Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          VSjKDr6rf+y+iWinkVu9cmOxqldHBch1nTg1XjFnbvM=
Subject key identifier:   89:BE:9C:6E:5A:E9:02:79:20:52:9F:DB:99:B6:61:F5:D3:04:F2:58
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       01968E148B94A43C8499EDF4EB4F82269A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          14B5
Signing time:             Thu 01 May 2025 23:00:33 +0000
Manifest this update:     Thu 01 May 2025 23:00:33 +0000
Manifest next update:     Fri 02 May 2025 23:00:33 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: xFfNXFKUi1Dz8WFAtIRnH5u8qugCZskGL2d/82RxPzw=)
                          2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:14:8b:94:a4:3c:84:99:ed:f4:eb:4f:82:26:9a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: May  1 23:00:33 2025 GMT
            Not After : May  2 23:00:33 2025 GMT
        Subject: CN=89be9c6e5ae9027920529fdb99b661f5d304f258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:c6:c8:fd:44:d6:1a:54:9b:35:5d:b0:b4:
                    29:ac:b8:a5:cb:e7:72:40:4f:ef:31:02:ed:5b:c1:
                    12:3f:d4:b6:c2:58:d3:ce:83:40:32:5b:47:3e:db:
                    54:ad:f1:35:db:60:f3:d6:d6:ec:04:9e:03:85:a3:
                    1a:82:d1:7f:95:11:98:ae:55:24:50:1e:6d:ea:0e:
                    86:25:9a:05:0c:73:09:90:39:d3:33:f0:5b:6b:57:
                    47:3f:c0:66:72:7a:55:96:bd:7c:ff:54:a0:2a:1e:
                    11:23:85:c8:4a:6b:46:ce:74:8e:fd:d0:dd:93:01:
                    bd:88:a5:24:e0:cb:dd:0f:f6:ce:85:b8:9d:3e:ad:
                    2c:7e:9e:e3:33:c8:f2:cf:a1:f0:0e:4f:d3:87:a0:
                    78:e7:2c:75:68:95:92:21:0d:d8:20:3b:33:c3:91:
                    82:34:3d:42:01:be:68:d5:d0:5e:fa:da:cf:7b:77:
                    7e:d9:15:1d:55:4b:d0:15:9e:f2:30:1a:c2:bf:a3:
                    5c:3e:45:86:93:01:db:cb:d8:e7:82:25:50:46:3b:
                    33:99:b3:f1:3a:c8:7f:24:72:6c:69:0a:10:a5:9b:
                    84:1a:c6:a8:3a:84:58:dc:fb:ac:00:e9:fc:fe:d5:
                    06:a8:f1:e8:1f:2b:eb:44:33:93:51:1f:85:81:56:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BE:9C:6E:5A:E9:02:79:20:52:9F:DB:99:B6:61:F5:D3:04:F2:58
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6d:e7:24:08:ee:61:46:da:56:ba:72:2f:c4:29:0b:a3:45:
         b6:94:22:33:3c:88:c7:87:c8:79:ad:6c:08:e5:35:fd:51:f9:
         74:eb:42:a1:5d:62:a7:48:56:50:ae:be:a4:eb:6c:93:aa:f5:
         20:00:3d:fb:52:a1:75:33:b7:f2:c9:85:4d:cf:6d:c7:6c:25:
         e5:9c:e4:5c:ea:be:fe:b6:4b:a2:2b:14:38:75:6b:1d:e3:f2:
         8f:0a:c8:ab:53:7f:9f:10:a0:df:69:c7:20:9c:3a:3e:d3:01:
         ba:65:12:3d:9d:95:cb:e5:d1:79:62:84:b4:8e:b0:a4:2b:e4:
         aa:99:a1:80:b9:1f:cf:18:48:de:42:72:02:57:9c:79:6a:48:
         b0:f5:cc:3a:9b:d6:f1:d6:5c:b4:26:82:f8:52:6f:67:ff:89:
         e3:67:81:93:23:99:54:4c:b2:89:03:0f:13:20:09:12:41:79:
         e7:29:a3:29:a3:e5:a7:9a:fd:69:9a:28:dd:9c:b8:95:6d:78:
         39:ee:82:2c:89:5e:18:18:18:d1:c9:1d:5f:d0:5b:e7:27:f4:
         2b:a8:be:bc:13:4e:32:88:ea:a4:47:a7:b6:d0:15:d3:3f:ae:
         4c:1b:a5:16:ce:ad:dc:be:00:96:71:ec:b1:fa:3a:74:62:34:
         ff:6c:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:08:16 2025 by rpki-client