Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
File:                     eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft (raw, json)
Hash identifier:          NdvRsPNiLRYXkcvRhst3gl8R1/8yILPKQiIcA4VXwHY=
Subject key identifier:   E5:4F:E0:E3:CC:6B:CB:22:E0:B2:3A:AF:51:56:7B:83:6D:9D:D0:11
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Certificate issuer:       /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial:       019691838230553F52567F64A1976BC9F330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
Manifest number:          1521
Signing time:             Fri 02 May 2025 15:00:36 +0000
Manifest this update:     Fri 02 May 2025 15:00:36 +0000
Manifest next update:     Sat 03 May 2025 15:00:36 +0000
Files and hashes:         1: EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa (hash: LgQKet+vbUGnquoaPqj1LFUwk12nwLR01mm8VtlBXOg=)
                          2: XrmbTB36f6No7HgE2Qb2I31Dcv8.roa (hash: HGfAozR7O/ZB1GS1OfPuLa6dsGtZ660AMEUXLcdHqKM=)
                          3: eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl (hash: egGNT9k0wr7s7tmQmc0Txw2GAI94KRytqPjxF5O7t14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:82:30:55:3f:52:56:7f:64:a1:97:6b:c9:f3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
        Validity
            Not Before: May  2 15:00:36 2025 GMT
            Not After : May  3 15:00:36 2025 GMT
        Subject: CN=e54fe0e3cc6bcb22e0b23aaf51567b836d9dd011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:7a:2a:4c:f9:d9:57:69:aa:95:54:f6:fa:
                    2c:12:ca:38:a9:d5:59:f5:a0:fb:2b:8b:84:f0:3c:
                    de:25:62:1d:07:17:5c:53:08:e7:8c:45:10:ab:4e:
                    f8:a8:a3:b5:11:5a:cd:a5:be:b1:85:10:9d:b8:f0:
                    c7:8e:b3:75:36:5a:2b:c6:fa:50:98:ed:cc:50:27:
                    73:8f:d3:38:fe:ff:2a:5c:6a:0c:e3:a6:b1:8a:38:
                    bb:78:ab:47:d0:bf:bf:b7:80:ed:c7:63:4d:ff:4c:
                    73:f1:85:f5:7f:0c:e6:21:55:0e:ca:1b:14:9b:76:
                    a3:07:c5:8d:dc:20:d6:0b:e4:4e:73:2a:8c:5c:94:
                    68:63:62:da:90:1d:ed:78:b8:41:12:be:ee:b3:8a:
                    4c:69:cb:fd:54:09:f1:f3:17:95:22:48:10:46:5c:
                    45:60:85:bc:21:c3:ec:a3:6d:ca:46:80:db:6e:8c:
                    0c:80:8b:76:63:43:a5:f2:b9:c4:b7:86:75:d3:05:
                    cb:54:c2:2b:67:b6:06:02:13:ba:26:b4:18:d6:9e:
                    3d:85:88:23:d7:00:9f:5f:d8:0b:9b:62:a8:43:6e:
                    89:40:7b:e8:0b:0d:ca:60:6a:1d:a6:c0:a6:a1:56:
                    12:24:22:ed:43:ea:4a:b7:51:14:88:ea:75:1a:d3:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4F:E0:E3:CC:6B:CB:22:E0:B2:3A:AF:51:56:7B:83:6D:9D:D0:11
            X509v3 Authority Key Identifier:
                keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:08:18:28:5a:9e:fe:46:06:6d:a2:a3:8b:5f:f9:b0:3f:d4:
         53:49:a9:88:18:5c:63:55:47:ed:66:af:58:f8:9c:73:9c:f5:
         95:42:d0:46:b9:57:72:08:60:a2:5b:e7:6e:5c:3b:bf:b7:dc:
         a8:13:b4:dd:44:ef:9d:4a:56:38:90:d9:e7:70:f5:cd:1b:a1:
         42:bb:16:b5:8f:41:84:b9:b3:f6:f4:41:20:9e:bb:5b:8b:a6:
         e8:40:c7:e0:b1:37:ce:dd:97:7e:f3:fc:13:ba:22:1a:cc:88:
         aa:da:34:b8:48:74:a4:10:fe:7d:34:14:e2:d5:1d:54:48:b5:
         af:bb:cf:ca:f7:3d:44:68:03:b4:58:6b:b3:49:c0:0e:2d:8e:
         3b:ee:5b:59:df:ff:42:d1:02:b2:6e:45:87:98:e7:de:9e:c4:
         c6:5f:72:80:b0:e1:e3:e0:db:63:3f:1a:49:b9:16:f0:eb:1c:
         6e:5a:c5:21:b1:0f:e0:09:8e:0e:4f:d0:1b:f4:ce:fc:5b:66:
         75:bf:d1:fb:22:3f:94:f2:6c:d7:1b:81:cd:1d:b3:12:83:db:
         20:df:ea:d0:4b:c3:f2:74:cf:e6:ea:2d:6e:21:d9:5d:33:b6:
         97:f4:bb:e6:15:de:7f:fd:b3:2d:70:3a:6d:d3:30:1c:3a:f6:
         59:ff:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:25:57 2025 by rpki-client