6:2c:ef:d9:eb:0d:ce:66:47:1b:0c:
                    50:10:7b:76:b6:03:59:e0:bb:49:2a:89:f2:a6:a2:
                    5c:8d:a2:ed:86:5c:39:44:52:4b:ef:24:2b:0b:47:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:14:8E:08:60:D1:CF:07:31:8D:AB:33:EF:AA:FC:36:00:1C:D2:11
            X509v3 Authority Key Identifier:
                keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:36:d7:1b:8a:00:fa:c7:ab:f0:5b:1a:cf:2f:50:17:00:9c:
         e9:0e:d7:6f:0f:01:cf:f4:4b:d4:a8:c6:d3:d1:96:db:4d:db:
         e3:79:40:33:7e:0b:32:80:11:32:e7:90:cd:57:ba:26:b9:92:
         2a:8c:d4:e0:22:a9:23:3c:4c:31:73:e5:3c:42:ad:a7:3d:34:
         9d:77:33:a9:b6:27:a8:13:6b:9c:58:39:67:22:c7:6a:81:5a:
         16:4d:4c:9b:f4:5a:c7:7d:55:77:a2:81:97:d7:41:ac:ec:c5:
         7e:08:cc:e3:6a:dd:e2:5c:4e:2f:03:d8:b6:84:af:f9:d6:45:
         6c:50:5f:75:68:c3:99:0e:6a:d2:5a:2c:3f:f9:18:6e:04:04:
         aa:39:b9:a3:4e:eb:dc:1b:a0:35:b1:7b:6b:9e:b1:29:8c:16:
         7d:65:c4:ca:3f:46:66:7a:ef:d8:ec:c1:18:d1:59:ee:4d:95:
         c5:a9:99:66:93:b0:0d:4c:6a:a2:cc:fa:4b:1c:15:f7:aa:e1:
         a7:de:2b:9d:ca:5f:08:dc:58:b6:58:d0:48:59:9d:02:18:51:
         1d:3c:0b:19:4c:ce:f0:6f:a5:d6:08:dc:5a:9a:0a:7f:97:b1:
         10:07:48:2a:2f:25:f2:70:d3:f6:c8:24:01:f9:40:56:3a:52:
         84:89:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:27:42 2025 by rpki-client