Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File:                     cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier:          /bO4JZMbslHPfqKBdbU3FdXcDjwVAHJFLOaBpRJogqo=
Subject key identifier:   E3:CE:7E:4B:B7:82:02:E2:09:94:CE:CF:E0:D8:2D:CA:B3:F8:18:78
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer:       /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial:       01967567C2469A25BCCCAB3382B2F6F94EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 04:00:56 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:56 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:56 +0000
Files and hashes:         1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: Aopt7gzmdgJtIh8mzI1z4O9QrFSxlAEK3r8cQoZAxSA=)
                          2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:c2:46:9a:25:bc:cc:ab:33:82:b2:f6:f9:4e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
        Validity
            Not Before: Apr 27 04:00:56 2025 GMT
            Not After : Apr 28 04:00:56 2025 GMT
        Subject: CN=e3ce7e4bb78202e20994cecfe0d82dcab3f81878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:98:e3:22:03:6f:a7:e7:f9:56:02:52:bd:
                    66:e0:8c:40:be:7c:fb:7b:d6:c3:47:fb:9b:63:c8:
                    05:05:27:b2:62:1f:23:62:0a:19:f7:94:f6:bc:4e:
                    db:6a:65:75:90:0a:96:71:dc:c6:d2:86:5b:5b:3c:
                    57:22:39:16:a6:98:fb:af:c7:d7:36:e2:97:39:c2:
                    ba:d0:d1:ee:99:ec:2e:2f:fb:57:e6:6c:6e:be:10:
                    bb:09:0f:aa:97:9f:1c:19:38:d1:71:fd:3b:09:af:
                    94:c8:85:50:b6:e5:16:6f:4d:38:8c:e0:3e:df:80:
                    74:58:62:6c:fe:b6:a5:22:13:9c:6a:d2:77:5d:75:
                    c5:40:72:2f:30:10:34:a9:dd:c5:a7:56:b2:91:2c:
                    d8:9f:cd:77:00:6b:57:e6:31:51:34:d5:64:2f:36:
                    b4:8a:d7:9f:c3:bb:e7:c1:7d:13:b8:66:a9:b8:6d:
                    dd:98:e4:bd:1c:ea:ba:b8:34:09:35:e6:83:a4:da:
                    ef:c2:c4:ad:75:c4:25:e8:fb:53:a7:39:e9:91:2b:
                    be:c3:d2:0d:04:4d:70:9f:c1:43:6f:1a:b6:ed:48:
                    cb:fe:14:3b:74:cb:c1:89:92:eb:60:d1:28:46:83:
                    1d:e1:a6:3d:1f:45:b3:5c:75:07:ec:bf:f0:29:47:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:7E:4B:B7:82:02:E2:09:94:CE:CF:E0:D8:2D:CA:B3:F8:18:78
            X509v3 Authority Key Identifier:
                keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:9c:48:7c:c0:71:37:1e:84:07:95:16:02:12:4a:87:90:
         11:ba:26:db:a0:57:d8:c6:ff:b1:46:ed:18:c0:de:7f:71:4f:
         ab:67:0b:66:d1:99:f4:49:57:cf:28:1a:7f:c8:c9:f3:7f:a9:
         e5:21:ed:5a:23:38:42:c1:31:62:92:a8:6f:ab:74:29:08:8b:
         46:d9:6b:57:7e:3b:1b:a3:04:52:ae:63:1c:56:06:a6:45:41:
         e3:07:5d:ec:dc:5f:d4:d8:2e:08:ab:65:7d:73:b5:6d:86:7b:
         4d:7c:d0:a6:cd:72:17:b8:88:7a:e3:d7:41:cf:37:95:c8:d2:
         24:ed:a4:61:59:1e:a6:c3:53:ef:8c:8c:00:f1:07:35:77:ec:
         77:04:14:1c:aa:c1:38:d7:0c:b4:2a:21:10:92:4d:8a:31:0b:
         65:bb:ae:bc:b6:c3:ac:39:3f:ae:b0:49:73:75:ce:50:a3:3b:
         f3:58:45:27:5e:59:2c:9b:15:96:cd:60:17:4c:85:5c:b5:b7:
         10:6b:26:0d:e3:76:62:ea:85:b9:8e:36:dd:dc:8f:59:17:7f:
         b5:b9:6d:02:33:1f:33:91:2a:b7:71:0b:74:d2:78:87:78:73:
         83:f5:15:28:6f:66:50:bf:b5:3f:ce:b9:8c:1a:a5:1c:e4:d2:
         cd:01:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:39:46 2025 by rpki-client