Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
File:                     zejmVDmS20l1mMIueouVePiNmC8.mft (raw, json)
Hash identifier:          6q56hNeUFaCIrTLAVBndQ7jmttxSg4mlm+yGTWfb+DQ=
Subject key identifier:   5D:B4:5D:D8:EE:5C:D5:BD:0E:8D:21:3D:E0:46:F4:AB:44:A0:F4:5A
Authority key identifier: CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F
Certificate issuer:       /CN=cde8e6543992db497598c22e7a8b9578f88d982f
Certificate serial:       019675D5448665A8F086925AF05FF9A99E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 06:00:33 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:33 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:33 +0000
Files and hashes:         1: Y9gCH4thucbTjT0xARnAurkdlt0.roa (hash: yAFowKPItllcTMSoNXQVDZSzSIBjFl8626mwMV3sNgo=)
                          2: zejmVDmS20l1mMIueouVePiNmC8.crl (hash: M+u7sS9Q5bIKijyf0c5S+SslicEYJDBr1FFVsngNprU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:44:86:65:a8:f0:86:92:5a:f0:5f:f9:a9:9e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde8e6543992db497598c22e7a8b9578f88d982f
        Validity
            Not Before: Apr 27 06:00:33 2025 GMT
            Not After : Apr 28 06:00:33 2025 GMT
        Subject: CN=5db45dd8ee5cd5bd0e8d213de046f4ab44a0f45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:95:98:84:af:06:2d:0e:9a:08:8c:ac:ef:
                    d5:b2:c8:e6:49:b3:9f:95:df:e6:f3:1e:83:97:61:
                    16:b8:a3:5d:23:59:c6:37:50:2d:9b:03:5b:4b:42:
                    40:d8:03:0f:b1:eb:66:5b:5f:1d:fa:0d:38:13:e8:
                    32:1a:bf:a5:e3:7b:34:af:5b:10:31:99:c3:90:ef:
                    99:7a:1d:2e:3e:ec:9e:61:5d:c3:39:2b:31:a2:fc:
                    56:17:92:ed:e8:81:e1:c3:19:3e:0e:57:85:28:d6:
                    c4:26:20:74:87:8d:0b:7c:e3:17:c7:70:72:90:e3:
                    14:45:3d:27:98:7b:ad:d7:ef:18:a9:ab:64:76:04:
                    67:a9:d6:21:ef:99:6a:e3:1f:5a:10:08:8d:b9:fb:
                    c9:f8:ce:f8:28:69:12:9f:6d:6e:f5:30:84:15:45:
                    55:9c:7b:75:01:42:14:32:97:db:8d:91:b7:6d:de:
                    02:22:2f:ae:c8:63:c4:c5:42:50:44:65:72:29:93:
                    e5:e1:d1:e5:7d:c4:00:9e:e5:3b:58:60:51:30:3a:
                    b8:c1:e3:a4:14:22:09:54:45:f2:cd:18:64:ed:dc:
                    0e:ea:51:32:e5:8d:86:e8:d8:c1:ec:3a:c5:3f:9f:
                    b1:8d:74:76:39:3f:a8:04:bf:da:6c:ae:00:03:dc:
                    c9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B4:5D:D8:EE:5C:D5:BD:0E:8D:21:3D:E0:46:F4:AB:44:A0:F4:5A
            X509v3 Authority Key Identifier:
                keyid:CD:E8:E6:54:39:92:DB:49:75:98:C2:2E:7A:8B:95:78:F8:8D:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zejmVDmS20l1mMIueouVePiNmC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/d1353b-fa9d-4e6e-8c22-0ab25d0b0bee/1/zejmVDmS20l1mMIueouVePiNmC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cb:2f:b8:18:5d:bd:90:f9:f7:21:af:bf:aa:43:83:72:25:
         8c:fa:26:17:ae:a1:a4:80:9d:f8:c5:b7:5a:32:40:11:b9:2a:
         28:ca:40:69:11:84:ad:ed:ce:23:bc:5f:01:d7:8e:10:be:45:
         e1:fa:3f:09:dc:92:74:f3:cf:5c:6b:bf:44:5b:07:6f:fb:c4:
         57:4e:df:3e:0f:b0:0a:97:86:9e:32:f4:b2:7f:0e:ed:7b:ab:
         85:c8:87:27:b2:e2:21:4a:c5:09:b2:22:05:0f:2d:be:7f:4d:
         dd:5c:f0:a9:0c:f6:94:e4:78:ef:f6:94:6c:b8:63:89:7e:51:
         d0:d3:05:66:18:88:55:a5:25:49:1a:30:99:35:2b:99:1f:d1:
         fb:8f:5e:1e:34:2a:b6:4c:92:75:13:16:6b:c4:30:8d:50:61:
         23:0c:76:dc:3c:15:29:f2:31:51:07:90:77:4c:cf:ad:e9:f7:
         01:5f:bc:12:4f:b3:5d:e4:29:f5:64:7a:ed:8c:ab:01:72:14:
         60:eb:0f:b9:8c:c2:b4:23:a5:cd:5a:9e:cc:e2:3d:3e:d5:2b:
         e0:2b:7b:f7:d7:fc:3f:73:6c:1a:b1:c7:53:88:0f:d5:fa:41:
         81:52:f2:78:a6:af:90:59:e7:87:60:d4:77:df:74:ca:56:8f:
         64:cc:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:16:34 2025 by rpki-client