Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
File:                     5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft (raw, json)
Hash identifier:          4w6on5ZJ2lZXyfHWErXCAhcaS20jppGUOscqPGS5sBM=
Subject key identifier:   B4:BD:F5:AB:80:D5:20:98:04:A9:98:E6:0E:5C:50:85:68:E5:FB:5C
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       0196760CDE26F276E4F769DFD52D118B4F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:16 +0000
Files and hashes:         1: 5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl (hash: 7Sd9aArx98KYVJJ8raFGVZ6tk2zA5EvMR1nvpTJqyQI=)
                          2: wRmtKh7_LVqZpnTkWqp_RT-Ok-Q.roa (hash: xFYT+gV/6zuB8l9NaQR5EmwHFpWdWodzHhC57qH0qF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:de:26:f2:76:e4:f7:69:df:d5:2d:11:8b:4f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Apr 27 07:01:16 2025 GMT
            Not After : Apr 28 07:01:16 2025 GMT
        Subject: CN=b4bdf5ab80d5209804a998e60e5c508568e5fb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:4f:22:82:d4:ee:4c:6d:3c:a4:f6:78:f1:
                    22:cf:cf:5f:14:75:30:c6:08:7f:d1:87:d0:2c:2c:
                    9b:d4:2f:6d:09:fd:ea:0b:a7:55:61:71:25:35:b4:
                    6c:24:8a:6d:0a:96:9d:64:d2:37:c5:e2:66:01:a6:
                    cb:ad:b3:24:f9:93:ed:a9:f5:48:0d:b5:b8:c5:0f:
                    2b:fc:2b:1a:70:9d:41:66:23:f3:ae:cb:a2:b6:70:
                    26:15:6c:7b:64:eb:8f:9a:82:73:f4:af:69:22:04:
                    d1:c1:3c:18:f3:04:13:e3:3a:4e:5b:74:9e:2d:87:
                    a9:18:85:1b:3c:ac:12:c4:6a:71:35:da:49:ed:8b:
                    42:ac:71:a3:69:78:0d:db:c0:58:b9:0e:8b:24:a1:
                    8d:9d:37:2f:92:e9:19:cb:27:93:5e:be:06:dd:49:
                    4e:f7:f5:3d:30:12:7d:d1:a2:03:d7:1f:b7:9e:f6:
                    b6:4c:d1:57:a3:14:00:c5:87:9a:0d:dd:5d:7c:e7:
                    2d:c4:17:bd:31:ee:84:1e:4d:f3:0b:10:68:da:8d:
                    16:b7:86:e1:0c:f8:52:95:ec:ae:d6:97:44:bf:10:
                    4f:31:e9:19:22:7b:1b:f2:5c:ea:1c:86:1f:59:58:
                    51:99:94:d3:4c:90:4c:88:05:b9:81:4b:31:4c:9a:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BD:F5:AB:80:D5:20:98:04:A9:98:E6:0E:5C:50:85:68:E5:FB:5C
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:38:87:86:98:bb:e8:25:94:5e:cb:35:74:f4:56:49:25:94:
         4b:be:38:99:87:33:bf:1b:a3:31:46:b6:cf:32:c6:74:92:df:
         dd:43:24:e4:03:96:97:8a:40:ca:86:e4:64:d8:ab:24:11:df:
         18:67:4f:f2:c1:2f:8b:dc:87:d6:c9:c0:a8:a1:c6:7c:52:c2:
         e4:96:61:79:4b:4b:dd:8a:56:d9:bc:7b:dd:4d:b5:26:7e:0e:
         52:b8:40:2d:c0:f4:e4:5e:34:9f:ce:27:53:51:d3:8c:43:c8:
         e1:7d:0e:ce:49:95:5f:37:4a:a7:97:82:5e:49:c0:cb:6f:c2:
         d2:54:27:2a:24:9f:a4:ab:9b:b8:be:4b:13:6f:b4:5d:92:87:
         35:ef:74:e3:a0:d8:c5:bb:0d:85:85:79:8e:4e:1e:d9:fe:b3:
         a3:2b:93:76:f4:f5:47:0b:53:1e:ac:22:d6:40:8b:24:84:de:
         c2:95:73:15:29:63:24:96:75:28:99:58:29:7f:f0:ea:35:db:
         16:a7:f1:f0:0e:93:a1:67:6b:53:d7:f5:07:e9:73:e1:71:ea:
         3b:5c:40:95:99:75:e8:63:9b:c5:71:75:9e:ea:38:f3:1a:a6:
         98:06:59:ca:fe:32:93:18:2e:18:f9:7d:bf:2e:da:12:55:7a:
         7a:1c:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:26:10 2025 by rpki-client