Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
File:                     eSWRAsFpk85eE7CMumDu2tf5J3M.mft (raw, json)
Hash identifier:          gDHivRlgAiZpKXZTRjP5WjuvbJ18vfNXGrnm01lKdIg=
Subject key identifier:   5A:C2:4B:47:33:76:23:9D:CD:7B:74:7C:5D:0C:BC:99:35:57:5D:41
Authority key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73
Certificate issuer:       /CN=79259102c16993ce5e13b08cba60eedad7f92773
Certificate serial:       019681D9889789F0992C5A30B2F40A380B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
Manifest number:          0112
Signing time:             Tue 29 Apr 2025 14:00:39 +0000
Manifest this update:     Tue 29 Apr 2025 14:00:39 +0000
Manifest next update:     Wed 30 Apr 2025 14:00:39 +0000
Files and hashes:         1: 2XnqswJhUp8Q7QKYSg6mYnJtPx0.roa (hash: GVTo7but2rFEi3PE0oMZ20Q2ZfZFSUAgiohCKBnP4LM=)
                          2: eSWRAsFpk85eE7CMumDu2tf5J3M.crl (hash: PvEEEtdedFcpfnLThJtgaWBCDDZinRCblbXZH1FOAC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:d9:88:97:89:f0:99:2c:5a:30:b2:f4:0a:38:0b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79259102c16993ce5e13b08cba60eedad7f92773
        Validity
            Not Before: Apr 29 14:00:39 2025 GMT
            Not After : Apr 30 14:00:39 2025 GMT
        Subject: CN=5ac24b473376239dcd7b747c5d0cbc9935575d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:52:23:21:b3:ae:41:eb:b9:e7:24:df:ca:
                    f5:24:25:b4:ff:16:46:53:50:e1:82:fa:2a:01:30:
                    d4:e3:23:06:72:8b:4c:1f:dd:b6:60:a2:29:d6:de:
                    0d:dd:97:67:c2:9b:66:6c:39:20:5d:dd:79:15:45:
                    78:e7:1e:06:5d:1c:ec:0f:a9:ae:fb:ac:25:ce:ca:
                    be:50:d6:c4:2e:76:e6:a5:b8:59:8b:c0:ba:74:2a:
                    42:5a:04:5e:af:d0:f9:6b:31:dc:dd:d9:25:5f:af:
                    c3:51:45:2b:c2:f3:37:cf:62:2a:80:3b:aa:cb:4a:
                    17:9a:39:fa:bc:d4:90:a4:a1:86:46:fc:47:b2:f4:
                    82:84:63:a7:1d:00:20:bf:e6:78:5f:59:69:02:7a:
                    9c:64:11:7b:10:07:fb:b0:ca:cd:26:e5:9f:4d:47:
                    19:88:5f:dc:19:6b:53:4e:b7:4b:63:e0:aa:a4:24:
                    a1:c9:3f:54:76:11:c8:64:b2:ed:4b:5e:12:c3:01:
                    38:3d:3f:de:8c:92:7b:fe:26:d7:e0:41:51:86:4a:
                    33:fd:8a:fc:f8:e5:4b:18:85:42:bd:7e:f6:09:bf:
                    86:c7:97:11:b5:19:f8:a8:c9:27:b3:c4:14:96:1b:
                    cf:96:61:29:67:82:52:3e:db:b4:7f:ea:52:67:5c:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:4B:47:33:76:23:9D:CD:7B:74:7C:5D:0C:BC:99:35:57:5D:41
            X509v3 Authority Key Identifier:
                keyid:79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:16:fa:4a:b7:b8:ff:55:7c:1c:d4:f2:6b:ba:b8:b0:e1:d4:
         66:c2:a9:2f:87:a8:3c:f7:dd:4d:20:b1:cf:5c:e3:7a:c3:b5:
         74:df:14:55:23:27:32:d1:98:6f:c8:7b:2d:b0:cf:61:d5:be:
         ab:9a:c1:3a:b5:b7:52:59:9f:62:b5:eb:02:b2:c8:1d:6e:54:
         62:84:a7:1a:fd:a2:99:ab:9b:68:50:57:02:18:b9:b4:9d:86:
         f2:8d:88:42:81:23:a7:8b:9c:c4:f1:3a:93:3e:c6:2b:8a:f4:
         44:45:0b:ea:b4:aa:54:11:88:ca:ce:da:ab:d4:48:9d:36:c3:
         b3:81:67:85:f6:7f:ba:03:27:6e:31:b6:23:eb:6f:2a:7d:74:
         79:76:70:47:16:c5:67:8f:69:23:38:b4:fa:6b:53:03:99:1a:
         46:f5:bb:7a:32:67:9a:cd:d0:6e:8d:20:ca:80:38:1c:f7:c9:
         3e:7c:a0:f2:db:40:02:95:93:9e:ff:7f:de:ea:bf:a9:07:2f:
         5d:73:59:5e:bf:89:8a:ea:7a:05:3c:12:47:c2:b7:b0:fc:61:
         40:12:ed:91:f1:49:97:b6:4a:ed:90:8d:2d:21:11:48:32:1a:
         1a:95:c2:a7:d2:a7:b2:64:a4:0c:92:6b:f1:d0:1b:9f:70:29:
         a8:39:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:24 2025 by rpki-client