Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
File:                     E0vH5v379zjSP8XuXlrLUr77wFE.mft (raw, json)
Hash identifier:          cxvPig2SXiKpR+jQj8UU/NoDlmvVzXFhm9Q8WaYmsuw=
Subject key identifier:   73:45:E5:91:18:C2:D4:74:56:01:D8:3E:D6:5D:21:6F:94:50:91:39
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Certificate issuer:       /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial:       0196944D8333F1F084C9DAC3CCA71C701FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
Manifest number:          1461
Signing time:             Sat 03 May 2025 04:00:29 +0000
Manifest this update:     Sat 03 May 2025 04:00:29 +0000
Manifest next update:     Sun 04 May 2025 04:00:29 +0000
Files and hashes:         1: E0vH5v379zjSP8XuXlrLUr77wFE.crl (hash: rgQH9rBN5LYuXlOgTypwnK59qlWYU36LrN4GWmNHfyo=)
                          2: jScU1zFVjCaRKrDbPPQusY4_bns.roa (hash: 4SG9zb228Iu48jTcU1xr7DFLeKIwml/oUjk+0F3n0UE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:4d:83:33:f1:f0:84:c9:da:c3:cc:a7:1c:70:1f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
        Validity
            Not Before: May  3 04:00:29 2025 GMT
            Not After : May  4 04:00:29 2025 GMT
        Subject: CN=7345e59118c2d4745601d83ed65d216f94509139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:90:3f:72:96:50:b8:e9:f8:59:09:2c:91:
                    e8:b2:95:c0:82:9c:1d:5e:90:ba:d6:4f:cb:29:40:
                    08:64:93:a3:01:6e:98:b5:5e:46:19:9a:b5:26:3b:
                    99:f5:7c:51:32:c0:99:43:1c:81:b7:e5:8f:11:7e:
                    ab:ff:67:06:4d:52:6d:17:38:8b:fc:e1:a1:ac:5a:
                    64:1b:af:70:21:73:aa:e8:b2:c9:ba:25:55:cd:be:
                    be:a2:2a:f1:20:b2:fc:3d:3e:a9:26:a4:32:ec:db:
                    37:32:20:55:46:69:68:43:9a:5f:36:6c:69:7d:d0:
                    21:8d:24:a7:7c:ec:a3:15:2d:3a:d5:a7:58:5a:fe:
                    c5:e2:f9:66:b2:d3:f3:94:40:39:4b:8e:5f:24:cc:
                    75:47:b6:54:2f:59:2e:15:27:90:e8:3b:6c:09:8f:
                    27:3b:e0:83:ae:11:91:00:d5:83:dd:85:00:7d:b8:
                    e6:19:3b:49:cb:14:1d:65:95:71:ad:9c:a1:93:24:
                    a5:cc:f5:fe:fb:ef:b2:f9:8b:0c:7f:27:42:a6:9c:
                    6f:8b:0d:d1:36:cb:25:af:06:9d:eb:9e:51:c1:d3:
                    4d:fe:eb:db:4a:01:94:0e:f7:f6:ed:16:9a:12:70:
                    36:75:13:69:a5:0c:ff:8d:fd:18:a0:71:48:b9:d4:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:45:E5:91:18:C2:D4:74:56:01:D8:3E:D6:5D:21:6F:94:50:91:39
            X509v3 Authority Key Identifier:
                keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:80:34:91:ec:24:40:2d:97:e4:b1:c8:9d:3d:95:86:28:
         c6:70:97:1e:1d:d3:ab:18:e4:03:cb:06:bf:5c:02:f6:c2:c1:
         0c:9c:fe:eb:cc:5e:68:cc:c0:20:aa:22:1d:5d:57:91:24:ce:
         10:53:dc:55:5b:ca:50:70:81:dc:a8:c3:e3:37:96:00:cd:82:
         21:1f:e3:c3:9d:07:16:4f:b7:42:d5:05:b4:7f:64:fe:4f:fb:
         26:0a:36:c3:cd:fd:90:de:e2:39:25:36:af:3b:1a:2c:e5:7c:
         58:9e:c5:ce:9d:fd:ff:31:bf:2c:fb:e5:83:4a:94:a6:3e:a7:
         7f:04:ce:b1:44:b6:7b:b5:58:8c:68:60:12:3d:88:82:42:f5:
         16:47:e3:c1:95:0f:fc:ff:ff:ef:d2:3c:19:96:09:d3:b9:d8:
         8d:32:c0:09:ba:12:77:f6:d6:6a:30:72:2d:4f:bf:7c:1e:99:
         91:be:dc:0a:bd:e5:a9:e5:0d:d8:e5:d2:11:b6:10:2b:58:9b:
         ae:7c:ce:fc:7c:a8:8a:5e:1b:aa:eb:ed:e9:1d:fb:a5:f8:56:
         ef:ce:4e:27:ac:b6:c5:cd:c4:f4:2d:a2:4d:b5:f9:a9:cd:1d:
         31:74:3d:7a:05:54:1b:eb:aa:6c:dc:9e:70:b9:3e:66:01:64:
         f6:88:8f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:39 2025 by rpki-client