Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          nexMJM1Co2Nb84ymu7nKDzuIPuK6didHyUFdwUYdvyE=
Subject key identifier:   AA:1A:2E:8F:99:38:32:22:5D:33:03:D0:EF:9F:0E:FF:49:50:FC:B5
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       01967E33D88BFBFD98E7E4D5AA60778B23C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          1513
Signing time:             Mon 28 Apr 2025 21:00:48 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:48 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:48 +0000
Files and hashes:         1: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: mWF8TAdg/Mos2y+O9BjsBnPO/Qc69wlVq0vNlgoHLMM=)
                          2: nCGmubCJiSGpdDfmtDjyCBhbirE.roa (hash: DBvXchMzo0c+o7gBr3asd/okXNFiJinaSi6NEP9igBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:d8:8b:fb:fd:98:e7:e4:d5:aa:60:77:8b:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Apr 28 21:00:48 2025 GMT
            Not After : Apr 29 21:00:48 2025 GMT
        Subject: CN=aa1a2e8f993832225d3303d0ef9f0eff4950fcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:0b:07:9e:1f:3b:98:a9:32:35:c1:9a:c5:
                    97:52:d3:11:9c:4f:32:64:e4:64:38:94:c0:76:87:
                    f4:3e:68:35:f9:a2:ca:03:07:40:0b:8c:73:f7:4b:
                    a4:69:0a:64:e8:ab:21:d5:ae:04:a2:c2:22:19:66:
                    f4:ec:9e:e9:2c:1d:4e:b9:8d:aa:aa:f6:ad:99:e2:
                    dc:a3:7f:97:32:1b:a3:7e:dd:68:ef:5e:06:85:cf:
                    52:4b:67:c6:59:48:4f:67:e0:b2:b6:ae:78:a3:7b:
                    41:68:69:9f:3a:6d:68:6a:4a:b5:dd:9a:da:b4:f3:
                    0f:6c:83:64:be:9d:f0:99:cc:2b:58:5a:59:b9:80:
                    0e:79:9f:c7:31:fc:5d:02:50:1a:ed:ce:b2:21:c9:
                    98:09:54:55:ba:0c:b1:7c:0b:67:3f:d0:3e:49:72:
                    26:b4:b3:f3:13:93:15:04:b8:0f:8f:6c:9c:ab:43:
                    59:08:e6:6c:38:3b:71:86:98:e3:20:24:f3:21:4c:
                    bd:f4:4a:b5:d4:9e:48:77:66:c5:71:77:ad:94:b6:
                    84:43:56:34:cd:13:3c:f2:75:05:bc:24:d5:8c:77:
                    50:83:1e:8a:f6:62:4b:aa:35:29:bc:1f:66:b1:a7:
                    3f:75:7e:c4:45:f0:ae:b6:db:2e:94:1a:ba:98:2e:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:2E:8F:99:38:32:22:5D:33:03:D0:EF:9F:0E:FF:49:50:FC:B5
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:03:bf:ef:83:8b:a9:bf:16:fb:76:84:98:54:45:ae:c0:
         fb:b3:45:c0:b6:a6:ad:d7:64:9b:93:c4:a8:a7:9c:e8:09:03:
         77:e8:5a:f5:68:34:17:8b:b6:dc:0e:2e:4e:18:54:a0:97:0a:
         0e:a0:e3:7b:e0:f0:9a:83:ad:49:49:98:08:4f:31:f1:df:96:
         80:b9:31:1f:c4:21:4f:7d:a4:b6:0a:1a:34:6c:57:08:07:d7:
         4d:dd:3a:91:27:7a:07:0b:d3:3e:87:a5:ce:23:88:31:18:84:
         e9:5c:08:99:bd:2f:18:fc:da:fd:29:6c:d0:97:19:e3:3e:3d:
         c8:1a:f4:e2:6f:eb:43:cf:88:f8:a5:cf:ec:61:35:20:a2:68:
         93:ab:f5:a2:cb:e0:f9:89:41:aa:93:c6:d9:63:28:75:75:d6:
         86:05:f7:e1:83:c5:60:d8:3f:58:75:bf:51:84:e6:02:38:ee:
         0f:be:8f:51:ff:85:7b:22:31:d1:99:0f:fd:25:d7:9e:5e:22:
         7e:e5:79:1e:72:b2:eb:16:4b:55:5e:25:0b:ab:a6:ba:5a:de:
         d7:9e:63:4d:fc:ad:43:2c:99:da:d3:d7:77:ac:8d:64:e4:e1:
         27:56:f6:8b:7c:c9:2b:55:6f:1c:e1:8b:50:21:6f:0c:7d:23:
         e1:b9:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:33 2025 by rpki-client