Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File:                     4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier:          BB01P4cIdQ9NIl3rYJFumNyPKdNQAVJHJzY/lZhATTc=
Subject key identifier:   5F:7B:3A:4D:28:55:BC:07:1D:AC:8D:06:5D:6B:E3:80:AE:9C:8B:54
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer:       /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial:       019672D470990C38136C2C1C26D49B665737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number:          0BC5
Signing time:             Sat 26 Apr 2025 16:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:47 +0000
Files and hashes:         1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: CEscFx/VPVGKh/WF8tbo5zfJC+y75IPTgfKZ1Ah+6mE=)
                          2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:70:99:0c:38:13:6c:2c:1c:26:d4:9b:66:57:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
        Validity
            Not Before: Apr 26 16:00:47 2025 GMT
            Not After : Apr 27 16:00:47 2025 GMT
        Subject: CN=5f7b3a4d2855bc071dac8d065d6be380ae9c8b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:57:8a:1c:4f:cd:bb:f1:02:fc:8a:1e:31:
                    9a:69:ad:5d:b7:53:4e:88:4d:23:6c:c8:4a:07:fc:
                    1b:7b:99:dc:62:9d:3a:bf:a1:86:0c:8b:51:40:1a:
                    5e:d8:3e:f5:bc:b7:b2:d9:fd:d3:de:46:a5:59:3a:
                    1f:ad:e3:ee:66:f9:8a:fc:4e:94:a0:8c:85:da:34:
                    05:1f:9e:45:f8:16:ec:a0:a9:37:55:55:5b:4c:cd:
                    2e:47:f2:db:f7:13:f2:e7:03:3d:ed:e5:52:f2:db:
                    41:68:ad:b3:a9:c4:96:5e:e9:ed:83:f3:f3:7f:1c:
                    fc:a6:4f:50:20:c1:98:71:2c:76:02:fe:45:5d:17:
                    cb:c9:76:9c:1f:40:7f:b5:57:6f:c7:3e:e2:3a:1a:
                    f5:f8:bd:a3:f7:0c:ab:33:8d:5e:73:fe:74:b2:8d:
                    55:63:db:bd:d4:f9:55:bc:a0:06:1d:a2:d1:d3:46:
                    d3:ad:36:da:06:72:8f:c7:e3:08:ee:0a:e7:ee:97:
                    70:fe:c6:5f:8d:a9:af:bc:41:90:7b:20:3a:94:3c:
                    7d:c2:9b:3c:2d:95:dd:a8:78:ec:db:bf:01:92:cd:
                    07:16:b2:3f:56:c1:59:56:86:1c:a4:2c:e1:c1:fa:
                    ae:6d:a4:68:31:19:cb:a3:f9:cc:1f:cb:3f:c6:b5:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:3A:4D:28:55:BC:07:1D:AC:8D:06:5D:6B:E3:80:AE:9C:8B:54
            X509v3 Authority Key Identifier:
                keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:ae:49:8f:f2:79:7e:32:00:59:09:5b:0e:c1:39:3b:51:
         c5:a6:5b:64:dc:1c:5f:68:51:7a:85:11:2d:32:1a:6b:eb:9d:
         03:9e:e5:77:f3:6e:65:dd:06:fb:51:9d:28:b2:f6:78:42:8f:
         be:9b:33:04:53:fd:a6:99:be:bd:1f:19:a3:48:ac:7f:03:a2:
         13:dc:1f:5d:02:04:c3:cd:65:22:39:4c:b2:68:15:0b:27:f9:
         41:1a:d8:ee:fd:ca:49:0c:4c:97:2a:2c:8d:b4:1b:d5:3a:f7:
         3b:44:9d:7a:49:67:b2:80:56:e6:43:e8:bc:15:25:da:4f:42:
         61:62:6f:eb:80:f9:2c:e5:f4:71:2e:be:c5:65:d3:10:bc:86:
         bb:61:5a:92:90:9b:e4:d7:d8:82:2f:cb:cc:4d:3a:5b:ae:6c:
         c7:35:b8:c4:03:a4:98:31:5e:d8:72:ab:4e:31:2b:ba:1b:4d:
         68:3f:db:d5:21:42:20:fc:d5:9d:a6:3b:93:34:93:69:1c:05:
         a8:3e:0f:eb:ef:70:87:79:2f:72:f5:1e:8c:07:9d:e6:67:5d:
         c0:4f:2a:57:5c:9a:98:22:ac:9a:e4:61:12:8d:d5:c2:09:32:
         89:4f:f9:c3:c6:9e:a0:97:6d:5b:ca:0b:ef:5a:2d:85:da:6a:
         78:3f:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:17 2025 by rpki-client