Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File:                     4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier:          AEc5h6YkXMRApWG2QixKQ2osJv79gEKnDF/3inMRaHo=
Subject key identifier:   5C:C8:80:05:00:E8:B4:AF:2B:8A:CE:1C:2F:34:6A:3F:DE:A9:E0:E9
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer:       /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial:       0196741E10D5F458543134DC45C53C67249C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 22:00:49 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:49 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:49 +0000
Files and hashes:         1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: xCTtSfRPrBi7GVxIVWpmkDhUY6Ejao7Dd1Mu1VIIHEA=)
                          2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:10:d5:f4:58:54:31:34:dc:45:c5:3c:67:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
        Validity
            Not Before: Apr 26 22:00:49 2025 GMT
            Not After : Apr 27 22:00:49 2025 GMT
        Subject: CN=5cc8800500e8b4af2b8ace1c2f346a3fdea9e0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:d2:f9:b0:fc:0e:51:b4:74:74:eb:75:da:
                    64:5f:5e:b2:cf:b0:cc:54:f5:f8:62:02:f0:f8:af:
                    e9:64:6b:d3:96:18:a0:b6:d4:4c:86:ab:44:db:05:
                    e8:42:6a:29:0a:06:d8:6b:b3:11:b1:b3:d6:33:f2:
                    a8:49:b8:33:f9:67:9b:57:a6:2b:a2:2e:a8:1b:fe:
                    1f:9e:30:13:be:1d:db:04:71:3b:47:1b:c3:ea:64:
                    ab:a3:85:0c:43:48:a9:53:80:79:a0:23:c6:f6:4b:
                    51:9f:d4:38:e0:1b:a7:86:30:77:47:c1:42:84:f7:
                    ba:89:83:3c:95:ad:da:2a:90:e5:6b:b6:ad:51:f9:
                    42:07:8e:f9:c9:d0:2b:28:21:a1:c2:64:70:20:28:
                    66:f7:d5:ed:22:8e:43:75:7c:07:97:27:c2:06:69:
                    da:3d:0f:f6:12:ef:a1:7e:cb:e9:01:23:72:22:6b:
                    d1:15:0e:ad:ba:c1:e0:8d:85:14:53:e4:7f:da:20:
                    d8:ab:19:92:3a:fe:e8:11:21:b5:cd:68:77:7f:1e:
                    d4:fe:4a:77:b7:59:35:92:37:86:64:83:b4:b5:51:
                    9f:db:09:c3:1d:04:93:5a:5f:50:c7:65:b0:c0:14:
                    f4:41:a6:37:dd:ed:2d:72:c7:ef:b8:18:3b:f7:10:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C8:80:05:00:E8:B4:AF:2B:8A:CE:1C:2F:34:6A:3F:DE:A9:E0:E9
            X509v3 Authority Key Identifier:
                keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:be:8d:57:2e:85:56:de:1a:11:51:3e:94:01:6b:6b:7d:5f:
         75:06:a4:9d:3d:d0:66:bc:b2:ee:60:73:05:d9:13:34:d5:2f:
         3d:49:87:49:3a:f2:03:20:23:ac:38:ed:c1:98:22:26:ac:c8:
         68:3a:19:12:a9:7f:47:76:5b:e8:c5:b7:f0:69:62:99:ea:12:
         4a:85:f9:29:ce:b2:13:19:63:39:e5:9e:65:bd:a8:6f:30:f7:
         37:22:d6:80:b9:07:48:7e:54:28:58:37:4a:c4:a4:e3:b7:49:
         0f:f5:0d:5d:62:6a:d2:86:7a:31:f6:89:3f:74:37:30:32:9d:
         58:44:12:26:58:ad:3c:03:44:64:58:a4:cc:5b:b9:13:fd:92:
         71:99:f4:80:c9:f2:fe:d2:04:50:c6:df:75:ac:d2:4d:98:84:
         d5:44:39:f1:b2:04:da:ac:8c:42:11:a1:a5:bb:a5:6b:1b:f5:
         d5:ba:1b:ba:98:a1:e8:ef:52:8a:d7:c7:de:c3:99:23:af:a7:
         c9:0a:00:32:81:ed:98:52:b1:3a:44:ba:2c:00:42:96:2a:9d:
         2c:6d:e8:c8:df:4c:d1:cb:66:74:77:3e:77:92:a0:99:50:0c:
         55:25:2e:1b:d2:1c:f7:ac:ce:1b:99:4a:f8:1e:84:aa:71:99:
         c0:54:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:14:46 2025 by rpki-client