Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File:                     4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier:          KjGGoHmQoqCtuCBslXCOC+bkR75swMOhYZfJRkUBrJ8=
Subject key identifier:   42:ED:5C:00:D8:F3:25:D9:A1:BE:31:94:AC:B7:58:FB:60:1C:E5:C1
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer:       /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial:       01969DBE6E7E8466CA5B6D8436D1EAC429A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 00:00:25 +0000
Manifest this update:     Mon 05 May 2025 00:00:25 +0000
Manifest next update:     Tue 06 May 2025 00:00:25 +0000
Files and hashes:         1: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: 7Si42IcHZx57ynIhubVNwg1c6VuT0dFvn+7v7pyJVq4=)
                          2: MiDFo4hvMWm2LnOXchY-qMjiF4I.roa (hash: 9GhdLgk27HafhbXSH87ygI5j9h8CqnJUJSkfSDeoTo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:6e:7e:84:66:ca:5b:6d:84:36:d1:ea:c4:29:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
        Validity
            Not Before: May  5 00:00:25 2025 GMT
            Not After : May  6 00:00:25 2025 GMT
        Subject: CN=42ed5c00d8f325d9a1be3194acb758fb601ce5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:04:65:9b:be:ff:14:91:b5:9e:f0:ef:d5:
                    82:e6:c1:c5:fc:b9:e8:17:00:59:1c:d5:70:b5:6f:
                    f7:1e:ba:64:80:e1:80:c5:8c:8f:f0:ec:68:30:15:
                    57:c6:26:94:f3:5a:78:c9:a0:cb:e5:6b:90:77:6f:
                    e4:43:f0:e9:1d:fc:5e:53:93:fa:4b:c0:78:a6:9d:
                    3e:17:77:3a:1b:e7:b1:06:b6:75:f1:74:08:5a:c6:
                    7f:f3:47:17:aa:cd:95:7b:d3:d9:db:3e:cc:13:5e:
                    ad:85:0e:f1:58:80:74:f9:21:30:92:d3:4a:6f:e5:
                    0d:b1:21:68:4a:71:23:2e:a3:37:01:32:54:ae:b4:
                    f6:e3:04:2d:e1:9f:11:42:6d:25:2a:42:a9:7f:b3:
                    84:40:a3:77:f8:77:3b:6b:ce:5b:7f:32:f0:46:0d:
                    e9:80:2f:9b:c1:7f:b1:ae:2b:a5:6c:74:12:54:ba:
                    2a:9f:9f:24:d1:73:16:0d:2c:e4:e9:5b:36:03:3c:
                    c5:79:17:32:cd:17:d4:d7:de:71:a3:9c:48:49:88:
                    2d:3b:1d:23:e1:4d:32:34:2c:76:c6:e6:1b:92:5a:
                    4b:2f:63:74:42:74:75:24:d7:cc:7c:87:3c:48:4e:
                    52:5b:47:60:1a:2f:28:1e:93:f7:54:d2:3d:03:53:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:5C:00:D8:F3:25:D9:A1:BE:31:94:AC:B7:58:FB:60:1C:E5:C1
            X509v3 Authority Key Identifier:
                keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:80:c5:d8:c5:a1:8f:96:a6:0b:a2:99:54:92:71:23:67:d8:
         0e:98:50:dd:90:7b:80:3c:42:0f:66:fc:83:78:a3:41:f4:a3:
         26:e4:a0:7e:08:04:11:1c:6d:d0:c0:b0:7b:67:02:2a:c9:e0:
         96:72:20:2d:7f:ea:36:c0:b8:65:90:6c:da:8c:2c:84:47:9b:
         21:6e:5b:0a:16:1c:f8:4e:af:e0:b8:00:74:7a:c3:4d:26:06:
         48:bf:33:58:e2:cf:1d:df:a1:67:67:79:cc:3b:4a:07:b2:6d:
         4e:01:8e:6c:b7:ea:79:01:60:e9:ad:f5:6d:10:95:d7:f1:03:
         85:ea:46:e7:ba:f4:77:af:ea:ee:d7:42:53:c2:b2:8c:4b:f6:
         0c:5e:01:02:eb:a1:4a:fe:c9:fc:23:31:1b:24:c2:e8:40:e9:
         4d:e9:85:12:22:0f:26:f3:3e:68:14:7d:0d:42:1d:4d:57:1c:
         cd:f9:96:40:22:4d:d1:98:96:59:d4:62:87:53:aa:2d:57:6f:
         56:31:2d:55:0b:de:b1:80:05:26:13:9c:e8:b1:ca:08:22:95:
         3f:27:61:d3:22:69:eb:83:be:75:56:bb:f8:cd:61:68:f0:bf:
         c0:4c:65:75:8e:ac:60:3c:0a:f2:94:be:20:bb:ea:33:4f:92:
         86:c9:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:42:28 2025 by rpki-client