Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File:                     r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier:          BjjGlouA6jHXUGWxzecC6CGrlBrPWam/6nGHoxEzJGM=
Subject key identifier:   54:0C:EF:1F:BA:59:6A:FC:5B:B9:39:F6:63:E0:99:F7:01:ED:BE:B2
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer:       /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial:       0196778CE1EDEB2BA38B9ED6D4140FDAFFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 14:00:43 +0000
Manifest this update:     Sun 27 Apr 2025 14:00:43 +0000
Manifest next update:     Mon 28 Apr 2025 14:00:43 +0000
Files and hashes:         1: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (hash: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=)
                          2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: 1IAJK0StNbet3d4iNCrOWBbHEIXhp/x19tr1C/0oYDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:8c:e1:ed:eb:2b:a3:8b:9e:d6:d4:14:0f:da:ff:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
        Validity
            Not Before: Apr 27 14:00:43 2025 GMT
            Not After : Apr 28 14:00:43 2025 GMT
        Subject: CN=540cef1fba596afc5bb939f663e099f701edbeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:f4:2a:01:fb:e2:2a:20:f5:25:3e:92:17:
                    ac:d4:57:75:8a:7c:d7:32:b6:92:9e:e0:fd:85:a9:
                    a9:21:3a:8d:6a:c8:bc:8a:25:3b:e8:44:0c:da:ef:
                    90:e4:8c:d6:67:7e:4e:d0:f0:e2:a2:0e:a9:66:33:
                    ae:96:51:28:44:6e:50:17:92:9e:c7:de:dc:61:3a:
                    c5:2d:8f:eb:2b:44:12:93:57:aa:b2:f1:9b:50:d5:
                    b3:74:64:7e:3e:ee:97:b7:c1:48:d9:9b:f9:ee:f9:
                    af:a0:ee:bc:71:c9:1e:21:b0:75:ae:64:c8:28:9c:
                    f1:a7:f2:98:64:c5:8d:5e:89:4d:13:1f:96:c6:20:
                    2c:94:ab:4b:42:54:4a:c7:5d:1a:bc:3f:48:92:cc:
                    18:f6:f9:ac:29:34:19:bc:20:4d:09:85:0f:db:96:
                    e3:7a:52:43:a3:15:95:f4:04:e0:0b:0c:32:ec:11:
                    d2:e6:31:6f:d3:82:ec:f0:02:76:97:b2:79:4d:43:
                    18:0b:16:35:b1:21:7e:21:44:f3:2f:2d:bb:31:6e:
                    a6:76:d0:70:18:30:db:27:8b:b4:79:db:ea:46:4b:
                    8b:b5:8d:6b:71:01:80:5c:1f:88:17:2c:98:ae:9e:
                    f9:b8:d0:da:4b:af:4c:41:f5:26:98:c4:31:5a:d3:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:EF:1F:BA:59:6A:FC:5B:B9:39:F6:63:E0:99:F7:01:ED:BE:B2
            X509v3 Authority Key Identifier:
                keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:a0:52:6c:d9:b4:c0:c3:8e:da:90:85:be:e1:14:f4:8f:
         95:0c:f6:86:5e:80:1c:4f:ba:92:96:0f:96:e8:33:d9:f4:4e:
         e8:d0:fc:0c:08:64:fd:d0:b4:cf:ee:65:47:18:97:e4:8d:a9:
         13:e8:6b:f4:96:91:07:da:22:45:b6:28:87:4e:56:ec:22:a8:
         63:a9:ab:0b:62:cc:e7:c7:b6:cb:ba:38:05:f3:88:98:8d:85:
         95:e5:08:92:5c:4b:e1:c8:f1:ae:7f:df:f3:52:fd:2e:f3:56:
         9f:00:ac:4c:fe:a4:a2:02:6c:f9:74:9b:35:11:6d:bc:d8:d6:
         41:72:d3:f6:02:01:27:64:29:6b:65:8c:54:2f:30:1b:0b:c5:
         56:9d:7c:f1:59:02:ab:96:c9:4a:ac:9c:ac:27:fc:39:59:a9:
         ed:d0:ec:19:96:f2:83:49:6f:28:34:93:ce:d6:76:f6:a7:5c:
         4b:16:6a:28:1e:a1:fe:d3:0f:a1:14:02:0e:57:d9:18:b7:4c:
         4c:f4:96:36:49:e1:d8:c8:c0:79:70:f2:84:32:62:cf:87:01:
         e7:0d:f8:41:73:48:ab:33:6b:50:5c:ea:b0:1a:f0:2d:45:b4:
         7e:e3:cc:22:08:33:53:1e:68:d2:ad:65:74:b7:d2:ad:05:f1:
         5d:46:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:12 2025 by rpki-client