Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File:                     n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier:          2D7wlCzMypMSKJ1fjBB4Deri6lEnFL5ZGjjUivCNmJQ=
Subject key identifier:   E1:5C:9A:32:15:85:9B:85:60:BC:E1:5C:FA:C2:0A:1C:B8:55:4A:B3
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer:       /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial:       019675305CA8A6C1A7F4742501FE2A3086DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number:          0477
Signing time:             Sun 27 Apr 2025 03:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:25 +0000
Files and hashes:         1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
                          2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: EqsTlLM1TYXSuuLzwUvmFwOoNeH4bYDnIedcXHlDpOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:5c:a8:a6:c1:a7:f4:74:25:01:fe:2a:30:86:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
        Validity
            Not Before: Apr 27 03:00:25 2025 GMT
            Not After : Apr 28 03:00:25 2025 GMT
        Subject: CN=e15c9a3215859b8560bce15cfac20a1cb8554ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:f9:52:e2:18:4c:b2:3a:d0:ac:77:10:0c:
                    ed:d2:bc:84:c8:28:0c:34:a6:1f:8f:e8:80:7b:fc:
                    7d:d2:94:f2:bc:9a:59:6c:12:43:a8:4a:f3:dc:b9:
                    54:f5:f3:60:67:3d:5d:4d:6a:f5:fe:11:5b:dd:d6:
                    88:0f:56:ed:35:3c:96:2a:ee:3e:b5:81:ec:2e:19:
                    77:15:06:e4:bb:09:10:69:ae:fd:af:32:8c:1c:5f:
                    db:c1:43:39:ce:d4:a3:85:66:f7:68:7d:8e:28:de:
                    9a:37:e4:3d:43:a0:38:44:1b:08:22:50:dd:49:0b:
                    90:da:01:c7:20:c3:b3:4b:ff:d5:ad:f8:45:57:d0:
                    3a:c9:64:58:53:3a:cd:eb:be:79:54:0a:ed:ff:13:
                    81:b5:af:04:15:42:8d:c7:f2:a2:23:31:47:42:29:
                    2e:1a:4e:fc:d3:2b:05:b2:28:02:5a:6a:9c:11:b7:
                    b6:6b:c6:92:99:fd:36:83:e6:a5:d1:38:6f:d3:f5:
                    e9:bb:3f:ce:e3:86:32:b8:f4:59:50:6f:35:35:76:
                    33:3b:21:2b:42:e2:39:62:a3:17:47:a2:ea:35:51:
                    14:1b:ac:03:3d:7a:8c:d8:cf:33:0f:2c:b2:65:7e:
                    09:db:36:67:c1:8b:72:65:5b:74:a6:dc:45:59:60:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5C:9A:32:15:85:9B:85:60:BC:E1:5C:FA:C2:0A:1C:B8:55:4A:B3
            X509v3 Authority Key Identifier:
                keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:48:10:bd:23:a9:b3:61:1b:d0:34:51:eb:f0:58:f4:55:af:
         10:df:21:2e:59:22:c9:a6:78:cd:e5:a2:1c:9c:4f:dc:95:4e:
         0a:0a:f3:0d:a6:79:d9:be:4f:29:57:18:72:e9:a2:ac:62:23:
         0f:8a:d7:26:67:b6:c3:96:2c:8c:a0:99:16:32:3f:b6:90:56:
         2b:c2:0a:0b:fa:b9:95:c3:bf:ff:90:51:20:b6:19:da:31:4a:
         51:00:f3:a4:75:f9:05:ec:57:9d:66:9d:c4:a8:08:10:6a:cf:
         8e:6d:d3:80:5d:d8:2a:6b:e6:15:aa:08:76:10:52:aa:97:aa:
         24:b8:ab:01:94:6d:e8:7c:cb:fe:0f:35:35:6e:44:be:dd:34:
         2b:94:cc:52:c7:22:76:fb:aa:44:60:9f:65:28:95:a0:79:59:
         07:aa:fb:ac:d0:ca:9c:1a:1c:87:c2:7a:34:31:d9:9c:8f:39:
         69:ae:c2:10:50:0e:d7:ab:56:d1:96:49:2d:d5:a1:c5:3a:74:
         48:66:bb:e2:27:83:ff:33:ca:4c:59:f0:f4:78:f8:89:ae:dd:
         f2:ab:e3:17:ef:78:19:ff:3c:85:6b:2a:3a:7f:de:ad:61:6c:
         94:b0:da:59:2e:c7:c2:e3:b9:1e:6e:97:ce:6b:10:15:9b:a2:
         b0:f3:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:50 2025 by rpki-client