Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
File:                     5zfJpEKotKTJEvEbwrbTzxAK30I.mft (raw, json)
Hash identifier:          gs4VSnLouBSw617iMAwLptJ8eFGOtItBFI0x1EQ/3ck=
Subject key identifier:   6D:05:EC:3E:E6:70:20:CA:10:CC:31:A2:41:24:68:BE:68:4E:67:14
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Certificate issuer:       /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial:       01968C266F0A58B3A2F384049F63CBD742AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
Manifest number:          151C
Signing time:             Thu 01 May 2025 14:00:50 +0000
Manifest this update:     Thu 01 May 2025 14:00:50 +0000
Manifest next update:     Fri 02 May 2025 14:00:50 +0000
Files and hashes:         1: 5zfJpEKotKTJEvEbwrbTzxAK30I.crl (hash: DLXExK6ohwrjRkIdv45QvCnqFmvmbzDAoerqeT4y3aQ=)
                          2: 9Gaptu7OegDOTWgwtAQ4TQ0AHTI.roa (hash: rkESQzEqL5Foo1j28OK1lOudeGd3GtI+57JqeG8POXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:26:6f:0a:58:b3:a2:f3:84:04:9f:63:cb:d7:42:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
        Validity
            Not Before: May  1 14:00:50 2025 GMT
            Not After : May  2 14:00:50 2025 GMT
        Subject: CN=6d05ec3ee67020ca10cc31a2412468be684e6714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:45:23:43:14:80:ab:46:c6:08:e0:c8:23:
                    28:85:7d:da:11:a0:36:93:28:44:25:1d:55:0c:64:
                    52:d9:6c:93:8a:22:25:f3:73:52:f8:a9:09:77:fb:
                    9f:85:37:84:72:c9:f1:06:b9:38:17:51:a7:7b:86:
                    de:5a:48:66:a2:23:38:c9:c2:f5:5f:5e:cc:0e:a1:
                    56:7e:ce:87:52:72:36:e7:94:a2:1c:09:73:a7:e9:
                    19:87:d5:50:4f:98:7d:a9:9a:25:76:ad:63:87:c9:
                    d0:35:94:2e:38:b8:d1:4c:70:93:c4:cf:ff:b9:13:
                    71:0b:f5:20:57:92:d1:6a:9d:24:ee:26:bb:a5:7b:
                    c2:75:60:84:20:fb:14:ed:16:0f:67:99:d3:98:27:
                    f5:4c:a9:ec:f0:93:9e:38:90:92:e9:81:61:87:b4:
                    ed:68:da:4d:62:7e:be:ab:bf:76:f9:13:89:e3:d1:
                    66:67:ae:c4:97:d4:8c:8f:5b:7b:00:7e:3b:2f:52:
                    30:eb:07:6a:ac:09:a8:06:98:d7:24:58:cc:70:4a:
                    8e:e6:97:dc:4f:81:3a:a5:49:18:98:9b:7e:b2:49:
                    6b:04:5f:74:23:c7:fe:2f:30:88:5a:6d:01:ae:6a:
                    1c:56:50:75:60:7e:74:39:c4:df:ac:5f:34:c0:21:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:EC:3E:E6:70:20:CA:10:CC:31:A2:41:24:68:BE:68:4E:67:14
            X509v3 Authority Key Identifier:
                keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:6e:2d:c0:07:34:24:db:9a:9e:f6:fd:84:d0:dd:92:e5:
         cd:b8:f6:48:e9:93:b9:91:5c:b1:41:1e:f2:4e:bc:8b:e6:dc:
         31:38:c6:52:44:56:ea:42:b4:f5:d3:0e:f4:19:eb:ca:c0:1e:
         6a:90:71:73:9c:12:4e:4d:f8:0b:e9:f4:8c:2f:66:2b:14:ef:
         fe:25:a4:f4:2b:bb:94:07:90:6e:c2:c1:92:a7:d3:27:3c:5f:
         bf:12:c0:04:5c:a1:68:5e:f1:91:db:d3:a9:17:f0:7f:ab:9b:
         3e:14:5b:fa:aa:62:0a:3b:fc:77:99:07:bf:82:e0:4b:c5:0d:
         6a:ce:38:6e:4c:56:ad:91:55:f9:6f:45:c6:94:df:22:8f:bf:
         26:09:49:6d:3e:79:e2:7d:2a:00:2d:4e:79:37:f6:6a:e8:fb:
         c7:fa:a2:72:db:d9:6b:15:3e:e5:62:f6:93:fd:fc:db:05:1f:
         a2:6a:a2:e5:95:c4:10:a3:3b:b8:44:73:6a:46:88:4f:d4:bc:
         80:98:17:f5:5a:bb:66:9e:94:29:b5:7f:ec:37:80:af:39:a0:
         39:5f:83:bd:2e:10:62:ad:8c:37:73:39:a6:51:91:bb:71:3c:
         9a:ba:9f:fc:fd:bd:de:88:6f:3d:03:ea:75:7f:8c:3e:b3:28:
         d5:72:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:24:38 2025 by rpki-client